Privacy Policy
Last updated: August 2, 2026
Budget Buddy is a personal budgeting tool. This page explains what information it collects, why, and what happens to it — including bank account data pulled in through our bank-linking feature.
Information we collect
- Account information: the email address and password you register with. Passwords are never stored in plain text.
- Budget data you enter directly: bills, income sources, expenses, debts, savings goals, and account balances you add yourself.
- Bank account data, only if you choose to link an account: if you use the "Link a bank account" feature, we receive your institution name, the last 4 digits of the linked account, and transaction history (date, amount, description) for that account, via Stripe Financial Connections. We never see or store your bank login credentials — Stripe handles authentication with your bank directly.
How we use it
Your data is used for exactly one purpose: to show you your own budget — your dashboard, bill schedule, spending history, and projections. Imported bank transactions are staged for your review and only become part of your budget once you confirm them; nothing is filed automatically.
We do not sell your data
We do not sell, rent, or share your personal or financial data with third parties for marketing or advertising purposes, ever.
Who we share it with
We use a small number of service providers to run the app, each of whom only sees what's necessary to do their specific job:
- Stripe — handles bank account linking and transaction retrieval (Financial Connections). Stripe's own privacy policy governs how they handle data during that connection.
- Amazon Web Services — hosts our database and application server.
- Email delivery — used only to send account-related email (confirmation, password reset), never marketing.
Your control over your data
- You can disconnect a linked bank account at any time from the Linked Accounts page. This immediately revokes Stripe's access and stops any further transaction syncing.
- You can download a copy of your personal data, or request account deletion, from Account > Manage > Personal Data.
Security
All traffic to this site is encrypted (HTTPS). Passwords are hashed, never stored as plain text. Access to the underlying database and server infrastructure is restricted and credentials are never committed to source control.
Questions
If you have questions about this policy or your data, contact us at alecf82@gmail.com.