⌸ Privacy

◈ The short version

Budgeteer holds your spending — which is about as personal as data gets. We don't sell it, we don't advertise against it, and we don't share it with anyone except the three services named below that are needed to make the app work. Ask us and we'll erase the lot, permanently.

▤ What we store

• Your account: name, email address, and your password stored as a one-way hash — we cannot read your password, and neither can anyone who steals the database.
• Your ledger: the expenses, categories, budgets, recurring bills, pays, saved reports and settings you enter, and anything imported from a bank statement you upload.
• Receipt photographs you scan, kept on the expense as your record of the purchase.
• Subscription details if you pay: your Stripe customer and subscription identifiers and the dates your access runs to. No card numbers — those never reach our server.
• Ordinary server logs kept by our web host, and errors the app records so we can fix them.

Bank statement PDFs are parsed and discarded — the file itself is never stored. We never ask for your bank login and Budgeteer has no connection to your bank.

◍ Who else sees it

• Anthropic — when you scan a receipt, that photograph is sent to Anthropic's AI service to be read, and processed outside Australia. Nothing else in your ledger is sent. If you never scan a receipt, nothing of yours ever goes to Anthropic.
• Stripe — if you subscribe, Stripe takes the payment and holds your name, email and card details. We never see your card number. Stripe keeps its own records of the transaction.
• Google Analytics — page views and general usage of the site, so we know which parts get used. It sets cookies. It is not given your ledger, your email or your name.
• Our web host, which stores the database and files and delivers our email (reminders, password resets).

That's the complete list. We don't sell or rent your information to anybody, and there is no advertising in Budgeteer.

◉ Cookies

• A session cookie that keeps you signed in. The app doesn't work without it.
• Google Analytics cookies, as above. Your browser's own settings, or an ad blocker, will stop these — the app works fine either way.

⌁ Getting it back, or getting rid of it

• Correcting it: nearly everything is editable in the app. Anything that isn't, email us.
• A copy of it: Reports and the tax report both export CSV. Those need a subscription, so if you don't have one, email us and we'll export your data for you — asking for your own data never costs anything.
• Erasing it: email support@thebudgeteer.app and we'll delete your account. That removes every row belonging to you and deletes your receipt photographs from disk. It is immediate and cannot be undone — there is no restore.
• Cancel any subscription first, so you aren't billed after the account is gone. Stripe keeps its own record of payments it has taken, which we can't erase for it.

🔒 Keeping it safe

• The site is served over HTTPS; passwords are hashed, never stored readably; every query is scoped to your account, so one account cannot read another's data.
• Repeated failed sign-ins from one connection are locked out for 15 minutes.
• Nobody can promise perfect security. If your data is ever caught up in a breach, we'll tell you — what happened, what was exposed, and what to do about it.

⚖ Where we stand under the Privacy Act

Budgeteer is a very small business, and businesses under $3 million in annual turnover are generally outside the Privacy Act 1988 unless an exception applies — which, as best we can tell, none does here. We're telling you that rather than implying an obligation we don't have.

We've chosen to handle your information as though the Act did apply: collect only what the app needs, name everyone it goes to, erase it on request, and tell you if something goes wrong. That's what this page describes, and we'll hold to it.

✉ Asking us about any of this

Email support@thebudgeteer.app. If we've handled your information badly and can't put it right, you can raise it with the Office of the Australian Information Commissioner.

If this page changes in a way that matters, we'll email account holders before it takes effect.