Privacy Policy

1. Introduction

My Budget Mate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web-based budgeting application.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Email address, password (hashed), and optional profile information such as name and profile picture
• Financial Data: Expenses, income, categories, budgets, tags, and other financial information you enter into the Service
• Settings: User preferences and application settings

2.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Information about how you interact with the Service, including pages visited, features used, and time spent
• Device Information: Browser type, operating system, device identifiers, and IP address
• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience and analyze usage

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Data Storage and Security

4.1 Data Hosting

Your data is stored securely using Supabase, a cloud-based platform that provides database and authentication services. Supabase uses industry-standard security measures and complies with GDPR and other data protection regulations.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Secure authentication and authorization
• Regular security assessments and updates
• Access controls and audit logs

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers (such as Supabase) who assist us in operating the Service, subject to confidentiality obligations
• Legal Requirements: When required by law, court order, or governmental authority
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users
• Business Transfers: In connection with any merger, sale of assets, or acquisition
• With Your Consent: When you explicitly authorize us to share your information

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain data protection rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request restriction of processing your personal data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us through the Service. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal data, except where we are required to retain it for legal purposes.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and features

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

9. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the Service or visit our website.