Privacy Policy

What we store

• Account: your email address, your name if you enter one, and a one-way hash of your password. The password itself is never stored.
• Your budget: the transactions, categories, budgets, recurring bills, savings goals and settings you create, including anything you import from a bank statement. Notes you type on a transaction are stored as you typed them.
• Security log: when you sign in, change your password or delete your account, we record the event with the IP address it came from, so you can see it on your Security page and so we can stop abuse.
• Technical logs: our hosting provider keeps short-lived request logs. If error monitoring is enabled, an error report may include the page you were on and your account id, with personal details removed before it is sent.

We do not collect anything from your device beyond what you type into the app, and we do not use advertising trackers.

Why we store it

To run the app for you: to sign you in, show your budget, send you a password-reset or team-invitation email when you ask for one, keep your account secure, and fix problems when something breaks. We do not use your financial data for any other purpose, and we do not build profiles or sell data.

Where it lives and who processes it

RichBudget runs on the following providers, each of which handles data only to provide their service to us:

• Vercel — hosts the application and serves it to your browser.
• Supabase — the PostgreSQL database that stores your account and budget.
• Resend or Brevo — delivers password-reset, confirmation and invitation emails.
• Stripe — processes payments if you choose a paid plan. Your card details go to Stripe directly and never reach us.
• Sentry — receives error reports when monitoring is enabled.

A copy of the database is backed up nightly to encrypted storage so that a fault on our side does not lose your budget. Backups are kept for a limited period and are deleted on the same schedule.

On your device

The app sets one cookie, which keeps you signed in. It also keeps a copy of your budget in your browser’s local storage so the app works offline; that copy is cleared when you sign out on that browser.

Sharing with people you invite

If you invite someone to share a budget, they see every transaction, category and goal in it, and you see theirs. The team owner can remove members at any time.

Your data is yours

• Export: Settings → Data lets you download every transaction as CSV and a complete backup as JSON at any time.
• Delete: Settings → Security → Delete account removes your transactions, categories, goals and settings immediately. The account record is kept in a disabled state for a limited period so the deletion can be audited, then purged, and the address can be used to sign up again.
• Correct: everything you entered can be edited in the app; your name and email can be changed on the Account page.

If you want a copy of your data in another form, or have a question this page does not answer, write to the address at the bottom of this page.

Children

RichBudget is not directed at children under 16 and we do not knowingly keep an account for one. If you believe a child has created an account, contact us and it will be deleted.

Changes

If this policy changes in a way that matters to you, the date at the top changes and the app tells you the next time you sign in. Continuing to use RichBudget after that means you accept the new version.