Privacy Policy
This policy explains what information Budvio collects, why, who sees it, how long we keep it and what choices you have. Budvio is published by Mohd Arsad, trading as Budvio ("we", "us", "our"), Dubai, United Arab Emirates. For any privacy question, write to privacy@aigrowthmanager.com.
The short version
- Budvio never asks for your bank login or card details and never connects to a bank. You enter your own spending.
- Without an account, everything stays on your phone, in an encrypted database. We cannot see it.
- If you create an account and turn on sync, your budgets and entries are sent to our servers over an encrypted connection and stored encrypted.
- We do not sell your data, we do not show ads and we do not use the advertising identifier.
- Analytics and crash reports are off unless you turn them on, and they never include amounts, merchants, notes or names you typed.
- You can export everything and delete your account from inside the app.
Who is responsible for your data
Mohd Arsad, trading as Budvio decides how and why your personal data is used in Budvio, which makes us the controller of that data (and the "data controller" under laws such as the EU and UK GDPR). Our contact details are at the end of this policy. We have not appointed a data protection officer. Privacy questions go to privacy@aigrowthmanager.com.
What we collect and why
Information you give us
- Account details. If you create an account: your email address, your name (if you or Apple or Google provide it) and how you signed in (an emailed link, Apple or Google). We use this to identify your account, sign you in, sync your data between your devices and contact you about the service. If you use Sign in with Apple and choose "Hide My Email", we only receive Apple's private relay address.
- Budget data. Wallets, categories, budgets, transactions (amounts, dates, notes, merchants), goals, recurring items, split expenses, shared budgets, receipt images and your settings. This is the content you choose to enter. On your phone it is always stored. On our servers it is stored only if you create an account and turn on sync. We use it only to provide the app to you.
- Receipts and photos. When you scan a receipt, the picture is read on your phone. The images you attach may be stored with your entry, and are uploaded only if you sync. If you use the optional cloud receipt reading, the image is sent through our server to Google Cloud Document AI to read the text, and is not kept by us or by Google after it has been processed.
- Messages to us. When you contact support we keep your message, the email address you give us for replies, the app version and the platform (iPhone or Android). Please do not put financial details or passwords in a message.
Information collected automatically
- Device and technical data. The app version, device platform, language and a push-notification token. Firebase creates this device token so notifications can reach your phone; we only save it with your account if you sign in. Our servers also see your IP address when you connect, in technical logs that we keep for a short time to run and protect the service.
- Purchase status. If you subscribe, the App Store or Google Play handles the payment. We never see your card details. Our subscription provider (RevenueCat) tells us your plan, its period and whether it is active, linked to your account number, not to your name.
- Analytics and crash reports (only if you agree). Events such as "an entry was added" and technical crash information, collected through Firebase. They never contain amounts, merchants, notes, wallet or category names, receipt content or your email address. They are off until you turn them on in Settings, and you can turn them off again at any time.
- Exchange rates. To show other currencies the app downloads public exchange rates. That request reveals your IP address to the rate provider (open.er-api.com) but nothing about you or your budget.
Things we do not collect
We do not collect your location, contacts, calendar, microphone recordings, health data, biometric data (Face ID and fingerprint are handled by your phone's operating system, and we only learn whether it succeeded) or bank details. We do not run advertising or tracking across other apps and websites.
How we use your information
- To provide Budvio: store and sync your data, show your balances and reports, send reminders and process purchases.
- To keep Budvio safe: prevent abuse, protect accounts, fix faults and enforce our terms.
- To support you and answer your questions.
- To improve the app, using analytics only if you have agreed.
- To meet legal obligations.
We do not use your data to make automated decisions that have legal or similarly significant effects on you. Budvio does not use generative AI on your data and does not profile you. Category suggestions are worked out on your phone from your own history, and the optional cloud receipt reading only turns a picture into text.
Our legal bases
Where the law asks us to name one: we use account and budget data because it is needed to provide the service you asked for (contract); we use technical and security data and support messages for our legitimate interests in running, securing and improving a safe service; we use analytics and crash reports and send push notifications only with your consent, which you can withdraw at any time; and we keep some records where the law requires.
How your data is protected
- On your phone, the database is encrypted, and its key is held in the iOS Keychain or Android Keystore.
- When you sync, data travels over an encrypted connection (TLS).
- Before storing sensitive values such as amounts, notes, merchants, names and receipt files, our backend encrypts them again with AES-256-GCM. Our database, file storage and logs do not hold them in readable form.
