budgeroo

privacy policy

last updated

Obverse Labs operates Budgeroo and is responsible for the personal data described here. Contact contact@obverselabs.com about privacy or your rights.

the data we collect

You give us your account email, name, sign-in details and preferences. When you use the app, we store the envelopes, amounts, transactions, notes, schedules, savings goals and budget history you enter. We do not connect to your bank accounts or receive your full payment card details.

Apple or Google may provide an account identifier, name and email when you use their sign-in service. RevenueCat and the stores provide subscription status, purchase identifiers and billing events. Support messages contain the information you choose to send.

We receive technical data such as request identifiers, IP addresses in hosting access logs, app and device versions, usage events and error reports. Product analytics use a pseudonymous account identifier. We exclude financial values, names, email addresses, envelope names and transaction notes from analytics properties. The app sends usage events and error reports only after you continue past its welcome screen, which tells you so, and stops as soon as you turn off “share usage data” in the app settings.

why we use it

We use account and budgeting data to provide the service you request, save your budget, authenticate you and answer support requests. This processing is necessary to perform our agreement with you.

We use limited technical data to protect accounts, investigate faults and understand app features. Where applicable, we rely on legitimate interests in maintaining a secure, useful service, balanced against your rights. First-party usage analytics and error reports in the app also rely on our legitimate interest in understanding and fixing the app, with no tracking. The welcome screen tells you about them before anything is sent, and the “share usage data” setting turns them off at any time. We also process records when needed to meet legal obligations.

providers and sharing

We share only what each provider needs for its role. We may disclose records when legally required, to protect rights and security, or as part of a business transfer with appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising. We do not use advertising identifiers or track you across other companies' apps.

international processing

Our main app hosting and product analytics are in the EU. Some providers and their support teams may process data elsewhere. Where data protection law requires safeguards for a transfer, we use an applicable adequacy decision or contractual safeguards such as standard contractual clauses. You can contact us for details.

retention and security

We keep account and budgeting records while your account is active. Account deletion removes them from active systems and requests deletion of your RevenueCat customer record. In the production app, deletion also erases your analytics person and its events in PostHog. Two pseudonymous deletion records remain for 13 months, with no email or budgeting data: an audit entry with the date and a keyed hash (HMAC-SHA-256) of your account identifier, and a plain SHA-256 hash of the identifier that stops a deleted account from being used again. Someone who already knows your identifier could match the plain hash to it. Operational logs are retained for up to 30 days. Backup copies expire within the configured backup schedule, currently up to 35 days.

Support correspondence and records needed for legal obligations or disputes may be kept for as long as that purpose requires. The stores retain their own payment records. We use encrypted transport, access controls and restricted infrastructure permissions. No system can guarantee absolute security.

your rights

Depending on where you live, you can ask to access, correct, delete or receive a portable copy of your personal data. You may also restrict or object to processing, including processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. We do not make solely automated decisions that have legal or similarly significant effects on you.

Send a request to contact@obverselabs.com. We may verify your identity using information needed to protect your account. We normally respond within one month under EU or UK rules. We will explain any lawful extension or reason we cannot fully meet a request. You can complain to your local data protection authority.

california privacy rights

Where California law applies, you can request the categories and specific pieces of information we hold, their sources, purposes and recipients, and request correction or deletion. You can use an authorized agent, subject to verification. We will not discriminate against you for exercising these rights and normally respond within 45 days, with notice of any permitted extension.

The categories described above include identifiers, commercial subscription information, internet or device activity and information you enter into your budget. They also describe our collection and provider disclosures during the preceding 12 months, to the extent the service has been operating. We do not sell or share data for targeted advertising, and do not use sensitive personal information to infer characteristics about you.

this website

This site has no analytics, tracking cookies, external fonts or third-party embeds. Hosting access logs support security and delivery. Email links open your email app and store help links take you to Apple or Google when you choose them.

children

The service is not directed to children under 13. If local law requires a higher age for independent use, that age applies. Contact us if a child has provided personal data so we can investigate and remove it where required.

deletion and changes

You can delete your account in the app or by email. Canceling a subscription is separate. We update the date above when this policy changes and provide additional notice of material changes where required.