Privacy policy
Last updated: 12 November 2026
Budgy is a budget tracking app built to work on your phone first: you can use it without an account, and your data then stays only on your device. This page explains which data is processed, why, and what your rights are.
1. Who is responsible for your data
The Budgy app is published by Oussama Boualem, the data controller under the EU General Data Protection Regulation (GDPR).
Contact: support@budgy-ia.com
2. Without an account: everything stays on your phone
Your transactions, categories, recurring items, budgets and settings are stored in your phone’s storage. We have no access to them. They are erased if you uninstall the app.
3. With an account (optional): cloud backup
If you create an account, we process:
- Your email address and your password (stored only in encrypted, irreversible form); with “Continue with Google”, the email address and name provided by Google;
- A copy of your Budgy data: transactions (amounts, currencies, dates, notes), categories, recurring items, budgets and main currency, to back them up and sync them across your devices;
- Technical data needed to run and secure the service (sign-in times, IP address in the hosting provider’s logs).
Why: to provide the backup and sync you asked for (performance of the service, GDPR art. 6.1.b) and to protect the service against abuse (legitimate interest, art. 6.1.f).
4. What we don’t do
- No advertising, no selling or renting of your data.
- No analytics or advertising trackers in the app.
- No connection to your bank: you enter your transactions yourself.
- No financial advice: Budgy helps you see clearly, without telling you what to do with your money.
5. Service providers and hosting location
| Provider | Role | Data |
|---|---|---|
| Supabase | Hosting of accounts and backups, servers in the European Union | Email, backed-up Budgy data |
| Brevo (France) | Sending confirmation and password reset emails | Email address |
| “Continue with Google” sign-in, if you choose it | Email, name | |
| Currency API (through a content delivery network) | Daily exchange rates | No personal data; your IP address is visible to the network when rates are downloaded |
| Google Play / Apple | Premium purchases, once available | Handled by the store; we never receive your payment details |
These providers act on our behalf and may not use your data for their own purposes. If one of them processes data outside the European Union, the transfer is covered by the safeguards required by the GDPR (standard contractual clauses or an adequacy decision).
6. Retention
- Your account data and backup are kept for as long as your account exists.
- When you delete your account, they are erased immediately from the database. The hosting provider’s technical backups then expire automatically within 30 days at most.
- When you sign out, data is erased from your phone and stays in your backup, which you get back by signing in again.
7. Security
Traffic between the app and our servers is encrypted (HTTPS). Each account can only read and change its own data, through access rules enforced by the database itself.
8. Your rights
You can at any time ask to access, correct, erase or export your data, or object to its processing. Write to support@budgy-ia.com from your account’s email address; we reply within one month at most.
You can delete your account directly in the app: Settings › Account & backup › Delete my account (see the dedicated page).
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority of your country.
9. Children
Budgy is not intended for children under 15, and we do not knowingly collect their data.
10. Changes
If this policy changes significantly, we will let you know in the app. The last update date appears at the top of this page.