Privacy Policy
Last updated: June 29, 2026
BudgetFlow is a personal budgeting app for individuals and households. We take your privacy seriously — we collect only what is necessary to make the app work, we do not sell your data, and we do not show you ads.
1. What we collect
- Email address and Google account ID — collected when you sign in with Google or email/password, used solely to identify your account.
- Financial transaction data — amounts, dates, payees, categories, and account names that you enter into the app. Stored in your household's private cloud space.
- Household membership data — the invite code and list of members who joined your household.
- App preferences — language selection and budget mode setting, stored locally on your device.
2. Camera and receipt scanning
BudgetFlow can optionally scan receipts using your device camera. This feature uses Google ML Kit Text Recognition, which runs entirely on your device. No photos or camera images are uploaded to any server — ever.
Camera access is used only when you explicitly tap "Scan receipt." Images are processed on-device and discarded immediately. Nothing is stored or transmitted.
3. How we use your data
- To authenticate you and keep your account secure
- To sync your transaction data across devices within your household
- To display your spending history, charts, and category budgets
We do not use your data for advertising, profiling, or any purpose beyond operating the app.
4. Data storage and security
Your data is stored in Google Firebase / Cloud Firestore, a secure cloud database operated by Google LLC. Data is encrypted in transit (TLS) and at rest. Access to your household's data is restricted to members of that household.
App preferences (language, budget mode) are stored locally on your device using Android's SharedPreferences — this data never leaves your device.
5. Third-party services
- Google Firebase Authentication — manages sign-in. Governed by Google's Privacy Policy.
- Google Cloud Firestore — stores your transaction and household data. Governed by Google's Privacy Policy.
- Google Sign-In — optional login method. No additional data beyond your email and name is requested.
- Google ML Kit — on-device only. No data is shared with Google through this service.
We do not integrate with any advertising networks, analytics platforms, or data brokers.
6. Data sharing
We do not sell, rent, or trade your personal data. We do not share your data with any third party, except as required to operate the app (Google Firebase, described above) or as required by law.
7. Your rights
- Access — all your data is visible directly within the app.
- Deletion — you can delete individual transactions within the app. To delete your entire account and all associated data, contact us at the address below and we will remove everything within 30 days.
- Data portability — you can export all your transactions as a CSV file via Settings → Import Budget Data → Export as CSV.
8. Children
BudgetFlow is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy as the app evolves. When we do, we will revise the "Last updated" date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions, data deletion requests, or concerns: