Privacy Policy
Last updated: January 2025
Introduction
BudgetFriend ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (optional)
- Profile picture (if signing in with Google)
YNAB Integration Data
When you connect your YNAB account, we access:
- Your YNAB budget names and IDs
- Category names and IDs from your selected budget
- Current budget amounts for categories (to add allocations)
We store your YNAB OAuth tokens in encrypted form using AES-256-GCM encryption. We never store your YNAB password or have access to your bank account information.
Financial Planning Data
To provide our services, we store:
- Paycheck configurations (names, amounts, frequencies, dates)
- Category allocation amounts you set
- Sync history (dates and amounts synced to YNAB)
Payment Information
Payment processing is handled entirely by Stripe. We do not store your credit card numbers or bank account details. We only store:
- Stripe customer ID
- Subscription status and plan type
- Subscription period dates
How We Use Your Information
We use your information to:
- Provide and maintain our services
- Sync your budget allocations to YNAB
- Process your subscription payments
- Send important service updates and notifications
- Respond to your support requests
- Improve our services based on usage patterns
Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- YNAB: To sync your budget allocations (only the data necessary for the sync)
- Stripe: To process payments and manage subscriptions
- Supabase: Our database and authentication provider
- Vercel: Our hosting provider
We may also disclose information if required by law or to protect our rights and safety.
Data Security
We implement appropriate security measures to protect your data:
- All data is transmitted over HTTPS
- YNAB tokens are encrypted at rest using AES-256-GCM
- Database access is protected by Row Level Security (RLS)
- Authentication is handled by industry-standard protocols (OAuth 2.0)
Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your personal data will be deleted within 30 days
- Anonymized usage statistics may be retained for analytics
- Payment records may be retained as required by law
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data
- Disconnect your YNAB account at any time
- Cancel your subscription at any time
Cookies and Tracking
We use essential cookies for authentication and session management. We do not use advertising cookies or sell data to advertisers.
Children's Privacy
BudgetFriend is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@budgetfriend.app