PRIVACY POLICY

Budgetly Application

Effective date: April 7, 2026

Budgetly ("we", "us", "our") respects your privacy and is committed to protecting the personal data you provide while using the Budgetly application ("the App"). This Privacy Policy explains what information we collect, how we use, store, and protect it.

By using the App, you agree to this Privacy Policy.

1. Data we collect

1.1. Personal data

Full name, email address. When signing in via Google Sign-In — name, email, and Google identifier.

1.2. Financial data

Accounts (name, type, currency, balance), transactions (expenses/income — amount, category, date), transfers between accounts, budgets, savings plans, categories, pension data. Receipt images are processed on the server and are not stored after recognition.

1.3. Bank synchronization data

API tokens for Monobank and PrivatBank for transaction synchronization. We do not store bank logins or passwords.

1.4. Subscription data

Subscription type, status, and dates. For Apple In-App Purchase, Apple processes the payment; we do not receive bank card details.

1.5. Technical data

Household settings, device type, and authorization token (stored in Keychain on iOS).

2. How we use data

Exclusively to provide functionality (financial tracking, dashboard, statistics, budgets), authorization and security, bank synchronization, receipt recognition, currency conversion (NBU rates), subscription management, and data synchronization.

We do not sell data to third parties and do not profile users for advertising networks.

3. Third parties

Google Sign-In (Google LLC) — authorization. Policy: https://policies.google.com/privacy
Monobank API (JSC "Universal Bank") — transaction synchronization.
PrivatBank API (JSC CB "PrivatBank") — transaction synchronization.
Apple Inc. — In-App Purchase subscription processing. Policy: https://www.apple.com/legal/privacy/
NBU — currency rates (we do not transmit your data to NBU).

We do not use advertising SDKs or third-party analytics trackers.

4. Storage and protection

Server data is stored in PostgreSQL on secured servers. Transmission uses HTTPS (TLS 1.2+). Passwords use bcrypt. Tokens have limited validity. Bank tokens are encrypted.

Data is stored for the duration of the account. Upon deletion, permanent removal happens after a 30-day recovery period.

5. Your rights

Access — view and export data in JSON.
Correction — edit data in the application.
Deletion — via "Settings → Delete Account" with a 30-day recovery window.
Portability — JSON export/import.
Revocation — disconnect bank synchronization and sign out.

6. Children's privacy

The App is not intended for children under 13.

7. Changes

We may update this Policy. We will notify you of significant changes via the App or email.

8. Contact

Email: support@budgetly.tech
Website: https://budgetly.tech/en/