# Budget — Privacy Policy

_Last updated: May 2026_

Budget ("the app") is a personal budget tracking application. This policy describes what data the app collects, how it's stored, and what is and isn't shared.

## What the app collects

The app collects only what's necessary for it to function:

- **Account credentials**: your email address and password, used to authenticate you. The password is hashed and stored by Supabase (the app's backend); we never see the plain-text password.
- **Budget data**: the categories, transactions, carry events, and preferences you enter into the app.
- **Authentication tokens**: short-lived session tokens stored encrypted in your device's secure storage (iOS Keychain via Expo SecureStore).

## What the app does NOT collect

- No tracking analytics
- No advertising identifiers
- No location data
- No contacts
- No photos (unless you choose to scan a receipt in a future feature, in which case the photo is processed locally and discarded)
- No third-party SDKs that report usage to advertisers or data brokers

## Where your data lives

Your data is stored in a Supabase project (PostgreSQL database) with row-level security enforced. Each user can only access their own rows — your data is invisible to every other user of the app, and to the developer.

## Sharing

Your data is never shared with third parties for marketing, analytics, or any other purpose.

## Biometric authentication

If your device supports Face ID or Touch ID, the app will use it to unlock the app on each foreground. The biometric data never leaves your device — Apple/Google's secure enclave handles all biometric processing.

## Data export and deletion

- **Export**: at any time, use the "Export CSV" button in Settings to download all your transactions.
- **Deletion**: contact the developer at mmjones1001@gmail.com to request full account deletion. All your data, including auth records, will be permanently removed from the database.

## Children

The app is not directed to children under 13 and does not knowingly collect data from them.

## Changes

If this policy changes meaningfully, the updated version will be posted at the URL hosting this document and in-app on next launch.

## Contact

mmjones1001@gmail.com