Privacy policy

1. Controller: [controller], contact: [contact address] (e-mail only). No data protection officer has been appointed.

2. Data we process:

• account data: e-mail, name (optional), date of birth (optional), password hash, settings, 2FA key (if enabled);
• data you enter: budget (entries, categories, limits, savings, salary), bills and subscriptions, tasks, projects, goals, debts, trips, business trips and working time, vehicles and their costs, messages within family / groups;
• phone payments (Android app, if installed and paired): amount, currency, merchant, time, card last digits — read from notifications of selected banking / wallet apps. Other notifications are not sent;
• GPS location of a payment or expense: only when you enable the feature and grant permission on the phone;
• technical data: activity log (sign-ins, including failed ones, with IP address; data changes) — for security;
• invitation code (date of use, who invited).

3. Purpose and legal basis:

• providing the service under the Terms (art. 6(1)(b) GDPR);
• security, abuse prevention and backups (art. 6(1)(f) — legitimate interest);
• location and notification access — based on your consent given in the app / system (art. 6(1)(a)), which you can withdraw at any time in the settings.

4. Hosting and security: VPS at OVHcloud, data centre in Warsaw (EU). HTTPS only. The database is encrypted (AES-256, key stored outside the database disk). Backups are encrypted and kept on the server and in a private GitHub repository (GitHub Inc., safeguarded by SCC / EU-US Data Privacy Framework). The provider sees encrypted files only. Optional 2FA and "sign out everywhere".

5. Recipients: data is not sold or shared for marketing. It is processed only by infrastructure providers (OVHcloud — hosting; GitHub — encrypted backups) under data processing agreements. Exchange rates come from the public NBP API — without your data.

6. Retention:

• account data and content: until the account is deleted;
• deleted items go to the Trash and are permanently removed after 90 days (setting 7–365 days / never);
• backups: 30 daily + 12 monthly (deleted data disappears from backups after about 12 months at the latest);
• security log: 12 months.

7. Your rights: access, rectification, erasure, restriction, portability (export in Settings → Data → "Download my data"), objection, withdrawal of consent (without affecting earlier processing). Complaint to the President of UODO (ul. Stawki 2, 00-193 Warsaw). Requests: [contact address]. Reply within 30 days.

8. Android app — permissions:

Every permission can be revoked in the system settings. Without them the app works but will not record payments / places automatically.

• notification access (read only from selected payment apps);
• location (also in the background — "Allow all the time" — only at the moment of a payment);
• notifications (assignment suggestions).

9. Profiling: category and trip suggestions are computed automatically from your data for your own use only. They have no legal effects and are not shared.

10. Changes: we inform about changes in the app; the current version and date are on this page.