Budgify

Privacy Policy

Last updated: May 2025

1. Who We Are

Budgify ("we", "us", "our") is a spending analysis tool that helps users understand their bank statement data. Budgify is operated from the United Arab Emirates.

2. Data We Collect

We collect the following information when you use our service:

  • Account information: Email address and phone number (for authentication via OTP).
  • Bank statement data: When you upload a PDF bank statement, we extract transaction data (dates, descriptions, amounts). We do not store the original PDF file.
  • Derived data: Categorised transactions, spending insights, health scores, and income detection results generated from your statement data.
  • Usage data: Basic analytics such as pages visited and feature usage (no third-party trackers).

3. How We Use Your Data

  • To provide spending analysis, categorisation, and AI-generated insights.
  • To detect income and compute your financial health score.
  • To improve our categorisation accuracy over time (via anonymised category correction data).
  • To send you your report via email (only if you request it).

4. Third-Party Processing

We use the following third-party services to operate Budgify:

  • OpenAI: Transaction descriptions are sent to OpenAI's API for categorisation and insight generation. OpenAI's API does not use your data for model training. See OpenAI's API data usage policy.
  • Supabase: Our database and authentication provider, hosted on secure cloud infrastructure.
  • Resend: Used to deliver email reports when requested.

5. Data Storage & Security

  • All data is encrypted in transit (TLS) and at rest.
  • Original PDF files are processed in memory and are never stored on our servers.
  • We use row-level security (RLS) to ensure users can only access their own data.
  • Authentication is handled via one-time passwords (OTP) — we never store plaintext passwords.

6. Data Retention

We retain your transaction data and insights for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at privacy@budgify.ae.

7. Your Rights

You have the right to:

  • Access your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your account and data.
  • Export your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@budgify.ae.

8. Children's Privacy

Budgify is not intended for users under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users via email of any material changes. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries, contact us at privacy@budgify.ae.