Privacy Policy

Last updated April 12, 2026

This privacy notice for Budget Stream ("Company", "we", "us", "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

1. Download and use our mobile application (Budget Stream), access our web application at web.budgetstream.app, or use any other application of ours that links to this privacy notice.
2. Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at contact@budgetstream.app.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include: name, email address, and profile image.

Sensitive Information. We do not process sensitive information.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Google or Apple account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:

1. Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, and browser type and version.
2. Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). You may turn them off in your device's settings.

Information automatically collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, and referring URLs.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

1. To facilitate account creation and authentication and otherwise manage user accounts.
2. To deliver and facilitate delivery of services to the user.
3. To understand how our features are used and improve the app experience.
4. To evaluate and improve our Services, products, and your experience.
5. To identify usage trends.
6. To monitor and fix errors, crashes, and bugs.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We process your personal information only when we have a valid legal basis under applicable law.

If you are located in the EU or UK (GDPR)

The General Data Protection Regulation (GDPR) requires us to explain the legal bases we rely on:

1. Consent (Art. 6(1)(a) GDPR). We rely on your consent to process usage analytics data. You can withdraw consent at any time by contacting us.
2. Contract Performance (Art. 6(1)(b) GDPR). We process account data (name, email, financial records you enter) to provide the Services you have contracted with us.
3. Legitimate Interests (Art. 6(1)(f) GDPR). We process technical error data to maintain service stability. This does not require consent.

If you are located in Colombia

The processing of your personal data is governed by Ley 1581 de 2012 and its regulatory decrees. By registering and using our Services, you authorize Budget Stream to collect and process your personal data for the purposes described in this notice. You may exercise your rights of access, correction, deletion, and objection at any time by writing to contact@budgetstream.app. Budget Stream is responsible for the processing of your data and may be contacted at the same address.

Other regions

We process your information when it is necessary to provide our Services (contract performance), when you have given us your consent, and when we have a legitimate interest in improving the reliability and quality of our Services that does not override your fundamental rights.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations with trusted third-party service providers.

We work with third-party providers to operate our Services, including providers for:

1. Database storage, authentication, and file storage.
2. Web application hosting.
3. Subscription and billing management.
4. Push notifications (mobile application).
5. Anonymous usage analytics and error monitoring.
6. Mobile advertising in the free tier of the mobile application. We do not share your financial data with advertising providers. Premium subscribers do not see ads. The web application does not serve ads.

We may also share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to.

The Services may link to third-party websites, online services, or mobile applications that are not affiliated with us. We are not responsible for any loss or damage caused by the use of such third-party websites, services, or applications.

6. DO WE USE TRACKING TECHNOLOGIES?

In Short: We use Google Analytics to understand how our app is being used and improve it.

Google Analytics (Firebase Analytics)

We use Firebase Analytics (Google) to track anonymous usage events such as screen views and feature interactions. This helps us understand how our app is being used and improve it. Firebase Analytics does not collect your financial data.

EU/EEA users: Firebase Analytics is disabled by default and will only be activated after you explicitly accept via the consent banner. Other regions: Analytics is active by default (opt-out model). You can disable it at any time in Settings → Privacy.

Your consent preference is stored locally in your browser (localStorage). To opt out, go to Settings → Privacy and toggle off "Usage Analytics."

Google reCAPTCHA v3

Our web app uses reCAPTCHA v3 on the login and sign-up forms to keep bots out. It runs quietly in the background — no puzzles or "click the traffic lights" checkboxes. It looks at signals like how you interact with the page, your device type, and browser info, then sends that to Google to get a spam-risk score. Google processes that data under their own Privacy Policy and Terms of Service.

EU/EEA: Our legal basis is legitimate interests under Art. 6(1)(f) GDPR — keeping fake accounts off the platform.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your Google or Apple account. The profile information we receive may vary depending on the provider but will often include your name, email address, and profile picture.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We retain your personal information for as long as your account is active. Accounts inactive for more than twelve (12) months may be deleted along with associated data. You may request deletion of your account and data at any time by using the "Delete Account" option in Settings or by contacting us at contact@budgetstream.app.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet can be guaranteed to be 100% secure.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. Contact us at contact@budgetstream.app if you become aware of any such data we may have collected.

11. YOUR PRIVACY RIGHTS

Depending on your location, you may have specific rights regarding your personal data. To exercise any of the rights below, contact us at contact@budgetstream.app.

EU / EEA Users — GDPR Rights

1. Right of access. You have the right to request a copy of the personal data we hold about you.
2. Right to rectification. You have the right to request correction of inaccurate personal data.
3. Right to erasure ("right to be forgotten"). You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
4. Right to restrict processing. You have the right to request that we restrict the processing of your personal data in certain circumstances.
5. Right to data portability. You have the right to receive your personal data in a structured, commonly used, machine-readable format.
6. Right to object. You have the right to object to processing based on legitimate interests.
7. Right to withdraw consent. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
8. Right to lodge a complaint. You have the right to lodge a complaint with your national data protection supervisory authority.

Colombian Users — Ley 1581 de 2012 (Habeas Data)

1. Right to know. You have the right to know what personal data we hold about you, why we process it, and how it is being used.
2. Right to update and rectify. You have the right to request correction of inaccurate, incomplete, or outdated data.
3. Right to deletion. You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your authorization.
4. Right to object. You have the right to object to the processing of your personal data for specific purposes.
5. Right to revoke authorization. You may revoke the authorization you have granted for the processing of your personal data at any time, provided there is no legal or contractual obligation to keep it.
6. Right to file complaints. You may file complaints with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co.

All Users

1. Right to know whether or not we are processing your personal data
2. Right to access your personal data
3. Right to correct inaccuracies in your personal data
4. Right to request the deletion of your personal data
5. Right to obtain a copy of the personal data you previously shared with us

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at contact@budgetstream.app.