BudgetPro Privacy Policy
How BudgetPro handles your account, financial information, connected services, and privacy choices.
Last updated:
Who is responsible for your data
BudgetPro is operated by Cesar Schalm Junior, who is responsible for the personal data processing described in this policy. For privacy questions or requests, contact support@budgetproweb.app or use the support page linked below.
What BudgetPro stores
BudgetPro stores the information you choose to enter or import, including budgets, planning types, rollover settings, Spending Plan records such as paychecks and saved bills, accounts, Manual Assets, transactions, categories, goals, linked funding-account references, recurring schedules, receipt and statement documents, and collaboration settings. Backup files are created for you to download or share and are not stored by BudgetPro as separate cloud backup files.
When you sign in, BudgetPro stores basic account identity details such as your email address, display name, and profile photo to authenticate you, support shared-budget access, send account security notices, and send reminder emails you turn on. If you register a passkey, the service stores its public-key credential and related device metadata to verify access.
Optional account reference fields (for example institution names, masked last digits, country-specific identifiers such as Brazilian Agência for branch reference, and encrypted vault values you explicitly choose to save, such as a full card number, its security code, or bank account and routing numbers) and optional Manual Asset details (for example property, vehicle, crypto, retirement, or receivable notes and current values) are stored in your workspace to help you organize your finances.
If you save portfolio snapshots, your workspace stores dated native-currency account and Manual Asset values together with their recorded exchange rates. Goal tracking settings, linked funding information, spending watchlists and reminder preferences are also stored when you use these features. Saved scenarios also store the budget, loan and home-purchase assumptions you enter; simulated payment schedules are calculated from those assumptions.
The demo
The demo at budgetproweb.app/demo opens the app with made-up sample data in a separate Firebase project that holds no customer data. It signs you in with an anonymous account, without your name or email, and what you change there stays in that demo account.
The demo account and everything in it are deleted when you choose Start over or Leave demo, and demos older than a day are deleted, with their accounts, as new demos open. To prevent abuse, we count how many demos each network address opens per hour. The count is stored under a one-way hash of the address and is deleted automatically once the hour is over, usually within a day.
Sharing and collaboration
Budget sharing is view-only. When you share your budget, the person you invite can see all of it, including budgets, transactions, accounts, goals, bills and Manual Assets, but cannot change anything. Saved card and bank account numbers, receipts and other documents, your AI chat history and bank connection details are never shared. Invitations identify you and the person you invited.
If you choose, BudgetPro emails you both about the share. You can remove access at any time, and the person you invited can leave. BudgetPro can turn sharing off for everyone; while it is off, the people you invited cannot open your budget and your invitations are kept. Removing access does not erase copies or exports someone already made. Only share information you are entitled to disclose.
Billing and support information
Stripe processes subscription payments and payment-method details. BudgetPro stores billing references and entitlement information, such as your user identifier, email, plan, subscription status, trial or renewal dates, and Stripe customer and subscription identifiers.
If you contact support, the information you submit, including your name, email address, topic, and message, is used to respond to your request. Avoid including passwords, API keys, or full payment-card details in support messages.
Browser storage, offline data, and widgets
BudgetPro uses local and session storage for preferences and authentication-related state. Workspace database caching is in memory by default; durable offline caching is an optional deployment setting. Legacy Gmail token and saved-search keys are cleared by this version. Older versions may have left a database cache on your device; clear site data only after pending saves finish. Authentication and connected providers also use their own cookies or storage. Free calculator inputs normally stay in memory. Save on this device keeps a copy only in this browser until you turn it off or clear site data. Carrying values to another tool or choosing to continue a plan stores selected entries in this tab’s session storage; staged workspace imports expire after seven days and can be dismissed. After sign-in, an additional preview and explicit import action are required before selected goal or bill data is saved to your BudgetPro workspace. Calculator copies, downloads and printouts are created when requested and remain under your control.
