Privacy Policy

When you create an account and use MyBudgetory we store:

• Account details — your name and email address.
• Your password — stored only as a bcrypt hash; we never store or see the plain password.
• Financial entries you add — transactions, bank balance and its history, investment assets and their valuations, budget goals, debts and loans, recurring payments, and split-bill events with their participants.

We do not collect your bank credentials, card numbers, location, contacts, or any data from other apps. Everything financial in MyBudgetory is something you typed in yourself.

Your information is used only to provide the app to you: to sign you in, to store and display your entries, and to calculate your charts, statistics, balances and net worth.

• We do not sell your data.
• We do not share your data with advertisers or data brokers.
• We do not show ads or use your data to profile you.

A small number of service providers help us run the app:

• Hosting — the web app and its API run on a cloud hosting provider.
• Database — your account and entries are stored in a MongoDB database.
• AI advice— only to produce the AI advice features (the weekly/monthly advice cards and the Net Worth “Generate AI Insights” button), aggregated figures such as totals, monthly balances and per-category sums are sent to an AI provider. Your name, email and individual transaction descriptions are not part of that request, and advice is cached so it is requested at most once per period.

We keep your data for as long as your account exists. When you delete your account, your data is removed from our database straight away (see below).

Questions about this policy or your data? Email tayyabkhangk4734@gmail.com.

If we change this policy we will update the effective date above; material changes will be announced in the app.

Transaction amounts are encrypted before they are written to the database, so they are not readable as plain numbers in the stored records.

Passwords are hashed with bcrypt. We cannot see your password, and it cannot be recovered from what we store — only checked against.

Signing in issues a signed JSON Web Token (JWT). Your device sends it with each request so the server knows which account the data belongs to; every request is scoped to your account only. Signing out removes the token from the device.

To stay fast and work offline, the app keeps some data locally on your device: cached screens and AI advice, your theme and privacy-mode preferences, and a queue of transactions added while offline (sent to the server once you are back online). This local data stays on your device; deleting your account clears it from the device you delete from, and you can also clear it any time through your browser's site data settings.

You can delete your account at any time from Profile → Danger zone → Delete account. You will be asked to confirm with your password. Deletion is immediate and permanent, and removes:

• your account (name, email and password hash)
• all your transactions
• your bank balance and its history
• your assets and all their valuations
• your budget goals
• your debts and loans
• your recurring payments
• your expenses
• split-bill events you created, with their participants and entries

The session and local data on the device you delete from are cleared as well. Deleted data cannot be restored.