What we handle, what we don't, and what you should never enter into the app.
Never enter card numbers, PINs, passwords, ID numbers or any real personal information.
BudgetFlowPro is a personal budgeting tool. The financial figures you record here should be general amounts (e.g. "Rent: 950"). Do not enter anything that could identify you or expose an account. No amount of security controls, ours, your device's or anyone else's, can fully protect information that shouldn't be typed into a web app in the first place. Please stay cautious.
1. Who we are
BudgetFlowPro is a personal budgeting web app. This policy explains what limited information we handle when you use the Service, and, just as importantly, what you should never send us in the first place.
2. Please do not send us sensitive or identifying information
BudgetFlowPro is not designed to hold identifying or highly sensitive data. You agree not to enter card numbers, PINs, passwords, one-time codes, seed phrases, bank account numbers, government IDs, medical information, or names/addresses/contact details of yourself or others into the Service. Enter only general amounts and generic labels. If you break this rule, you do so at your own risk. No safety control we or our vendors put in place can protect information that should not be in a budget app to begin with. Please be cautious.Payment cards are handled by Stripe, our payments partner. We do not collect, store, or see your full card number or CVV/CVC.
3. What we actually collect
Account identity from Google Sign-In: your email address, your display name and, where provided, your profile picture URL. We use this to identify your account.
Your budget entries stay in your account so the app can show them back to you. We do not review, access, or use your income, expenses, debts, savings, notes or other budget entries for any purpose other than making the app work for you.
Billing metadata if you subscribe: a Stripe customer ID and subscription status. Card information is processed only by Stripe, our payments partner. We never see or store your full card number, CVV/CVC, or PIN.
Technical logs: standard server logs (timestamps, IPs, error traces) kept for a limited time to run and secure the Service.
4. How we use it
We use the above only to: (a) provide the Service to you; (b) keep the Service secure; (c) bill you if you subscribe; (d) contact you about the Service where necessary. We do not sell your data. We do not run ad networks against your data.
5. Who can see your budget data
Your budget entries are protected by row-level security at the database layer. That means only you, signed into your own account, can read your own income, expenses, debts, savings and forecasts. Administrators of the Service can see basic account identity (name, email, sign-in times, premium status, and whether you have accepted these terms) but cannot see your financial entries.
6. Sub-processors
We rely on a small number of trusted providers to run the Service, including our authentication and database provider, our identity provider (Google, when you sign in with it), our hosting/CDN provider, and Stripe for payments. Each provider only handles the minimum data necessary for its function.
7. Retention and deletion
We keep your account data for as long as your account is active. If you want your account and associated budget data deleted, email support@budgetflow.pro and we will remove it within a reasonable time, subject to any obligation we have to keep limited records (for example billing records required by law).
8. Your rights
Depending on where you live, you may have rights to access, correct, export or delete personal data we hold about you, and to object to certain processing. Email support@budgetflow.pro to exercise these rights.
9. Security and its limits
We use industry-standard measures (encrypted transport, row-level security, principle of least privilege). No online service is 100% secure. That is exactly why we ask you, in section 2, to never enter information that shouldn't be in a budget app. Please protect yourself by keeping your entries generic and non-identifying.
10. Children
The Service is not directed at children under 18. Do not use the Service if you are under 18.
11. Changes
We may update this policy. When we do, we will bump the version and ask you to accept it again on your next sign-in.