Privacy policy

Budgetmuze is run by [operator name and address: to be filled in before launch]. Questions about your data: [contact email: to be filled in before launch].

• Your account: your email address, a scrambled form of your password (we never see the password itself), your display name, time zone, currency and colour theme. If you sign in with Google, we get your Google email and name.
• Your records: what you enter. Accounts, transactions, credit cards, debts, bills and subscriptions, budgets, savings goals, Dreams and their reviews, categories and notes.
• Friends and splitting: your friend code and connections, split bills you create or are part of, the names of guests you add, and bank or e-wallet details you choose to save for people to pay you.
• Pip: your wardrobe, outfit, streak, visit count, token balance and history, and your sharing choices.
• Security: a scrambled form of your PIN if you set one, your two-step sign-in setup and backup codes (stored scrambled), and a list of your signed-in devices with the browser name and last-active time, so you can sign one out.
• Billing: your plan, its status and renewal dates, and the Polar customer and payment references. Your card number is entered on Polar's form and goes to Polar only; Budgetmuze never receives or stores it.
• Reminder emails: only if you switch them on. We use your email address and what is due.
• Technical logs: our hosting keeps ordinary request and error logs (such as IP address, page and time) for running and securing the service.

• We don't sell your data, and we don't show ads.
• We don't use advertising or analytics trackers in the app.
• We don't connect to your bank accounts.
• We only look at your records when it is needed to keep the service running or to help with a problem you have asked us about.
• What a friend can see of you is off until you turn it on, and it never includes money amounts.

• To provide the app you signed up for: showing your records, totals, reminders, friends and Pip.
• To take payment for Premium and token packs, and to give you what you bought.
• To keep the service secure and to prevent abuse, such as token farming and sign-in attacks.
• To send reminder emails you asked for, and service messages such as sign-in and password emails.
• To meet legal duties, such as keeping payment records.

We use a small number of providers to run Budgetmuze. They may only use your data to provide their service.

• Supabase: database and sign-in. Your data is stored in Singapore.
• Vercel: hosting the app (Singapore region).
• Polar: payments for Premium and tokens, and the billing portal.
• Resend: sending reminder emails, once turned on, and only to people who opted in.
• Google: sign-in with Google, when offered and only if you choose it.
• Frankfurter (European Central Bank reference rates): our servers ask it for exchange rates. We send currency codes only, never anything about you.

Some providers may handle data in other countries. We only share what each one needs, and we don't share your records with anyone else unless the law requires it or you ask us to.

Budgetmuze sets one sign-in cookie so you stay signed in; it is needed for the app to work. It also saves a few settings in your browser's own storage: your colour theme and palette, whether the wishing stars are on, your last-used form choices, and which celebrations you've already seen. There are no advertising or tracking cookies.

We keep your data while you have an account. When you delete your account in Settings → Your data, your account and records are permanently removed. Copies in backups can remain for a limited time before they are overwritten. Polar and we may keep payment and tax records for as long as the law requires.

• See and export: Settings → Your data downloads your transactions as a CSV. Write to us if you want a copy of the rest.
• Correct: edit your details and records in the app, or ask us.
• Delete: delete your account yourself, any time, in Settings → Your data.
• Control sharing and emails: Settings → Friends & sharing and Settings → Reminders.
• You may also have the right to object to or restrict some uses of your data, to take it elsewhere, and to complain to your local data protection authority. Write to us and we will respond.

Everything travels over an encrypted connection. Each person's records can only be read by that person's account, and the database enforces this itself. You can add a PIN lock and two-step sign-in in Settings → Security. No system is perfectly secure, so if something goes wrong that affects you, we will tell you promptly.

Budgetmuze is not for anyone under 16. If you think a younger person has made an account, write to us and we will remove it.

If we change how we use your data in a way that matters, we will tell you in the app or by email first. The date at the top shows when this page last changed. Our Terms of use are the other half of the picture.