Privacy Policy

Who we are

Budgeto is operated by Mitchell Martinez (ABN 40 927 243 914), based in Redfern, New South Wales, Australia. In this policy, “we”, “us”, and “our” refer to that operator, and “you” refers to the person using Budgeto. We are the entity responsible for the personal information handled through the Budgeto website and mobile apps.

Information we collect

We only collect personal information that we reasonably need to run Budgeto. This includes:

• Account details: your email address and, if you choose to provide it, a preferred name. Your email is stored in encrypted form and is only used for sign-in, account security, and the communications described below.
• Authentication data: a securely stored, non-readable version of your password (we never store your password in plain text) and, if you enable multi-factor authentication, the settings needed to verify your sign-ins.
• Budget and financial data you enter: budget cycles, income, expenses, savings, recurring transactions, and any descriptions or entry names you add. Entry names and other free-text you provide are encrypted at rest.
• Optional Bank Sync data: if you connect a financial institution, our banking provider processes the accounts and transactions you authorise it to access. Budgeto receives account type, institution, balance, transaction amount, date and description, and opaque provider identifiers. Budgeto does not store your full bank account number or BSB on its servers.
• Preferences and settings: things like your currency, number and date formatting, dashboard layout, AI-assistance preference (select users only), and whether you opt in to the weekly digest email or push notifications.
• Purchase data: subscription product, purchase status, renewal and expiry information, and transaction identifiers supplied by Stripe, Apple, Google, or RevenueCat. Budgeto does not receive or store your complete payment-card details.
• Technical and session data: information needed to keep your account secure, such as session records and limited device/network information used for security, abuse-prevention, and rate limiting.
• Push and diagnostic data: if you enable notifications, a device push token and delivery metadata; and, where error reporting is configured, crash logs, non-fatal errors, stack traces, app version, operating system, and limited device context. We disable default personal information collection and do not use session replay or performance tracing.
• Product usage analytics: if enabled in your settings, Budgeto adds selected in-app page, screen, and feature interactions to anonymous daily totals, separated only by event name and web or mobile platform. Analytics requests contain no account, device, installation, or session identifier and are sent without authentication credentials. Budgeto does not collect product analytics on public marketing or pre-login screens, and does not include budget amounts, transaction descriptions, account names, routes, exact event times, or other free text.
• Mobile beta applications: if you request closed-beta access, we collect your email address, optional name, requested platform, and your consent choices. Your email and name are encrypted at rest. We use these details to administer TestFlight or Google Play access and essential beta communications; marketing messages are sent only if you separately opt in.
• Optional marketing preferences: promotional product news and Budgeto Max updates are separate choices. Max-interest registrations are used only for Budgeto Max updates, while account and mobile-beta promotional consent may be used for product news and offers.
• Messages you send us: the content of any feedback, support requests, or contact-form submissions, together with your email address where you choose to include it so we can reply.

You can also try Budgeto in demo mode without creating an account. In demo mode your data is stored only on your own device (in your browser’s local storage) and is not sent to or stored on our servers.

How we use your information

We use your personal information for the following purposes:

• To provide the core Budgeto service: creating your account, saving your budget data, and syncing it across your devices.
• To keep your account and data secure, including verifying sign-ins, detecting and preventing fraud or abuse, and enforcing rate limits.
• To send essential service communications such as email verification, password resets, and security notices.
• To administer closed mobile beta access, including sending TestFlight or Google Play invitations and essential beta updates you request.
• To send optional communications you have opted in to, including promotional product news, Budgeto Max updates, the weekly digest, or push notifications. You can turn each applicable preference off in settings or use the choices in an email unsubscribe link without affecting essential account, billing, or security messages.
• To respond to your feedback, support requests, and enquiries.
• To understand and improve how Budgeto works, and to develop new features, using privacy-safe, first-party analytics where enabled.
• To meet our legal, regulatory, and record-keeping obligations.

We do not sell your personal information, and we do not use your budget or financial data for advertising.

How we protect your data

We take the security of your information seriously and apply measures appropriate to the sensitivity of financial data.

Your password is never stored in plain text. Your personal and financial information - including your email address, the names and amounts on your budget entries, your recurring transactions, and your saved history - is encrypted at rest. All data transmitted between your device and our servers is encrypted in transit using TLS and HTTPS.

We use multi-factor authentication (where you enable it), session management, abuse-prevention, and rate limiting to help keep your account secure. While no method of transmission or storage is ever completely secure, we work to protect your information and to continually improve our safeguards.

What we don't do matters as much as what we do. Budgeto is built to collect as little as possible, and we don't require sensitive details such as your date of birth, government-issued identification, residential address, or employment information to use the app. If you choose to send us information we haven't asked for, we will handle it in accordance with this policy.

Some billing information may be handled by third-party payment providers (such as Stripe, Apple, Google, or RevenueCat). Any data you provide to them will be handled in accordance with their own privacy policies.

