Your financial data is yours.

Effective July 10, 2026

This Privacy Policy explains how Budget Buddy ("we", "us", or "the service") accesses, uses, stores, shares, and deletes information when you use the Budget Buddy mobile app and related services.

Information we collect

Account and profile information

We collect the email address and profile information you provide when creating a Budget Buddy account, together with app settings, budgets, categories, conversations, and notification preferences.

Google user data

When you choose to connect Gmail, Budget Buddy requests the restricted gmail.readonly scope. The service searches for supported bank transaction notifications and processes the sender, subject, and message body to extract transaction details. Budget Buddy does not send, modify, or delete Gmail messages.

Raw Gmail messages are processed transiently and are not stored in the Budget Buddy database. We store the resulting transaction fields, which may include merchant, amount, currency, transaction date, bank, and masked card or account details. We also store OAuth access and refresh tokens so automatic sync can continue until you disconnect Gmail or revoke access.

How we use information

Import and deduplicate transactions from supported bank notifications.
Categorize expenses, calculate budgets, and provide spending insights.
Operate, secure, troubleshoot, and improve the service.
Send notifications you have enabled.

For AI categorization, Budget Buddy may send merchant names and the available category names to Microsoft Azure OpenAI. Raw Gmail message bodies and OAuth tokens are not sent to the AI service. Google user data is not used to train generalized AI or machine-learning models.

Service providers and sharing

We use service providers only to operate Budget Buddy: Google for Gmail access, Supabase for authentication and database hosting, Fly.io for API hosting, Expo for app delivery and notifications, and Microsoft Azure OpenAI for merchant categorization. These providers process data on our behalf under their applicable agreements. We do not sell Google user data or personal information, and we do not use it for advertising.

We may disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate notice and safeguards.

Google API Services User Data Policy

Budget Buddy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security and retention

We use access controls, encrypted network connections, managed infrastructure encryption at rest, and tenant-level database policies to protect data. No system is completely secure, and we continuously work to reduce risk.

We retain account and transaction data while your account is active or as needed to provide the service and meet legal obligations. Operational logs are retained for a limited period and do not intentionally include Gmail message bodies or OAuth tokens.

Your controls and deletion

Disconnect Gmail: Use Gmail settings inside Budget Buddy. This revokes Google access and deletes the stored OAuth connection.
Revoke Google access: You can also remove Budget Buddy from your Google Account connections.
Delete transactions: Delete imported expenses from within the app.
Delete your account or all associated data: Email rcontreras@pixelflow.agency from your account email. We will verify the request and delete eligible data.

Children

Budget Buddy is not directed to children under 13, and we do not knowingly collect their personal information.

Changes and contact

We may update this policy as the service changes. The effective date above will identify the latest version. Questions, privacy requests, and deletion requests can be sent to rcontreras@pixelflow.agency.