Privacy policy

1. Who is responsible for your information

The operator is Dipendra Chaudhary, operating as Budjett, and is responsible for the personal information processed through this service. For privacy questions, access requests or account deletion, email dipendrac3@gmail.com. Please do not email passwords, verification codes or bank credentials.

2. Information we collect

• Account information: your name, email, account identifier, authentication information, country, preferred currency and timezone. An optional postal address can be saved in Account settings.
• Financial records you provide: wallets or accounts, opening balances, income, expenses, refunds, dates, categories, descriptions, notes, budgets and savings goals. Budjett does not need your bank login or payment-card number for its current free service.
• Technical information: our hosting and authentication providers process IP addresses, browser and device information, request details, timestamps and security or error logs needed to deliver and protect the service.
• Messages to us: contact details and information you include when asking for support.

Please avoid putting sensitive information about yourself or other people into transaction notes. Financial descriptions can reveal more about you than an amount alone.

3. Google sign-in

If you choose Google sign-in, Google shares your basic profile information, including your name, email address, account identifier and, where provided, profile picture. Supabase handles authentication for Budjett and may store this information in your authentication profile. Budjett uses it to create or identify your account and sign you in.

Our Google sign-in integration does not request access to your Gmail messages, Google Drive files, contacts or bank accounts. We do not sell Google user data, use it for targeted advertising or use it to train general-purpose AI models. Budjett’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can remove Budjett’s access through your Google Account connections settings. Removing that connection does not automatically delete financial records already saved in Budjett; contact us to request account deletion.

4. Why we use information

We use account details and financial records to provide the features you request: signing in, saving records, displaying balances and budgets, applying your preferences, exporting records and sending essential account emails. Where UK data protection law applies, our basis is performance of our agreement with you, including steps you ask us to take before creating an account.

We use limited technical and support information for our legitimate interests in operating a reliable service, investigating errors, preventing abuse and answering questions. We consider the effects on your privacy when doing so. We may also retain or disclose information where needed to meet a legal obligation. Where a future optional feature requires consent, we will explain the processing and ask before enabling it.

5. Providers and sharing

We use Vercel to host the website, Supabase for authentication and database storage, Resend to deliver verification and account emails, and AWS for private encrypted database backups in Ireland, operational alerts and the optional AI processing described below. These providers process the information needed for those functions. Google processes sign-in requests when you choose that option. Email delivery includes your recipient address, message content and delivery status.

We do not sell your personal information or share your financial records with advertisers. Access may be needed by the operator to resolve support or security issues, or disclosed where required by law. Links to external news or other websites take you to services governed by their own privacy policies.

These providers operate internationally, so information may be processed outside your country. The location and protections depend on the provider and service configuration. Contact us for information about the processing locations and applicable transfer arrangements for your data.

6. Cookies, location and browser storage

Authentication cookies keep you signed in and support secure sign-in. A temporary onboarding cookie carries your country, currency and timezone choices during Google sign-in for up to ten minutes. Older versions stored a region preference cookie for up to one year; this is no longer used and can be cleared in your browser.

Vercel can infer an approximate country from your IP address to suggest a site region and starting currency. We do not request precise GPS location. You can choose your account country and currency when signing up and change your saved preferences in Account settings.

The separate browser previews store their records in your browser’s local storage. Those preview records are not the same as records saved to a signed-in account. You can reset a preview or clear its site data in your browser. Disabling cookies or storage can prevent sign-in or saving from working. Budjett currently does not include advertising trackers in the app.

7. Optional AI assistant

The calculated assistant uses recorded figures without sending them to an external AI model. When available, Budjett AI sends your question, up to three previous exchanges in the current chat, and a summary for the month requested in your message or selected in the chat, with recorded currencies kept separate to Amazon Nova 2 Lite when you enable AI for your account and send a message. This preference is remembered and can be disabled in chat Privacy settings. You can withdraw that choice before sending another message. The summary includes income, expenses after refunds, net cash flow, record count and up to twelve category names and totals. We exclude account identifiers, your name and email, merchant descriptions and transaction notes from the generated summary. Information you type in your question or category names can still contain personal details; please avoid including sensitive information.

We use AWS Bedrock through Ireland with EU-only cross-region inference. We do not use the global inference profile. You can use the rest of Budjett without sending AI requests. We save chat questions and answers privately in your Budjett account so you can return to conversations. You can delete individual saved chats; account deletion removes them as well. Deleted chats may remain in restricted database backups until those backups expire. We also retain a user-linked request timestamp and a global spending reservation to enforce trial limits and prevent abuse. Deleting an account removes its link to those request records but does not reset the global allowance. AI answers may be inaccurate and cannot change your transactions or carry out financial actions.

8. How long information is kept

We keep account information and saved financial records while your account remains open so you can use your history. You can delete individual entries using the available controls and contact us to close your account and request deletion. Signing out does not delete your account.

Some information may need to remain for unresolved support requests, security investigations, legal obligations or legal claims. Retention depends on whether the matter remains open, the information needed to resolve it and any applicable legal period. Provider logs and backup copies have separate retention cycles; deletion from the live service may not immediately remove those copies. We can explain applicable retention details when handling your request.

9. Your choices and rights

You can change profile preferences and download a CSV of transactions through the dashboard. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain uses of your information. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Email dipendrac3@gmail.com to make a request. We may need to verify your identity and will explain any lawful limits. You may complain to your local data protection authority; in the UK, this is the Information Commissioner’s Office (ICO).

10. Young users and policy changes

If you are under the age at which you can agree to an online service in your country, involve a parent or guardian before creating an account. Parents and guardians can contact us about a child’s information. Please do not enter another person’s financial records without permission.

We will update the effective date when this policy changes and provide notice of material changes through the service or account email as appropriate. New purposes for using information will be explained before they take effect.