Privacy policy
Budgie is a family finance planner. This policy explains what we collect, why, where it is kept and the choices you have. Budgie is in private beta, so this policy will change as the product grows; we will show the date of the latest version at the top.
The short version
- Only the people you invite can see your household.
- No ads, no selling or renting of data, no third-party trackers or analytics.
- Receipt photos are read on your phone. The picture never leaves the device.
- We use your data only to run Budgie for you.
What we collect
| Data | Why |
|---|---|
| Your Google account name, email address and profile picture, received when you sign in with Google | To identify you and show who made each entry. We never see your Google password. |
| What you enter: transactions, bills, budgets, goals, categories and notes | This is the service itself. |
| Household membership and invites | To decide who can see and change a household. |
| Text you type into the assistant | To turn it into entries or answer your question. |
| Feedback you send, with the screen, app version and device type | To fix problems and improve Budgie. No ledger data is attached. |
| Notification subscription, if you turn on reminders | To send bill reminders to your device. |
| Technical logs: IP address, browser type, request times and errors | Security, abuse prevention and fixing faults. Kept for a short period. |
Budgie uses one cookie, to keep you signed in. It is not used for tracking or advertising.
Who processes data for us
- Cloudflare hosts Budgie, stores its data and runs the AI features (Cloudflare Workers AI). Your entries are not sent to any other AI provider.
- Google provides sign-in. Budgie asks Google only for your basic profile and email address.
- Your browser's push service (for example Apple or Google) delivers reminders, if you turn them on.
We do not share your data with anyone else, except where the law requires it.
Security
All traffic is encrypted with HTTPS. Each household's data is kept in its own separate store, and every request is checked against your household membership. Changes are recorded in an audit log within the household.
How long we keep data
We keep your household data while your account is active. Sign-in sessions expire after 60 days without use. If you ask us to delete your account or household, we delete it within 30 days, apart from anything the law requires us to keep.
Your choices and rights
You can ask for a copy of your data, a correction or deletion at any time by writing to privacy@thebudgie.money. A household owner can remove members from Settings. We handle personal data in line with Malaysia's Personal Data Protection Act 2010.
Children
Budgie is meant for adults managing a household. It is not directed at children under 13.
Contact
Questions about privacy: privacy@thebudgie.money.