- This is not "end-to-end" encryption. Our backend can decrypt your data for a moment to do what you ask, for example to sync it between your devices or prepare your export. Access to the systems that can do this is limited to the services and people who need it, and is logged.
- No system is perfectly secure. If we discover a breach affecting your data we will tell you and the authorities as the law requires.
- If you use Budvio without an account there is no copy on our servers, so we cannot recover your data if you lose or reset your phone.
Shared budgets
If you invite someone to a budget, they see the entries in that budget according to the role you give them (viewer, contributor or editor). People you invite see your name or the display name you chose. If you remove someone, they keep what they have already seen. Entries you add to a budget owned by someone else belong to that budget and are deleted if the budget or your account is deleted.
Notifications
Reminders for bills, budgets and goals are created on your phone and never leave it. Push notifications from our servers are generic, for example "New activity in a shared budget", and never contain amounts or names. You can change them in Settings or in your phone's settings.
Who we share data with
We do not sell or rent your data. We use the following service providers (processors) to run Budvio. Each handles only what it needs, under a contract that limits it to our instructions.
| Provider | What it does | What it handles |
|---|---|---|
| Supabase | Accounts, database, file storage and backend functions. Servers in South Korea | Account identity, encrypted budget records, encrypted receipt files |
| Google (Firebase) | Push delivery, and analytics and crash reports if you agree | Device tokens and installation IDs, non-financial events |
| Google Cloud Document AI | Optional cloud receipt reading | Receipt images, only while being read |
| Apple and Google | Sign-in, push delivery, app-store purchases | Sign-in tokens, device tokens, payments |
| RevenueCat | Subscription status | Account number, purchases, plan state, device type and IP address |
| Resend | Sign-in and service emails | Your email address and the message |
| Open exchange-rate provider | Public exchange rates | Your IP address only |
We may also disclose information if the law or a court requires it, to protect people's safety or our rights, or in a sale or reorganisation of our business (you would be told first). Shared-budget members see what you put in that budget.
Where your data is processed
Our main servers are in South Korea. Our providers may process data in other countries, including the United States and the European Union. Where the law requires safeguards for sending data abroad we rely on the provider's data protection agreement and standard contractual clauses or an equivalent mechanism.
How long we keep it
- Account and budget data: until you delete your account.
- After you ask to delete your account: a 7-day cooling-off period, during which you can cancel. Then your account, synced budget data, receipt files, devices and push tokens are permanently deleted from our database and file storage. Backups and logs are removed on their normal schedule, no later than 30 days after deletion.
- Support messages: up to 12 months, then deleted.
- Security and audit events (for example "account deleted"): up to 12 months, with no budget content.
- Payment event records: up to 90 days.
- Analytics (if you agreed): up to 14 months. Crash reports: up to 90 days.
- Purchase records are also kept by Apple, Google and RevenueCat under their own policies and legal duties, and we cannot delete those.
- Data we must keep by law is kept only as long as the law requires.
Your choices and rights
Depending on where you live (for example under the UAE Personal Data Protection Law, the EU and UK GDPR, India's Digital Personal Data Protection Act and California law) you may have the right to:
- access your data and receive a copy (in the app: Settings, Data & privacy, Export account data, free on every plan);
- correct it (edit it in the app);
- delete it (in the app: Settings, Data & privacy, Delete account);
- withdraw consent for analytics, crash reports or notifications at any time;
- object to or ask us to limit some uses;
- receive your data in a portable format;
- not be treated worse for using your rights;
- complain to your data protection authority.
We do not sell or "share" personal information for advertising as those terms are used in California law. To use a right that the app does not offer directly, write to privacy@aigrowthmanager.com. We will confirm your identity (usually by emailing the address on the account) and answer within 30 days. If we need longer or cannot do what you ask, we will say why.
Children
Budvio is not meant for children under 13, and we do not knowingly collect their data. In the European Economic Area and the UK you must be 16 or older, or have a parent's permission, to create an account. If you think a child has given us personal data, write to privacy@aigrowthmanager.com and we will delete it.
Our website
The Budvio website pages for this policy, the terms and support use no cookies, analytics or trackers.
Links to other services
The app may link to the App Store, Google Play or other sites. We are not responsible for their privacy practices.
Changes to this policy
We may update this policy. If a change matters, we will tell you in the app before it applies, and we will update the date at the top. Previous versions are available on request.
Contact
Mohd Arsad, trading as Budvio, Dubai, United Arab Emirates.
Privacy: privacy@aigrowthmanager.com. General: support@aigrowthmanager.com.