Optional Bank Sync

Bank Sync is optional and is currently provided in Australia through Basiq using Consumer Data Right consent. You choose the institution and accounts to connect in Basiq’s hosted consent flow. Basiq receives and processes the bank data authorised by that consent under its own privacy policy.

Budgeto uses the resulting account and transaction data only to display connected accounts, import transactions, reconcile entries, and operate Bank Sync. Budgeto deliberately does not retain full bank account numbers or BSBs on its servers. We use encrypted opaque provider account identifiers for reconciliation and encrypt financial amounts and transaction details at rest.

Product analytics and your choices

Budgeto uses first-party, privacy-safe product analytics to help us understand aggregate in-app page and screen views and selected feature usage. Budgeto stores one daily counter for each allowlisted event and platform (web or mobile), rather than an individual event history.

You can turn product analytics off at any time in your in-app settings on web and mobile. No analytics request is sent until your account preference has loaded and permits collection, and turning it off stops new analytics requests immediately.

Analytics requests are sent without sign-in credentials or cookies and contain only an allowlisted event name and the web or mobile platform. We do not store an account, device, installation, session, IP address, route, exact event time, budget amount, transaction description, name, email address, or other free text with these counters. IP addresses are used transiently to enforce abuse limits and are not written to analytics storage.

Budgeto does not collect first-party product analytics on public marketing pages or pre-login screens. Because the stored counters cannot distinguish people or sessions, Budgeto does not use them to build user journeys, same-user funnels, active-user counts, or retention cohorts. We also do not use replay tools, heatmaps, fingerprinting, ad retargeting, or sale of personal information.

Who we share information with

We do not sell or rent your personal information. We only disclose it in limited circumstances, including to trusted third-party service providers who help us operate Budgeto (for example, hosting, database, email delivery, and error-monitoring providers), and only to the extent necessary for them to provide their services to us. This includes Basiq when you enable Bank Sync, RevenueCat and the relevant app store for mobile subscriptions, and Expo for app updates and push delivery. Where you use optional AI features, the text you submit and relevant budget information may be processed by an AI provider to generate the response you request. Budgeto’s current AI feature does not accept photos, video, or audio.

We may also disclose personal information where required or authorised by law, or to protect the rights, property, or safety of our users, the public, or Budgeto.

Overseas disclosure

Your Budgeto account data is stored on servers hosted in Sydney, Australia.

A limited number of our service providers (for example, the optional AI-assistance feature, Expo, RevenueCat, the Google Play and Apple stores, and our billing partner Stripe) may process some data outside Australia. Basiq processes Australian Bank Sync data for the Consumer Data Right service. Where overseas processing occurs, we take reasonable steps to ensure your personal information is handled consistently with the Australian Privacy Principles and is subject to appropriate protections. We aim to minimise the personal information we send overseas or to any AI provider, sharing only what is needed to provide the feature you have requested.

How long we keep your data

We keep your personal information for as long as your account is active or as needed to provide Budgeto to you. If you delete your account, we will delete or de-identify the personal information associated with it, except where we are required to retain certain information to comply with our legal obligations, resolve disputes, or enforce our agreements.

If you choose to delete your account or ask us to remove your personal data from our systems, you acknowledge that we will action this to the best of our ability. Some data may be hosted in backups or cached versions of our systems for a limited period. You acknowledge that your data will be removed from production-active systems but will not be automatically removed from all backups of Budgeto systems.

Mobile beta application details are kept while the beta is active and for a reasonable period afterwards to administer access and resolve related enquiries. You can ask us to remove your beta application at any time. If you separately opt in to marketing, promotional emails and Budgeto Max updates remain independent choices. Each consent remains in effect until you unsubscribe or withdraw it.

Your rights and choices

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate, out of date, or incomplete.
• Delete your account and the personal information associated with it.
• Withdraw consent to optional communications at any time.
• Turn first-party product analytics off in app settings at any time.
• Make a complaint if you believe we have mishandled your personal information.

You can manage much of your information directly in the app, including your preferred name, notification preferences, and account deletion. To make any other request, contact us using the details below. We will respond within a reasonable period and in accordance with the Privacy Act.

Data breaches

If a data breach occurs that is likely to result in serious harm to affected individuals, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988.

Children’s privacy

Budgeto is not directed at children and is intended for use by individuals aged 16 and over. We do not intend to collect personal information from children under 16. If we become aware that a child under 16 has provided personal information, we will take reasonable steps to delete or de-identify that information (unless we are required to retain it by law) and restrict or close the associated account where appropriate. If you are a parent or guardian and believe this has occurred, please contact us so we can investigate and act promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Where required by law, we will seek your consent to material changes before they apply to your personal information.

Contact us

If you have questions about this policy, want to exercise your privacy rights, or wish to make a complaint, contact us at [email protected].

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

You can also read more about how Budgeto works on our About page or get in touch via our Contact page.