Privacy Policy

This notice explains how oneUP Engineering AB (company no. 559081-4207, Redegatan 1 b, 426 77 Västra Frölunda, Sweden) processes personal data in Budgeteero. The company is the controller. Contact: support@budgeteero.com.

This is GDPR information, not a contract that makes all processing lawful through a single checkbox. If this English text conflicts with the Swedish version, the Swedish version prevails.

1. What we process

• Account: email address, user id, password hash (not the password in clear text), account creation time, which terms version you accepted and when.
• Finances: transactions (description, amount, date, type), categories, recurring income and expenses, savings goals.
• Usage: that you have used certain named features (for example savings goals), without amounts or free text.
• Technical and errors: security logs (user id, sometimes the request path on errors), the web server access log (IP address), error reports from the app (truncated message, stack trace, app version, operating system).

We do not collect name, national id number, bank accounts, card data, GPS, contacts, advertising ids or push tokens. We do not use an AI vendor or third-party analytics (for example Mixpanel or Firebase).

Forecasts and insights are computed from your own data. They are not stored as their own records. They are rule-based, not produced by a language model.

2. Why, and legal basis

• Contract (Article 6(1)(b)): creating and running your account, showing your budget, storing entries you make, authenticating you.
• Legitimate interest (Article 6(1)(f)): protecting the service (rate limiting, security logs), counting what share of accounts use a feature, and debugging the app via error reports. We do not sell data or build an advertising profile.

Aggregated figures (for example “share of accounts with a savings goal”) are produced so that a person should not be identifiable in the statistic. Custom category names may be counted as distinct strings without user id to spot missing defaults; rare names are handled carefully.

3. Where the data is

Data is stored on a server at Hetzner Online GmbH in Finland (EU). We have a data processing agreement with Hetzner. API traffic is encrypted (HTTPS). DNS for our domains is handled via Cloudflare without proxying API bodies. Certificates are issued by Let’s Encrypt.

Apple and Google process your store-account data under their own terms when you download the app. Expo/EAS is used to build and update the app; we do not send your budget data there.

We do not sell personal data or give it to advertisers.

4. How long

• Account and finance data: until you delete the account or individual rows.
• Database backups: up to about 7 days after deletion.
• Application logs on the server: rolling about 14 days / size cap.
• Caddy access log (IP): rolling about 14 days.
• Error reports in the database: deleted with the account and purged after about 14 days.
• Feature markers: until the account is deleted.

5. Your rights

You have the right of access, rectification, erasure, restriction, objection (where we rely on legitimate interest) and, where applicable, data portability. You can delete your account in the app. You can correct most finance rows in the app. Email cannot yet be changed in the app — write to support. You can request a copy of your data via support@budgeteero.com.

You may complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or your local EEA authority.

6. Cookies

The mobile app does not set browser cookies. This site does not use analytics or advertising tracking.

7. Changes

We update this policy when processing changes. The current version is at legal.budgeteero.com. We will inform you in the app of material changes.