PRIVACY

Privacy policy.

Last updated 24 October 2026

sbudget is a local-first budget tracker for bank statement PDFs. This policy explains what stays on your device, what is optional, and what leaves your iPhone.

What stays on your device

Imported statements, transactions, categories, budgets and app settings are stored in the app's local storage on your iPhone. Raw PDFs are discarded after parsing. If you use sbudget without an account, we do not receive your ledger.

Account and sign-in

Sign-in is optional and handled by Supabase. If you create an account, Supabase receives your email address and authentication metadata. Your local ledger is not uploaded by the sign-in flow.

Optional cloud parsing

On-device parsing is the default. If you are signed in and explicitly enable the Cloudflare parser, sbudget sends the extracted statement text and file name to our Cloudflare endpoint for parsing. The raw PDF is not sent. You can turn cloud parsing off at any time in Settings.

Merchant logos

When sbudget recognises a merchant, it requests that brand's favicon from Google's favicon service using only the brand domain. Google receives the domain request, but never your transaction amounts, dates or statement text. Merchants that are not recognised fall back to a local category icon.

Analytics and crash reports

Product analytics (PostHog) and crash reporting (Sentry) are opt-in and off by default. If enabled, they may include app version, device model, screen names and crash diagnostics. They never include merchant names, amounts, raw statement text or PDF contents. You can change both choices in Settings.

Exchange rates

sbudget may request public exchange-rate data to convert transactions into your chosen base currency. Those requests contain currency codes, not your transactions.

What we do not do

• We do not ask for or store your online banking password.
• We do not connect to your bank through an aggregator or screen-scrape your bank.
• We do not sell personal data or use statement contents for advertising.

Retention and deletion

Local data remains until you delete it. Settings → Delete all local data removes imported statements, transactions and budgets from the device. You can also delete individual statements. Account deletion can be requested by email.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete personal data, and to object to certain processing. Contact us to make a request. You can also complain to your local data protection authority.

Children

sbudget is not directed at children under 13, and we do not knowingly collect personal data from children.

Changes

If this policy changes materially, we will update the date above and, where appropriate, notify you in the app.