Privacy policy

The data controller is [To be completed: publisher's name or company name], [To be completed: publisher's address]. For any question about your data, write to [To be completed: contact e-mail address].

• Account: e-mail address, display name, language. Your password is stored hashed by our authentication provider, never in plain text.
• Household: name, currency, members and roles, invitations (e-mail address of the invited person).
• Transactions and budgets: amounts, dates, categories, merchants, notes, the member concerned and the payment method (a label and, if you enter them, the last 4 digits of a card, never the full number).
• Receipts: the photos and files of receipts or invoices you scan or import, and the information extracted from them.
• Feedback: the messages you send from Settings, with the screen they were sent from, the language and the app version, without any financial data.
• Optional answer to “How did you hear about us?”, visible to you only.
• Technical data: IP address, browser type, date and time of requests, error logs, needed to run and secure the service.

We never ask for bank details and BudgetOptim does not connect to any bank.

• Providing the service (account, shared households, transactions, budgets, scanning): performance of the contract formed by the terms of use.
• Securing the service (abuse prevention, usage limits, technical logs): our legitimate interest.
• Improving the service from your feedback: our legitimate interest. The answer to “How did you hear about us?” is optional.
• Tracking the cost of the artificial intelligence features: we record the model used, the volume and the cost of each request, without any content (no image, text or amount): our legitimate interest.

Your data is never used for advertising or profiling, and we never sell or rent it.

When you scan a receipt, our servers first remove the photo's metadata (such as its location), then send it to OpenRouter, which passes it to the provider of the selected artificial intelligence model (by default, a Claude model by Anthropic; as a backup, a Gemini model by Google) to extract the merchant, date, amounts and lines. We ask OpenRouter to use only providers that do not store request data. You are shown the result, and nothing is saved until you confirm it.

Assistant (coming soon): your questions will be sent to the model provider in the same way. Neither audio nor conversations will be kept on our servers, only a usage counter and the cost tracking described above, without any content.

Voice dictation (coming soon, optional): speech recognition is provided by your browser (for example Google for Chrome, Apple for Safari), which may process the audio on its own servers under its privacy policy. The keyboard is always available.

We use the following providers, which process data on our behalf and on our instructions:

• Supabase: database, authentication and receipt storage.
• Cloudflare: hosting of the website and the app, delivery and protection against attacks.
• Resend: account e-mails (address confirmation, password reset).
• OpenRouter and the provider of the artificial intelligence model (Anthropic by default, Google as a backup): reading scanned receipts and, soon, the assistant's answers.
• Google: signing in with a Google account, if you choose that option when it is offered.

Some of these providers are based outside the European Union, in particular in the United States. These transfers are covered by the safeguards of the GDPR: an adequacy decision (EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.

• Account, profile and feedback: as long as your account exists. They are erased when you delete your account.
• Household data (transactions, categories, budgets, receipts, invitations, change history): as long as the household exists. A deleted transaction is hidden but stays in the household's history.
• When you delete your account, the households where you are the only member are deleted with all their data and receipts. In a shared household, your transactions stay for the other members, shown as “Former member”, without your name.
• Invitations: the link expires after 7 days.
• Technical logs: a short period set by each provider for security and troubleshooting.
• Artificial intelligence cost tracking (model, volume, cost, without any content): kept to run the service. When you delete your account or a household, it is no longer linked to you or to that household.

You have the right to access, rectify, erase, restrict, object to the processing of and port your data. Most of them can be exercised directly in the app:

• Export: Settings > Security and data downloads your data as a machine-readable file (JSON).
• Deletion: Settings > Security and data deletes your account, as described above.
• Rectification: edit your profile, transactions and settings in the app.

For any other request, write to [To be completed: contact e-mail address]. We answer within one month. You can also lodge a complaint with the data protection authority of your country (in France, the CNIL: www.cnil.fr; in Spain, the AEPD: www.aepd.es).

BudgetOptim only uses cookies the service needs, with no advertising trackers and no audience measurement:

• sign-in session (sb-…-auth-token), to keep you signed in;
• language (NEXT_LOCALE) and appearance (bo-theme), to remember your preferences.

These cookies do not require your consent, because the service needs them or they remember a choice you made.

Encrypted connections (HTTPS); access to a household's data limited to its members and enforced by the database itself; receipts in private storage, opened through short-lived links; passwords checked against known breaches without ever being sent (only a fragment of their fingerprint is).

We may update this policy. The date of the last update is shown at the top of the page. If there is a significant change, we will let you know in the app or by e-mail.