Native home-screen widgets use a financial snapshot stored on your device and may display account names and balances. You can hide balances in Settings > Preferences. Reopen the app to refresh the widget after changing preferences on another device. Signing out clears the app's widget snapshot.
When you arrive from a link with a campaign tag (such as utm_source) or from another website, your browser keeps that tag or the website's name for up to 90 days. If you open the demo or start a checkout, it is sent along so BudgetPro can count which links and websites lead to demos and subscriptions. The demo count is anonymous; a checkout also saves it with your subscription in Stripe.
Diagnostics and reliability
When configured, Sentry receives limited error and performance diagnostics, such as error type, code location, request status, timing, and an app user identifier. BudgetPro disables session replay and filters document contents, request bodies, credentials, query strings, and direct user contact details from these events. Hosting and security services also process technical request information needed to operate and protect the service. Public tool usage can also be measured through Vercel Web Analytics using fixed tool names, interface language and actions such as opening a tool, editing an input, copying a result or starting the demo or account entry. Financial inputs, result amounts, entered names and account identifiers are not included in these events. Calculator event URLs exclude query strings, fragments and arbitrary paths. Account-entry clicks are not counts of completed registrations.
Optional payment reminders
Device notifications are optional and require permission on each device. Native apps store scheduled notifications on the device. When browser push is configured and enabled, the service stores your user identifier, push subscription endpoint and keys, a bounded upcoming notification queue, and recent delivery identifiers. Messages are delivered through the browser or platform push service. Notification details are hidden by default; if you enable details, bill names and dates may appear on your device, including its lock screen.
You can disable reminders for a device in Settings > Notifications and manage notification permission in your browser or device settings. Reminder preferences can be included in a backup, but device permissions and push subscriptions are not restored from it. A closed native app must be reopened to refresh local schedules after changes made elsewhere. Reminders do not initiate payments or cancel subscriptions.
Email reminders are a separate setting for your whole account. Accounts created from October 27, 2026 have them turned on once, after the first subscription starts; older accounts turn them on themselves. While they are on, reminders are sent only to the verified email address of your sign-in account, through the email delivery provider Resend, from notify.budgetproweb.app. Reminders due at the same time are combined into one email. While email reminders are on, the service stores your user identifier, a one-way hash of your email address, your language, whether details are shown, your time zone and quiet hours, a bounded upcoming reminder queue, up to 10 unpaid bills from the last 30 days, and recent delivery identifiers; the address itself is read from your sign-in account when an email is sent. Details are hidden by default, so emails only say how many payments to review and how many bills are still unpaid; if you enable details, bill names, dates, amounts, whether autopay pays them, the payment account name and a warning when the account forecast says that account may not cover a payment (never its balance) appear in the email and are processed by Resend and your email provider.
You can turn off email reminders in Settings > Notifications, with the unsubscribe link in every reminder email, or with your email app's unsubscribe button; each way deletes the stored email reminder record. Email reminders also turn off, and the record is deleted, if your account no longer has an active subscription when a reminder is due; turn them on again after you resubscribe. Signing out does not turn them off. The email reminder opt-in is not included in backups, so restoring a backup never turns email reminders back on. Email reminders use the reminder queue last uploaded while you had BudgetPro open. If a reminder email bounces permanently or is reported as spam, BudgetPro deletes the email reminder records for that address and keeps a one-way hash of the address with the reason and date, so no further reminder or security emails are sent to it until you delete your account or support restores delivery.
Account security emails
When email delivery is configured, BudgetPro sends a security notice to the verified email address of your sign-in account when a passkey is added to or removed from your account. These notices are sent to every account through Resend, are separate from reminder emails, and cannot be turned off or unsubscribed from. A notice states when the change happened and the passkey type and, for removals, how many passkeys remain; it never includes the name you gave the passkey.
