1. Introduction

Budget Manager ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our budget management service.

2. Information We Collect

Personal Information

We collect information that you provide directly to us, including:

Account information (name, email address, password)
Profile information (profile picture, preferences)
Financial data (transactions, categories, budgets)
Uploaded documents (receipts, bank statements)

Automatically Collected Information

When you access our Service, we may automatically collect:

Log data (IP address, browser type, operating system)
Device information
Usage data (features used, time spent)
Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for various purposes:

To provide, maintain, and improve our Service
To process your transactions and manage your account
To send you technical notices, updates, and support messages
To respond to your comments, questions, and customer service requests
To analyze usage patterns and trends
To detect, prevent, and address technical issues and security threats
To comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Your financial data is encrypted both in transit and at rest. We use industry-standard encryption protocols to ensure your data remains secure.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

With your consent
With service providers who perform services on our behalf
To comply with legal obligations or respond to legal requests
To protect the rights, property, or safety of Budget Manager, our users, or others
In connection with a merger, sale, or acquisition of all or a portion of our business

6. Your Rights and Choices

You have the following rights regarding your personal information:

Right to Access

You can access and review your personal information at any time through your account settings.

Right to Correction

You can update or correct your information through your account settings. This includes updating your name, email, profile picture, and preferences.

Right to Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (JSON). To exercise this right:

Navigate to Settings in your account
Click the "Request My Data" button in the Data & Privacy section
Your data will be compiled and downloaded as a JSON file
This export includes your profile information, categories, transactions, and all associated data

Right to Erasure (Right to be Forgotten)

You have the right to request the deletion of your personal data. To exercise this right:

Navigate to Settings in your account
In the Data & Privacy section, click "Delete My Account"
Confirm your intention by typing "DELETE" when prompted
This will permanently delete your account and all associated data including:

Your profile information
All categories and budgets
All transactions and financial records
Uploaded receipts and documents
Session and authentication data

Note: This action is irreversible and cannot be undone

Right to Opt-out

You can opt-out of certain data collection and marketing communications. You can manage your cookie preferences through our cookie consent banner.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

11. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements.

12. GDPR Compliance

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Budget Manager is committed to complying with GDPR requirements.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract: To perform our contractual obligations to provide you with our Service
Consent: Where you have given us explicit consent to process your data
Legitimate Interests: To improve our Service and ensure security
Legal Obligation: To comply with applicable laws and regulations

Your GDPR Rights

Under GDPR, you have the following rights:

Right of Access: Access your personal data through your account settings
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data via the "Delete My Account" feature
Right to Data Portability: Download your data via the "Request My Data" feature
Right to Restrict Processing: Request limitation of data processing
Right to Object: Object to processing of your personal data
Right to Withdraw Consent: Withdraw previously given consent at any time

Data Processing and Third Parties

We use Supabase for database hosting and data storage. Supabase acts as our data processor and complies with GDPR requirements. We have appropriate data processing agreements in place with all third-party service providers.

Exercising Your Rights

You can exercise most of your rights directly through your account settings. For any additional requests or questions regarding your GDPR rights, please contact us using the information provided in the Contact Us section.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us through our support channels or at the contact information provided on our website.