Privacy Policy

In short

The app stores the budget you type in yourself. There are no ads, no analytics, no trackers. We do not sell your data or share it for advertising. The app has no bank connection and no access to your cards or accounts.

The app requires a paid subscription. Payment is collected by Apple — we never receive or store your card details.

Who is responsible

The data controller is Artem Starodubtsev, a sole trader based in Spain, reachable at support@budget-control.app. We have not appointed a data protection officer; write to the same address about anything in this policy.

What we process

Account data. For email sign-up: your email address and password. The password is stored only as an irreversible hash. You may sign in as a guest instead — that creates an anonymous account with no email.

You can also sign in with Apple or Google. In that case we receive the email address and name that the provider passes on, and an identifier for your account with them; we never see your password for those accounts. Apple lets you hide your real address, and then we only ever hold the forwarding address Apple generates for us. Deleting your account also revokes our access to your Apple account.

Budget data. Everything you enter yourself: expenses (title, amount, date, category, note), income sources, accounts, savings, shopping lists. All of it is entered manually — nothing is imported from banks automatically.

Subscription data. Whether a subscription is active and when it expires — without this the app cannot tell whether to grant you access. Apple confirms the purchase and its expiry to us; we never receive card numbers, bank details or billing addresses, which only Apple handles as the seller. The subscription flag is stored on the budget so that members of a shared budget use the app under one subscription.

Technical. The date you joined a budget and a last-modified marker. We collect no location, contacts, photos, advertising identifiers or usage history.

Why

Solely to make the app work: to show your budget, sync it across your devices and the members you invited, restore it from a backup, and determine whether your subscription is active. Never for advertising, profiling or resale.

The legal basis is the performance of our contract with you — the Terms of Use (Article 6(1)(b) GDPR). Without this data the app cannot work.

Service providers

We share data only with providers that run parts of the app for us, and only as far as each one needs:

• Supabase — database, sign-in and sync; stores your account and budget data (see below).
• Apple — sells the subscription and collects the payment as the seller.
• RevenueCat — checks with Apple whether your subscription is active. It receives a random account identifier and purchase records, not your budget data or payment details. It is based in the United States; the transfer relies on the safeguards RevenueCat provides under the GDPR, such as Standard Contractual Clauses.
• Cloudflare — hosts this website and receives email sent to our support address.
• Apple and Google — only if you choose to sign in with them; they confirm your identity to us and tell us your email address and name.

Shared budgets

You can open a budget to other people by giving them an invite code. Anyone who joins can see and edit every record in that budget. The owner can see members' email addresses, require approval for new members and remove any member. Sharing the code means sharing the budget — treat it like a password.

Where data is stored

On Supabase servers (Amazon Web Services infrastructure), in the West Europe — London (eu-west-2) region, United Kingdom. The UK sits outside the European Economic Area, but the European Commission has recognised its level of data protection as adequate, so transfers there are lawful without additional safeguards.

A copy is also cached on your device so the app works offline. The server keeps up to 7 daily and 4 weekly backups per budget; older ones are deleted automatically.

Retention

For as long as your account exists. Ending a subscription does not delete anything: your records stay and become available again if you resubscribe. To erase them, delete your account as described below. You can take a copy of your records at any time, with or without an active subscription: Settings → Export data.

Deleting your account

In the app: Settings → Delete account. If you own a budget, the whole budget is deleted for every member, including backups. If you are a member of someone else's budget, only your membership is removed. Your account is then erased. This cannot be undone.

Your rights

You may obtain a copy of your data, correct it, or delete it. The app exports a copy for you (Settings → Export data), and this works without an active subscription. Correction is available in the app; deletion via the button above. For anything else, write to the contact address above. If you are in the EEA or the UK, you may also lodge a complaint with your data protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

Children

The app is not directed at children under 16, and we do not knowingly collect their data.

Changes

We will update this document and its effective date when things change. Material changes will also be surfaced in the app.