The same passkey change is reported at most once every five minutes, and an account receives at most 10 notices in any five-minute period. Notices are not sent to disabled accounts, unverified addresses, or addresses suppressed after a bounce or spam report. Delivery is best-effort, and a notice that fails is not retried. To apply these limits, the service stores your user identifier and, for recent notices, the time, the type of change and a one-way hash of the affected passkeys. Entries older than five minutes are removed when the next notice is sent.
BudgetPro also sends one welcome email to the verified address of a new account after its first sign-in, in the app's language. It is sent once and not to accounts more than a day old, disabled accounts, unverified addresses or suppressed addresses. To send it only once, the service stores your user identifier and when the welcome was sent; this record is deleted with your account.
Previously imported Gmail data
Gmail search and import have been retired. This version does not request gmail.readonly or provide Gmail searches or imports. Basic Google sign-in remains available independently of Gmail access.
The former integration read matching message headers and bodies after you initiated a search and agreed to the disclosure; attachments were downloaded only when selected. It did not send, modify, or delete Gmail messages. Retiring this feature does not revoke previously issued Google grants or delete imported data.
Previously imported attachments, email bodies, and document metadata may remain in your Firebase-backed workspace. Financial records you confirmed from those imports also remain. You can review or delete source documents separately from the accounts, budgets, and transactions built from them. Gmail retirement does not automatically delete any of these records.
You can manage previously issued grants in Google Account connections. Revocation stops access through the grant; it does not delete BudgetPro documents or financial records. Google revocation can also require basic Google sign-in consent again. Older app versions may still have access until grants or the deployed integration are disabled; updating the app does not itself revoke a grant.
Retained imported and derived data can include merchant, date, amount, currency, line items, categories, transactions, and financial summaries. Later document analysis, AI chat, reports, or voice that you choose may include this content or derived financial records and remain subject to the approved-provider and Limited Use controls below. Exports and sharing you initiate can also include them. Deleting a source document does not delete transactions already created from it, exported backups, or copies you shared.
Google data and Limited Use
BudgetPro’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy and Google Workspace API User Data and Developer Policy, including the Limited Use requirements.
Google user data and data derived from it are used only to provide or improve the user-facing budgeting features you request. BudgetPro does not sell this data, use it for advertising, creditworthiness or lending decisions, or use it to train, fine-tune, or improve generalized AI or machine-learning models. Transfers are limited to service providers needed for those features, sharing you direct, security purposes, legal obligations, or another purpose permitted by these policies. Human access is limited to the circumstances these policies permit, such as your explicit agreement for specific data or security and legal needs.
AI-assisted processing
When you choose to use an AI-assisted feature, the information needed for that request is sent to the configured AI provider. Depending on the feature, this may include your prompt; selected statement, receipt, or spreadsheet content; transaction descriptions or history; budget categories, items, and forecast values; account and Manual Asset names or types; goals; or current and historical financial summaries.
AI requests pass through BudgetPro’s server to approved OpenAI or paid Google Gemini API providers. Only explicitly approved providers can receive requests or fallback retries, including voice. Personal API keys are not supported. Provider approval requires verifying that API inputs and outputs are not used for model training. Provider security and abuse-monitoring retention may still apply.
AI use is optional and results can be inaccurate. Review extracted data, suggestions, summaries, and forecasts before relying on them. AI voice sends the overview transcript to the configured speech provider; you can select device voice in Settings instead. If no AI provider is available, AI analysis is skipped. Spoken commands use your browser’s speech recognition, which may process the audio on the browser maker’s servers; BudgetPro receives only the recognized text.
BudgetPro does not train generalized AI models with your financial data. It uses provider API settings and terms that exclude inputs and outputs from model training, and requests that supported generated content not be stored as reusable provider state or project logs. This is not a promise of zero retention: providers can retain limited data for security, abuse monitoring, or legal requirements under their applicable terms.
