FINBUDDY / PRIVACY POLICY
Your money data.
Kept private.
This policy explains what information FinBuddy processes, why it is used, where it is stored and how you can delete it.
Overview
Effective 16 October 2026. FinBuddy is a personal budgeting, payroll-estimation and receipt-recording application. This policy explains what information is processed, why it is used, where it is stored and how you can delete it.
Information you provide
FinBuddy processes your account email address, encrypted authentication session, profile and pay settings, work-calendar entries, account balances, budgets, transactions, notes, receipt images and receipt details. The app does not connect to your bank, initiate payments, sell personal information or use advertising trackers.
How information is used
Information is used only to provide budgeting, transactions, payroll estimation, encrypted backup, account authentication, cross-device financial-data synchronization and optional AI receipt extraction. Payroll, tax and budget results are estimates based on the values and rules you enter.
Local and cloud storage
The app stores an encrypted local snapshot and encrypted receipt files on your device. The encryption key and authentication tokens are stored using the Android Keystore or iOS Keychain. When signed in, the app synchronizes an account-scoped JSON snapshot to the dedicated FinBuddy Supabase project in the United States. Receipt photos are excluded from this snapshot and are not uploaded to FinBuddy cloud storage by current builds. Row-level security limits each signed-in user to their own database record.
Receipt scanning and third parties
If you choose AI receipt scanning, the selected receipt image is resized and sent through an authenticated Supabase Edge Function to the Google Gemini Developer API for extraction. On the currently configured Gemini free tier, Google may use submitted content to improve its products. Do not scan a receipt if you do not want it processed under those terms. Supabase provides authentication, database, storage and serverless functions; Expo provides app build and delivery tooling.
Offline operation and synchronization
Core calendar, payroll, account, budget and transaction functions work offline after sign-in. Offline changes remain encrypted on the device and are retried when connectivity returns or when you request a sync. Account creation, sign-in, cloud synchronization, AI scanning and permanent account deletion require an internet connection. Receipt photos do not transfer to another device through cloud sync. If the same record is changed on multiple devices before syncing, the newest complete state snapshot may replace an older snapshot.
Retention and deletion
Local data and local receipt images remain until you delete the related record, delete the app or clear application storage. Synchronized financial data remains while your account exists. You can permanently delete your account from Profile, which removes the Supabase authentication account and cloud state. Earlier test versions could upload private receipt copies; an upgraded signed-in app removes any referenced legacy copy through the Storage API. A public account-deletion page is also available. Encrypted backup files remain wherever you chose to save them and must be deleted by you.
Security and limitations
FinBuddy uses encryption at rest locally, TLS in transit and row-level access controls for synchronized data. No system can guarantee absolute security. Protect your device, password and backup passphrase, review scanned values before saving and keep independent records for important financial or employment decisions.
Your choices and rights
You can edit or delete individual records, export an encrypted backup, disable biometric locking, decline camera or photo access, avoid AI scanning, sign out, or permanently delete your account. Privacy and deletion requests can be completed through the in-app Privacy and account controls or the public account-deletion page.
Children
FinBuddy is not directed to children under 13 and should not be used by a child to submit personal or financial information without the involvement of a parent or legal guardian.
Changes and contact
Material policy changes will be reflected by a new effective date in the app and public policy. Privacy, account-deletion and recovery-support requests may be sent to support-FinBuddy@cybertwinsdigital.com.
Need to exercise a privacy right?
Use the in-app Privacy & sync controls, the dedicated deletion page, or contact FinBuddy support. Never send your password or backup passphrase by email.
support-FinBuddy@cybertwinsdigital.comOpen any email app or webmail service and use the subject FinBuddy privacy request.