Privacy Policy

Last updated: 01.01.2025

Introduction

BudgetBuddy respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and protect your information.

Data Controller

Company name: The Cloudest Tomasz Iwanowski

NIP: 1251739186

REGON: 523341785

Contact: privacy@budget-buddy.eu

Adress: Bandurskiego 47B, 05-270 Marki

What data we collect

User account data

Registration data: username, email address, password (encrypted)

Profile Data: user preferences, application settings

Login details: login date and time, IP address

Financial data

Budgets: budget names, planned and actual amounts

Categories: names of expense categories and subcategories

Transactions: descriptions, amounts, transaction dates

Documents: scanned receipts and statements (optional)

Technical data

Cookies: user preferences, login session

Server logs: IP address, browser, operating system

Analytical Data: usage statistics (if consent given)

Payment data

Transaction data: amount, date, payment status (handled by Przelewy24)

Security: payment card data is not stored in our system

Invoices: invoice data (name, address, tax ID - optional)

Legal basis for processing

Art. 6 para. 1 lit. b) GDPR: Contract performance (BudgetBuddy service provision)

Art. 6 para. 1 lit. a) GDPR: Consent (analytical and functional cookies)

Art. 6 para. 1 lit. f) GDPR: Legitimate interest (security, server logs)

Purpose of data processing

Service provision

Enabling the use of budget management, expense categorization and financial analysis functions.

Security

User account protection, unauthorized access detection and abuse prevention.

Service improvement

Analysis of application usage to introduce improvements (only with consent).

Cookies and tracking technologies

Types of cookies

Necessary Cookies

Required for proper website functioning. Cannot be disabled.

Analytics Cookies

Help understand how users use the website. Require consent.

Functional Cookies

Remember user preferences. Require consent.

Cookie management: You can change your cookie preferences at any time by clicking the "Cookies Settings" link in the page footer.

Google Analytics

Purpose of use

Google Analytics helps us understand how users use the application to improve it. We only collect anonymous statistical data.

Privacy protection

Financial data, passwords and other sensitive information are NEVER shared with Google Analytics. We only collect general usage statistics.

Your control

You can disable Google Analytics at any time in cookie settings or account settings. The application works fully without analytics.

Data recipients

Hosting service providers: For data storage on servers

Analytics service providers: Google Analytics (only with consent)

Payment service providers: Przelewy24 - subscription payment processing

State authorities: Only based on applicable legal provisions

Transfer to third countries

Data is processed mainly in the European Union. In the case of Google Analytics, data may be transferred to the USA based on adequacy decisions or appropriate safeguards.

Przelewy24 processes payment data in Poland according to European PCI DSS security standards.

Automated decision making

We do not use automated decision making or profiling that would have legal effects or similarly significantly affect the user.

Your rights

Under GDPR you have the right to:

Access to your personal data

Rectification of incorrect data

Erasure of data (right to be forgotten)

Restriction of processing

Portability of data

Object to processing

Lodge a complaint to the supervisory authority (UODO)

Supervisory authority

Personal Data Protection Office (UODO)

ul. Stawki 2, 00-193 Warsaw

Tel.: 22 531 03 00

E-mail: kancelaria@uodo.gov.pl

Data security

Encryption

All data is transmitted via secure HTTPS connection and stored in encrypted form.

Secure servers

Data is stored on servers with the highest security standards.

Limited access

Only authorized persons have access to data to the necessary extent.

Data retention period

Account data: until account deletion by user

Financial data: during active use of the service

Server logs: maximum 12 months

Cookies: according to browser settings and user preferences

Payment data: according to Przelewy24 policies and legal requirements

Data source

Personal data comes directly from the user during account registration and application use. We do not collect data from external sources.

Obligation to provide data

Mandatory data: Email address, username, password - required for service provision

Optional data: All other data (preferences, documents) - provided voluntarily

Consequences of not providing: Inability to create an account and use the application

Payment data: Required for Premium/Plus subscription handling - absence prevents purchase

Przelewy24 payment information

Security

All payments are handled by Przelewy24 - a licensed payment service provider. Your card data is not stored in our system.

Subscriptions

Subscriptions are renewed automatically. You can cancel your subscription at any time in account settings. Cancellation takes effect from the next billing period.

Invoices and refunds

Invoices are issued automatically and available in account settings. Refunds are processed according to Przelewy24 terms and Polish consumer law.

Contact

Do you have questions about data protection?

Changes to privacy policy

We reserve the right to make changes to this privacy policy. We will inform users of any significant changes via the application or email.

Return to application