Privacy Policy

Who we are

Home Budget Analytics ("we", "us") is a personal finance app built and operated by a single independent developer, not a registered company with its own separate legal entity. For the purposes of data protection law, that developer is the controller of the personal information described in this policy.

If you have any question about this policy or how your data is handled, the fastest way to reach us is by email — see "Contact us" below.

Information we collect

We collect the following categories of information:

• Account information: your name, email address, and password. Your password is stored as a one-way hash — we never store or can see the actual password you typed.
• Financial data you provide: the bank statement files you upload (CSV, PDF, Excel, OFX/QFX, CAMT.053 or QIF), and the transactions, categories, recurring payments and savings goals that come from them or that you enter by hand.
• Contact form submissions: your name, email address, and whatever you write to us through the Help & Support page.
• Payment information: handled entirely by our payment processor, Stripe. We never see or store your card number — we only keep a reference to your subscription status.
• Usage data: if you accept analytics cookies (see "Cookies" below), Google Analytics collects standard usage data such as which pages you visit, your device and browser type, and an approximate location derived from your IP address.

Cookies and similar technologies

Most of what keeps you signed in and remembers your choices on this site — your login session, your cookie-consent decision, whether you dismissed the "install this app" prompt — is stored in your browser's localStorage, not in a cookie, and is never sent to us as a cookie.

The only cookies actually set on this site are Google Analytics's own, and only after you accept them in the cookie banner shown when you first visit. You're free to decline, the site works exactly the same either way, and you can change your mind at any time by clearing this site's data in your browser and reloading the page.

Google reCAPTCHA also runs in the background on registration, login, password reset and the contact form to block automated abuse. As part of that, Google may set its own cookies and process some technical and device data under Google's own privacy policy, regardless of your analytics cookie choice — this is treated as necessary for keeping the service secure, not as a marketing or analytics cookie.

How we use your information

We use the information described above to:

• Create and operate your account, and show you your own budget data
• Apply the categorization rules you create to your transactions
• Process your subscription payments through Stripe
• Respond to messages you send through the Help & Support form
• Detect and block automated abuse of the sign-up, login, password-reset and contact forms
• Understand overall site usage in aggregate, only if you've accepted analytics cookies
• Send you account-related emails — a welcome email, password-reset links, and confirmations when your email address or password changes

Our legal bases for processing (GDPR)

If you're in the EU, UK or EEA, we rely on one of the following legal bases for each way we use your information:

• Performance of a contract — running your account and showing you the budgeting features you signed up for
• Legitimate interest — preventing fraud and automated abuse (reCAPTCHA), and keeping the service secure and working correctly
• Consent — analytics cookies, which you can accept, decline, or withdraw at any time
• Legal obligation — keeping payment records for as long as tax and accounting law requires

Who we share information with

We share personal information only with the processors below, each of whom is only allowed to use it to provide their service to us. We do not sell your personal information, and we never share it with anyone for their own advertising or marketing purposes.

• Stripe — processes subscription payments and hosts our billing portal
• Google — provides Analytics (only once you've accepted analytics cookies) and reCAPTCHA (to block automated abuse)
• Brevo — delivers the transactional emails described above (welcome, password reset, and account-change confirmations) on our behalf
• Our hosting provider — runs the server that the app and your data live on

International data transfers

Some of the processors listed above may process your information outside the country you're in, including in the United States. Where that happens, it's under that provider's own applicable safeguards, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.

How long we keep your data

We keep your account and financial data for as long as your account is active. There's no self-service way to delete your account yet — if you'd like your account and everything in it deleted, contact us (see below) and we'll take care of it.

Contact form messages are kept for as long as needed to handle your request, and statement-support requests (when a file we can't parse yet is sent to us so we can add support for it) are kept only until support for that format has been added.

Security

Passwords are stored hashed, never in plain text. Statement files and the data extracted from them are kept private on our server and are only ever used to show you your own budget — never shared with anyone beyond what's described in "Who we share information with" above.

Your rights under the GDPR

If you're in the EU, UK or EEA, you have the right to:

• Access the personal information we hold about you
• Correct it if it's inaccurate or incomplete
• Have it deleted ("the right to be forgotten")
• Restrict how we process it
• Receive a copy of it in a portable format
• Object to processing based on legitimate interest
• Withdraw consent at any time, for anything based on consent

To exercise any of these rights, email us at art@homebudgetanalytics.com — we'll respond within a reasonable time, and in any case no later than one month. If you're not satisfied with our response, you also have the right to lodge a complaint with your local data protection supervisory authority.

Your rights under the CCPA/CPRA (California residents)

If you're a California resident, you have the right to:

• Know what personal information we've collected about you and why
• Delete personal information we hold about you
• Correct inaccurate personal information
• Opt out of the sale or sharing of your personal information — we don't sell or share it, so there's nothing to opt out of
• Not be discriminated against for exercising any of these rights

To exercise any of these rights, contact us using the details in "Contact us" below.

Children's privacy

Home Budget Analytics isn't directed at children, and we don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We may update this page from time to time. The date at the top shows when it was last revised — if you keep using the service after a change, that means you accept the updated policy.

Contact us

Questions about this policy, or about your own data? Email us at art@homebudgetanalytics.com.