Privacy Policy for My Budget
The short version: My Budget keeps your records on your own phone and works without an account. Only if you choose to sign in and back up does a copy of your records go to your private cloud backup, which you can delete at any time. If you use the optional AI assistant, a summary of your totals, plus anything more you choose to share, is sent to answer each question. There are no ads, no analytics and no tracking.
Who this covers
This policy applies to the My Budget mobile application ("the app"), a personal expense and income tracker. It describes what happens to the information you enter into the app.
Using the app without an account
You can use every feature except cloud backup without signing in. Your transactions, categories, budgets, recurring payments, people and debts, and settings are written to a private database inside the app's own storage on your device. Android isolates this storage so that other apps cannot read it. Nothing you enter is sent anywhere while you are not signed in, except what you choose to send to the optional AI assistant (see below).
Optional account and cloud backup
If you create an account, the app collects:
- Your email address and a password, used only to sign you in, to email you confirmation and password-reset codes, and to keep your backup separate from everyone else's. The password is stored hashed by the sign-in service; nobody can read it.
When you back up (by tapping Back up, or automatically if you turn on Back up automatically), the app uploads a copy of your records:
- Transactions (amount, category, date and your note), categories, budgets and app settings such as currency and language.
- Recurring payments and income.
- People you track debts with (the name and, if you entered one, a phone number), their transactions, settlements and the edit history.
This data is used only to restore your records on a phone you sign in on. It is sent over an encrypted (HTTPS) connection and stored with Supabase, the hosting provider that runs the app's sign-in and database. Access rules on the server let only your signed-in account read or change your rows. The developer does not sell, share or use it for anything else.
Preferences that belong to one phone, such as the app lock and the automatic backup switch, are never uploaded.
Optional AI assistant
The AI assistant answers questions about your spending, such as “Where can I save?”. No account is needed. It is off until you open it and agree to what it sends. You can withdraw that agreement at any time with Stop sharing on the assistant's screen.
Each time you ask a question, the app sends:
- Your question and up to six earlier messages from the same conversation.
- A summary of totals built on your phone for that question: for the current month and the two before it (or another period you choose), spending and income in total and by category (by category name), daily average, the costliest day's total, your budget limits for this month, and a six-month spending trend, in your chosen currency.
That summary is all it sends unless you choose otherwise. Under What to share on the assistant's screen you can pick the period and turn on any of these, each off by default:
- Transactions: each transaction in the period, with its amount, category and date (the most recent ones, up to a size limit).
- Notes: the note you typed with each of those transactions.
- Recurring payments: their titles, amounts, schedules and whether they are paid, upcoming or overdue.
- People and debts: the names of the people you track debts with and each balance.
The assistant's screen shows a reminder while you share more than the summary, and Summary only turns everything back off. These choices are kept on your phone only. The app never sends your email address, phone numbers or record ids.
The request goes over HTTPS to the app's server at Supabase, which counts the question against a daily limit and passes it to Groq, the AI provider that writes the answer. The app's server does not store your questions, the summaries or the answers. For the daily limit it keeps only counts per day: per account if you are signed in (deleted with your account); otherwise per a random id the app creates on your phone (it says nothing about you or the phone) and per a salted, one-way hash of your IP address (the address itself is never stored). These counts are deleted after a week. Groq processes the request under its own terms; Groq states that it does not retain request content by default, apart from limited cases such as investigating failures or abuse. The developer does not sell this data or use it for anything but answering you.
Your questions and the answers are saved as chats on your phone only, so you can open them again later. They are never uploaded, never put in backup files, and a restore does not change them; you can delete one chat or all of them from the assistant's history. The summaries sent with your questions are not saved. You can copy an answer or share it with another app; it then goes only where you send it.
AI answers can be wrong. They are not financial, tax or legal advice.
What the app does not collect
- No location, contacts, photos or other content from your device.
- No advertising IDs, usage analytics or tracking.
- No crash reports or diagnostic telemetry.
- No advertising networks or social media SDKs.
Permissions
- Internet — only for signing in, the cloud backup and the optional AI assistant.
- Biometrics — if you turn on the app lock, the app asks Android to check your fingerprint, face or screen lock. Android does the check; the app never receives biometric data.
- Notifications — if you turn on the daily reminder. The reminder is scheduled on the phone itself, and the app re-schedules it after a restart.
Files you export
Backup files, CSV spreadsheets and PDF reports are created on your device and go only where you save or share them.
Importing from another app
To bring in data from another app or a spreadsheet, the app can copy a ready-made prompt (instructions plus the names of your categories) to your clipboard. You then paste it, with your data, into an AI chat of your choice, such as ChatGPT, Gemini or Claude. This import never contacts an AI service itself and sends nothing to one: what you share there is between you and that service, under its own privacy policy. The answer you paste or pick as a file is read on your device, and nothing is imported until you confirm it.
Deleting your data
- Your account and cloud backup: in the app, open Settings → Account → Delete account. This permanently deletes your account and every record in your cloud backup straight away. The records on your phone stay, and the app carries on without an account. If you can no longer open the app, see how to request deletion.
- Data on your phone: delete records in the app, clear the app's storage in your device settings, or uninstall the app.
- AI assistant chats: delete one chat or all of them from the assistant's history. They are also removed when you clear the app's storage or uninstall it.
- AI assistant counts: the daily question counts kept without an account are deleted automatically after a week; those kept with an account are deleted with the account.
Device backups
Android may include the app's local data in the device backup linked to your Google account. That is a feature of the operating system, governed by Google's privacy policy and controlled by you in your device settings. The developer has no access to it.
Children
The app is not directed at children under 13 and does not knowingly collect information from them.
Changes to this policy
If the app's behaviour changes in a way that affects your privacy, this policy will be updated and the date at the top revised.
Contact
Questions about this policy can be sent to zmohamedzizo827@gmail.com.