Privacy Policy
This Privacy Notice explains how Budget Planner LLP ("BudgetPilot", "we", "us") collects and uses your personal data when you use the BudgetPilot app and website.
Last updated: September 16, 2026
1. Who is responsible for your data
Budget Planner LLP, a limited liability partnership registered in the Republic of Kazakhstan, is the data controller for the personal data described in this notice. If you have questions about your data, contact us at support@budgetpilot.dev.
2. Personal data we collect
Depending on how you use BudgetPilot, we may collect:
- Account data: your name, email address and password (stored only as a secure hash), or your Google account identifier if you sign in with Google.
- Budget data you enter: income, budget amounts, transactions, categories, goals and other financial figures you type into the app.
- Support messages: the content of emails you send to our support address.
- Usage and device data: information about how you use the app, your IP address, browser type and device identifiers, used for security and to keep the service working.
3. Why we use your data
- To create your account and let you sign in (performance of a contract).
- To provide the service — budgets, transaction tracking, goals, insights and AI features — based on the data you enter (performance of a contract).
- To secure your account, prevent fraud and abuse, and keep the service reliable (legitimate interests).
- To answer your support requests (performance of a contract / legitimate interests).
- To process payments and manage your subscription (performance of a contract; payment data itself is handled by our Merchant of Record, Paddle).
- To improve the product based on aggregated usage patterns (legitimate interests).
4. AI features
When you use AI features (the AI advisor, budget optimisation or monthly reviews), the relevant parts of your budget data — such as category totals, income ranges and goals — are sent to an AI model provider on our behalf to generate your answer. Your prompts and the AI's outputs are used only to provide the feature you requested. Do not enter information into the AI chat that you do not want processed for this purpose.
5. Who we share data with
We share personal data only with the following categories of recipients:
- Service providers (subprocessors): our hosting, database and authentication provider (Lovable Cloud / Supabase), email delivery providers and AI model providers, each processing data on our instructions.
- Google: if you choose "Continue with Google", we receive your name, email address and account identifier from Google under your Google account settings.
- Merchant of Record: our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders; Paddle handles payments, subscription management, tax compliance, invoicing and refunds.
- Professional advisers: legal, accounting or audit professionals, where needed.
- Authorities: where we are required to disclose data by law or to protect our rights.
We never sell your personal data or your financial information.
6. International data transfers
Your data may be processed outside your country. Where personal data leaves the UK or the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
7. How long we keep your data
We keep account and budget data for as long as your account is active. When you delete your account or ask us to delete your data, we delete or anonymise it, except where we must keep certain records (for example payment or tax records kept by Paddle, or records we are legally required to retain). Support emails are kept for up to 24 months after the matter is closed.
8. Your rights
Depending on where you live, you have the right to access, correct or delete your personal data, restrict or object to processing, data portability, and to withdraw consent where processing is based on consent. UK/EEA users may also complain to their local supervisory authority. We respond to requests within one month. You can export your transactions as a CSV or delete all data yourself from Settings, or email us at support@budgetpilot.dev.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and row-level security so that only you can read your budget data. No method of transmission or storage is completely secure, but we work continuously to protect your information.
10. Cookies
BudgetPilot uses only essential cookies and browser storage needed to keep you signed in and remember your preferences (such as your theme). We do not use advertising cookies. If we add analytics or marketing cookies in the future, we will update this notice and ask for your consent where required.
Questions about this policy?
Budget Planner LLP — write to us at support@budgetpilot.dev.