Privacy Policy

1. Introduction

BudgX ("we," "our," or "us") respects your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered finance application.

2. Information We Collect

We collect information you provide directly (email, name, password) and information generated through use of the Service, including:

• Transactions you add (amount, date, description, category)
• Budgets and financial goals
• Chat messages and AI interactions
• Account and preference settings

3. How We Use Your Information

We use your information to provide and improve the Service, including:

• Powering the AI chat, insights, and categorization features
• Displaying your budget, goals, and spending overview
• Sending notifications (e.g., budget alerts, weekly insights) if you opt in
• Providing customer support and responding to your requests
• Ensuring security and preventing fraud
• Complying with legal obligations

4. AI and Third-Party Services

We use the following third-party services to operate BudgX:

• Plaid — to securely connect your financial accounts (read-only). Bank credentials are never stored by us; Plaid is SOC 2 Type II compliant.
• Stripe — to process subscription payments.
• Anthropic — to power AI categorization, chat, and insights. Transaction context may be sent to deliver personalized guidance.
• Firebase — for authentication and data storage.

Our AI features use these providers to process your messages and generate responses. We require them to handle your data in accordance with applicable privacy and security standards.

5. Data Sharing

We do not sell your personal information (including under CCPA). We may share data with service providers who assist in operating the Service (hosting, analytics, AI), under confidentiality agreements. We may disclose information if required by law or to protect our rights and safety.

6. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and at rest. Sensitive data is stored securely; financial account access is handled by Plaid with bank-level security (e.g. 256-bit encryption, SOC 2 Type II). Access to your data is limited to authorized personnel and systems necessary to provide the Service.

7. Data Retention

We retain your data for as long as your account is active. After account deletion:

• Personal and account data are deleted or anonymized within 30 days.
• Billing records may be retained for up to 7 years for tax and legal purposes.
• Anonymized or aggregated analytics may be retained indefinitely where permitted by law.

8. Your Rights (GDPR & CCPA)

Depending on your location (including the EU under GDPR and California under CCPA), you may have the right to:

• Access — request a copy of your personal data.
• Portability — receive your data in a machine-readable format (e.g. JSON export).
• Correction — update inaccurate information in your account.
• Deletion — request permanent deletion of your account and data (right to be forgotten).
• Opt-out — unsubscribe from marketing and control notification preferences.

To exercise these rights, go to Settings → Privacy & data in the app to export your data or delete your account. You can also contact us at privacy@budgx.app.

9. Cookies and Similar Technologies

We use cookies and similar technologies for authentication (e.g., session cookie), preferences, and to improve the Service. You can adjust browser settings to limit cookies, but some features may not work properly without them.

10. Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with data, please contact us.

11. Changes

We may update this policy from time to time. We will notify you of material changes via email or in-app notice. Your continued use after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at privacy@budgx.app or through the app.