Privacy Policy

Last Updated: August 2026

At Budget Sense, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our application or website (the "Service").

1. Data Controller

For the purposes of the EU General Data Protection Regulation (GDPR) and applicable data protection laws, the Data Controller responsible for your information is Budget Sense, based in Sofia, Bulgaria.

2. Information We Collect

Account Information: When you create an account, we collect your display name, email address, and an encrypted hash of your password to manage authentication and personalize your profile.
User-Input Financial Data: We store the numerical entries, categories, transaction names, and budget parameters you manually type into the application to provide reporting and tracking features.
Location Data (Optional): When adding a transaction, you may choose to attach GPS coordinates (precise location) to your entries. This data is collected only when you grant location permissions on your device.
Technical & Usage Data: We may collect basic diagnostics (such as app crash logs or device operating system versions) to maintain app stability and performance.

3. How We Use Your Data

To provide, operate, and maintain core Budget Sense features.
To attach geographical tags to your transactions for future spatial reporting and search features.
To authenticate your identity during login and prevent unauthorized account access.
To respond to your support requests or communicate important updates.
No Data Sales: We do not sell, rent, or trade your personal, location, or financial data to third parties or advertisers.

4. Data Storage & Security

Encryption: Your password hash and account data are protected using standard encryption protocols in transit and at rest.
No Direct Bank Access: Budget Sense relies purely on user-entered data. We never ask for, access, store, or process online banking credentials, credit card numbers, or live bank account feeds.
Cookies & Local Storage: We use strictly necessary session tokens and local storage solely for authentication, security (via Cloudflare), and language preferences. We do not use tracking or advertising cookies.

5. Your Rights Under GDPR

As a user located in the EU (or under GDPR provisions), you have the following rights regarding your personal data:

Access & Export: The right to request a copy of the personal data we hold about you.
Rectification: The right to correct inaccurate or incomplete data.
Erasure (Right to be Forgotten): The right to request the complete deletion of your account and all associated manual data entries at any time via app settings or by contacting us.
Data Portability: The right to obtain your data in a structured, commonly used format.

6. Data Retention

We retain your account details and manual entries for as long as your account remains active. If you choose to delete your account, your personal data and financial entries will be permanently removed from our active database.

7. Changes to This Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy regularly.

8. Contact & Complaints

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can reach us at:
[email protected]

You also have the right to lodge a complaint with the Bulgarian supervisory authority:
Commission for Personal Data Protection (CPDP) in Sofia, Bulgaria.