Privacy policy
Last updated: September 25, 2026
Data controller
Begrootlab, info@budget-buddy.live is the controller of your personal data (GDPR).
What we collect and why
Account: email address and (hashed) password or Google sign-in — to create your account and sign you in (contract).
Planner data: business name and amounts you enter — to provide the service (contract).
Subscription status: whether your plan is active and until when (contract).
Technical data: IP address and country code to choose your language, and logs for security and fraud prevention (legitimate interests). Your IP address is not stored for this.
Support messages when you contact us (legitimate interests).
Who we share with
Hosting and database providers that run our service (processors).
Paddle.com as Merchant of Record for sales, subscriptions, payments, tax and invoicing. Paddle processes payment details itself.
Google, only if you choose Google sign-in.
Professional advisers (legal, accounting) and authorities where required by law.
We never sell your data.
International transfers
Some providers may process data outside the EEA (e.g. in the US), based on an adequacy decision (EU-US Data Privacy Framework) or Standard Contractual Clauses.
Retention
We keep your data while your account exists. If you delete your account we erase your data within 30 days, except what we must keep by law (e.g. invoice records, 7 years).
Your rights
You have the right to access, rectify, erase, restrict, port and object to processing, and to withdraw consent. In Account settings you can download your data and delete your account yourself. For other requests email us; we respond within one month. You may also complain to your data protection authority.
US residents (including California, CCPA/CPRA): you have the right to know what we collect, to delete and correct it, and not to be discriminated against for exercising your rights. We do not sell or "share" personal information for advertising.
Security
We use encrypted connections (HTTPS), encrypted storage, per-user access control and least-privilege access.
Cookies
We only use essential cookies and local storage. See our cookie policy.