How data is used
BudgetPro uses your data to operate the budgeting product, sync your workspace across devices, support sharing and permissions, analyze imported documents, generate Financial Snapshot and Spending Plan views, account summaries, debt payoff context, current net worth summaries, forecasts, Bills & Recurring review queues, and the features you explicitly turn on, such as payment reminder notifications and emails. It also uses your account email address to send security notices about your account.
BudgetPro does not sell your personal financial data. Data is used to provide the service, secure the app, troubleshoot issues, and improve product reliability.
Purposes and legal bases
Where applicable data-protection laws require a legal basis, account, workspace, billing, and support information is processed to provide the service and perform the subscription contract, meet legal obligations, and pursue legitimate interests such as preventing abuse, securing the service, and responding to support requests. Account security notices are sent to provide and secure the service and your account. Rights and the applicable basis depend on the processing and the law that applies to you.
Optional AI-assisted processing, notifications, reminder emails, and saved vault values depend on your choices and can be disabled or removed through the app where available.
Processors and international transfers
BudgetPro uses Firebase/Google for authentication and cloud infrastructure, Vercel for hosting and server functions, Stripe for billing, Resend for email delivery, Google Gemini or OpenAI for configured AI features, and Sentry for diagnostics when enabled.
These providers may process information outside your country. Processing locations and terms depend on the provider and feature. Contact us for information about the providers and international-transfer safeguards applicable to your data.
Your choices
You can edit or delete Manual Assets, delete imported receipt documents, disconnect optional services, export backups, restore from backups, and turn off reminder emails in Settings > Notifications or with the unsubscribe link in any reminder email. Account security notices are sent to every account and cannot be turned off. Previously imported Gmail data is managed separately from Google grants.
To avoid AI processing, leave optional document analysis off and do not choose AI-assisted parsing, analysis, chat, reports, or AI voice. You can select device voice in Settings. Previously granted Gmail access can be revoked through your Google Account. Removing a source document does not remove financial records you have already created from it.
Data retention and security
Workspace data remains stored until you remove it or complete account deletion in Settings or on the plans page. Account deletion removes your BudgetPro workspace, uploaded documents, authentication profile, and associated app records, including email reminder records, security notice timestamps, and any bounce or spam suppression record for the email address you are signed in with. It also deletes your Stripe customer profile and saved payment methods and disconnects any linked bank logins. Limited billing and account-deletion records, including account and Stripe references, remain to preserve subscription status and prevent later billing events from restoring access.
Account deletion does not erase backups you exported, copies held by collaborators, or records held separately by payment, email delivery, and other service providers, including Resend’s delivery logs and its own suppression list. These providers apply their own retention terms. Contact support about retained records or a deletion request that did not complete.
Firebase authentication, per-account access rules, encrypted native token handoffs, optional passkeys, vault values encrypted in your browser and unlocked with a passkey, a one-time recovery key, or a vault password, and password-protected backups help protect access. Connections to production services use HTTPS. These measures do not make the entire workspace end-to-end encrypted. No system guarantees absolute security; protect your device, sign-in account, and exported files.
Children
BudgetPro is for adults: you must be 18 or older to use it, and it is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account or given us personal information, contact support and we will delete it.
Your privacy rights
Depending on applicable law, including Brazil's LGPD and European, UK, or Swiss data-protection laws, you may request access, correction, deletion, information about sharing, or portability of your personal data. You may also have rights to restrict or object to processing and withdraw consent where processing relies on it.
You can edit workspace information, export a machine-readable backup, and delete your account in Settings. For other requests, contact support. We may need information to verify your identity. Withdrawing consent does not affect processing that was lawful before withdrawal.
You may raise concerns with the relevant data-protection authority, including Brazil's ANPD where applicable. These rights can be subject to legal conditions and exceptions.
Changes to this policy
Changes to this policy will be reflected on this page with an updated date. Check this page when using a new feature or connected service, and contact support if you need clarification.
Contact
Questions or privacy requests can be sent through the BudgetPro contact page or by email to support@budgetproweb.app.
Contact support · support@budgetproweb.app
You can also review the Terms of Service.