Privacy Policy

Budget Tracker (“we”, “the app”) is a personal budgeting tool at bt.barojins.com. This policy explains what data we collect, how we use it, and the choices you have. We collect the minimum needed to run the app and we do not sell your data.

Information we collect

• Account — your email address and a securely hashed password (or a Google account identifier if you sign in with Google).
• Financial data you add or import — transactions you enter by hand or upload via CSV/Excel, and the monthly budgets you set.
• Bank data via Plaid (optional) — if you connect a bank, our provider Plaid retrieves your transactions and account information on your behalf. You enter your bank credentials directly into Plaid; we never see or store your bank username or password.
• Billing — if you subscribe, payments are processed by Stripe. We store only your subscription status and a Stripe customer identifier — never your card number.

How we use your information

• To show your spending, budgets, and category breakdowns.
• To sync transactions from banks you choose to connect.
• To authenticate you and keep your data separate from other users.
• To process and manage your subscription.

We do not use your financial data for advertising, and we do not sell it to anyone.

How your data is stored and protected

• All traffic is encrypted in transit (HTTPS/TLS).
• Plaid access tokens are encrypted at rest (AES-256-GCM); our database is encrypted by the hosting provider.
• Each account’s data is isolated — one user can never access another user’s data.
• Secrets and API keys are kept server-side only, never in the app or browser.

Who we share data with

We share data only with the service providers needed to run the app, and only for that purpose: Plaid (bank connectivity), Stripe (payments), and our hosting and database providers. Each processes data under its own privacy terms. We do not sell or rent your personal information.

Data retention and deletion

We keep your data while your account is active. You can disconnect a bank at any time (which removes its access token and stops future syncing), delete individual transactions, or request full deletion of your account and data by emailing us. We will delete your data within 30 days of a verified request.

Your choices

• Connect or disconnect banks whenever you like.
• Add, edit, or delete transactions and budgets.
• Cancel your subscription at any time from the billing portal.
• Request access to, or deletion of, your data.

Contact

Questions or requests about your data: hojin@imprimedicine.com.