Privacy Policy
BudgetBits never asks for your bank login and never connects to your bank. Everything in your budget is something you typed or imported yourself. This policy explains exactly what we store, where, who helps us run the service, and what you can do about it.
1. Who we are
BudgetBits (budgetbits.io) is operated by Dario Integrated Solutions-Multi-Services, Unipessoal LDA, a company registered in Portugal, run by its founder, Dario De Sousa Brito. We are the data controller for the personal data described here. Contact: support@budgetbits.io.
2. What we store
Your account. Your email address and a securely hashed password. If you sign in with Google, we receive your name and email address from your Google account. Our sign-in provider also keeps security records of sign-ins, such as the time and IP address.
Your budget. The transactions, budgets, categories, envelopes, crypto holdings and settings you enter or import, plus the display name you choose. This is stored in our database so you can use BudgetBits on any device.
Your subscription. If you pay, we keep your plan, its status, its renewal date and a Stripe customer reference. Your card details go directly to Stripe. We never see or store them.
Messages you send us. If you use the contact form or email support, we receive your name, email address and message.
We do not collect your bank login, bank account numbers or card numbers. We do not run analytics or advertising trackers on budgetbits.io.
3. Where your data lives and how it is protected
- Your account and budget data are stored with Supabase in the EU (Frankfurt, Germany).
- Data is encrypted at rest by Supabase and sent over HTTPS.
- Database rules allow only you to read or change your own budget data.
- The founder has administrator access to the database for support and operations. He only reads your data when you ask for help, for example when you email support. Administrator actions on accounts are logged.
4. Services that help us run BudgetBits
We share only what each service needs to do its job. We do not sell or rent your personal data, and we do not share it for advertising.
| Service | What it does | What it receives |
|---|---|---|
| Supabase | Database and sign-in | Your account and budget data |
| Replit | Hosts the BudgetBits app servers | Your requests to the app, including IP address |
| Stripe | Payments and the billing portal | Your payment details, name and email |
| Twilio SendGrid | Delivers BudgetBits emails | Your email address and the email content |
| Sign-in with Google (if you choose it), and Google Sheets templates | Sign-in: your Google account details. Premium templates: your email address, so the template can be shared with you | |
| Discord | Private notifications to the founder when someone subscribes, cancels or has a payment problem | Your name, email address, plan, amount and Stripe customer reference |
| CoinGecko | Live crypto prices | Your IP address (the request comes from your browser). No account or budget data |
| Frankfurter | Live exchange rates | Your IP address (the request comes from your browser). No account or budget data |
| YouTube (privacy-enhanced mode) and Supademo | Product videos and the demo tour | Loaded only when you open them, under their own privacy policies |
When you make your own copy of a Google Sheets template, that copy lives in your Google account under Google's terms, not ours.
Some of these services are based in the United States. Where your data leaves the EU, we rely on the transfer safeguards each provider offers, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
5. Why we use your data (legal bases)
- To provide BudgetBits to you (performance of our contract with you): your account, your budget, your subscription, account emails, templates.
- To keep BudgetBits secure and running, and to answer you (our legitimate interests): sign-in security records, founder notifications about subscriptions and payment problems, support messages.
- To meet legal duties (legal obligation): payment and invoice records kept for tax and accounting law.
We do not make automated decisions about you that have legal or similar effects.
6. Cookies and browser storage
We store your sign-in session in your browser so you stay signed in. This is essential for the app to work. We use no analytics, advertising or cross-site tracking cookies. YouTube and Supademo may set their own cookies when you play a video or open the tour.
7. How long we keep it
- Your account and budget data: until you delete it.
- Settings, Danger Zone, "Delete All Data" removes every transaction, budget, envelope and holding at once.
- To remove your whole account (including your sign-in record), email support@budgetbits.io and we will do it within 30 days.
- Payment records: as long as tax and accounting law requires.
- Support emails: as long as needed to help you, then deleted.
8. Your rights
You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and to move it to another service. Exports are self-serve: Settings, Open Exports, "Download everything as JSON", or individual CSVs and PDF reports. For anything else, email support@budgetbits.io.
If you are in the EU, you can also complain to a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt.
9. Children
BudgetBits is not meant for anyone under 16, and we do not knowingly collect their data.
10. Changes to this policy
When this policy changes, we post the new version here with a new "Last updated" date.
Contact
Questions about privacy or security: support@budgetbits.io, or the contact form on our Support page. Put URGENT in the subject for anything urgent.