Privacy Policy

Last updated: September 12, 2026

What we collect

When you use AI Budget Pro we collect the information you give us: your name, email address, and the financial records you create (expenses, budgets, accounts, goals, notes and receipts). We also keep standard technical logs (IP address, browser type, sign-in times) for security.

If you install the mobile app and turn on notifications, we also store a device token — an address the platform gives us so we can send alerts to that device. If you turn on the app lock, the check is performed by your phone; your fingerprint or face is never sent to us and we never receive it.

How we use it

To run the product: storing your transactions, computing analytics and showing your dashboard.
To power AI features: when you use voice input, receipt scanning, smart search or the AI coach, the relevant text, audio or image is sent to our AI processor (OpenAI) solely to produce your result. It is not used to train models on your identity.
To read awkward statements: most bank statements are read entirely on our own servers and nothing leaves them. If a bank lays one out in a way we cannot untangle, Premium can send the statement’s text — not the file — to the same AI processor to sort it into transactions. This only happens when the ordinary reading fails, and never on the free plan.
A password you type to open a protected PDF is used once and never stored.
To sign you in: if you choose Continue with Google or Continue with Apple, that provider confirms your identity to us and gives us your email address. We never receive your password for those accounts.
To send notifications you asked for: budget alerts and bill reminders are delivered through Apple (APNs) and Google (Firebase). The alert and your device token pass through them to reach your phone.
To bill you: payments are processed by Stripe. We never see or store your card number.
To keep the service safe: rate limiting, audit logs and fraud prevention.

How long we keep it

Voice recordings are deleted from our servers as soon as they have been transcribed. We do not keep the audio.
Receipt images are kept alongside the transaction you attached them to, until you delete that transaction or your account.
We log which AI features you used and how many tokens they cost, so we can meter usage. Those records hold no part of what you said, typed or photographed.

What we never do

We never sell your personal or financial data.
We never show you third-party advertising.
We never share your data with anyone except the processors named above (hosting, Stripe, OpenAI, Apple and Google for sign-in and notifications, email delivery).
We do not track you across other apps or websites, and we run no analytics or advertising software.

Your rights

You can export your complete transaction history to CSV at any time, and you can delete your account from Settings, which removes your access and marks your data for deletion. You may also email us to request a copy or erasure of your data.

Security

All traffic is encrypted with HTTPS. Passwords are hashed with bcrypt. Two-factor authentication is available for every account. Access to production systems is restricted and audited.

Cookies

We use first-party cookies only: one to hold your session, and — if you asked us to keep you signed in — one long-lived cookie that remembers this device. Signing out removes it. There are no tracking or advertising cookies.