Privacy policy

What we collect

• Your account: your email address and a password (stored by our sign-in provider in hashed form; we never see it).
• What you enter: expenses (amount, date, category, note), categories and budgets, income, savings goals, recurring items, templates, your salary day and alert settings.
• Your settings: the currency of your personal budget, your time zone (so "today" and your month start at your midnight), and which budget you used last.
• Family details: the family's name, its members' email addresses and roles, and invite codes.
• Assistant chats: the messages you send to the AI assistant and its answers, and how many you send each day (the assistant has a daily limit). If you ask for a higher limit, we keep your request (your email address, your usage and any note you add) and email it to ourselves.
• App details: the app's version and platform (iOS or Android), sent with each request so we can tell an outdated app to update; and, if you turn notifications on, a push token for your device.

We do not use advertising, we do not sell your data, and we do not track you across other apps or websites.

How we use it

• To run the service: show your budget, totals, reports, alerts and reminders.
• To share a budget with your family. You can be in several families; everyone in a family can see that family's data, but never your personal budget.
• To send sign-in emails (confirmation and password reset codes) and, if you turn them on, notifications.
• To answer you in the AI assistant (see below).

The AI assistant

The assistant is optional and is powered by OpenAI. Only when you use it, your message and the budget data needed to answer (for example category names, budgets, amounts, dates and notes) are sent to OpenAI to produce the reply. The app asks for your agreement before your first chat. Your chat history is stored in your account so you can scroll back, and is deleted with your account. If you report an answer, we keep a copy of that answer and your reason so we can review it; this stays after you delete your account, without your name.

Who helps us run the service

• Supabase: database and sign-in.
• Vercel: hosts the website and the app's server.
• OpenAI: the AI assistant, only when you use it.
• Expo, Apple and Google: deliver push notifications, only if you turn them on.
• Our email provider: sends the sign-in emails, and your requests for a higher assistant limit to us.

They process data on our behalf, only to provide their part of the service.

Where your data is stored

Your data is stored by Supabase in its Tokyo data centre (Japan), and the app's server runs on Vercel in the same region, close to most of our users. The UK and the EU recognise Japan as protecting personal data to their own standard. Some providers above may process the part of your data they need in other countries, including the United States: OpenAI (only when you use the assistant), and the push and email services.

Security

All traffic is encrypted (HTTPS). On your phone, your sign-in is stored encrypted, with the key kept in the phone's secure storage. Within the service, each person only gets their own data and their family's.

Keeping and deleting your data

We keep your data while you have an account. You can delete your account at any time in the app (More, Account, Delete account) or on the website (Settings, Data). See Delete your account for exactly what is deleted and what stays with a family. Deleted data may remain in our providers' backups for a short time before it is overwritten.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, or object to how we use it: write to us at the address below. If you are in the UK or the EU you can also complain to your data protection authority (in the UK, the Information Commissioner's Office).

Children

The service is not meant for children under 13, and we do not knowingly collect their data.

Changes and contact

If this policy changes, we will update this page and the date at the top.

Questions about your data? Write to contact@softbytes.co.uk.