Privacy Notice

1. Who we are

BudgetFlow is operated by Kenneth Idiovwa, trading as BudgetFlow. For the personal data described here, Kenneth Idiovwa is the data controller and decides how and why your data is processed. Contact: support@budgetflow.finance.

2. What we collect and why

• Account data — email address, login credentials (stored hashed), and your app-lock PIN (stored hashed). Used to create and secure your account. Legal basis: performance of our contract with you.
• Budget and transaction data — income, expenses, categories, notes, tags, optional location labels, savings goals, budgets, net-worth entries and uploaded receipt images. Used to provide the core budgeting service. Legal basis: contract.
• Preferences — currency, theme, notification and reminder settings, timezone. Used to deliver the app as you configured it. Legal basis: contract.
• Usage and device data — app events, error reports, device identifiers, IP address, push subscription details. Used for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests, or consent for push notifications.
• Support messages — anything you send us. Used to answer you. Legal basis: legitimate interests.
• Marketing messages — only if you opt in. Legal basis: consent, which you can withdraw at any time.

3. AI processing

When you use receipt scanning or AI insights, the relevant receipt image or aggregated summary figures are sent to our AI provider to extract text or generate the written insight. This is done to provide the feature you requested (contract). We do not use your data to train AI models.

4. Who we share data with

• Service providers / subprocessors — hosting and database providers, push-notification delivery, error monitoring and AI processing, each acting on our instructions.
• Merchant of Record — Paddle.com, which handles the sale of Premium, subscription management, payments, tax compliance and invoicing. Paddle collects payment details directly; we never see or store your card data.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal data.

5. International transfers

Our providers may process data outside your country, including in the EEA, the UK and the United States. Where data leaves the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses with the recipient.

6. Retention

We keep your account and financial records for as long as your account is active. If you delete your account it is held for 30 days so you can recover it, then permanently deleted or anonymised. Receipt images are deleted with the transaction they belong to. Security and error logs are kept for up to 12 months. Records we must keep for tax or legal reasons are retained for the period the law requires.

7. Your rights

Depending on where you live, you may have the right to access your data, correct it, have it erased, restrict or object to processing, receive a portable copy, and withdraw consent. You can export your data and delete your account directly in the app, or email us and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

8. Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, per-user database access rules so you can only reach your own records, hashed credentials and PINs, private receipt storage accessible only through short-lived signed links, and an optional device app lock.

9. Cookies and local storage

We use essential cookies and browser storage only: to keep you signed in, remember your theme and currency, and cache your data so the app works offline. We do not use advertising or third-party tracking cookies. You can clear this data in your browser settings, though doing so will sign you out.

10. Children

BudgetFlow is not intended for children under 16, and we do not knowingly collect their data.

11. Changes

If we change this notice we will update the date above and, for material changes, notify you in the app.