Privacy Policy

Who we are

BudgetKin is a trading name of Swales Collective LTD, a company registered in England and Wales (company number 17283111), with its registered office at 142 Somerset Road, Almondbury, Huddersfield, England, HD5 8HY. Swales Collective LTD is the data controller for the personal information described in this policy.

The short version

• We never connect to your bank. BudgetKin has no Open Banking connection and no access to any account of yours. We never see your balance, your card details, or a single transaction.
• Everything the app knows about your money is what you typed into it: amounts, dates, names, and categories you chose yourself.
• We do not sell your data, and we do not use it for third-party advertising.
• You can delete your account, and the data behind it, at any time.

Information we collect

We collect the minimum needed to run the Service:

• Account details — your email address and password (stored by our authentication provider as a salted hash; we never see it).
• Profile details — your name, country, and mobile number, which are required when you set up an account. Your date of birth is optional.
• Your plan — the income, bills, subscriptions, savings pots, contract end dates, suppliers, budgets, and notes you enter, together with the money month you chose.
• Household — the names of anyone you add to your household, so your plan can say who each thing is for. We never ask for their contact details.
• Preferences — whether push reminders are on, whether email reminders are on, and which reminders you have read.
• Website analytics — aggregate traffic and performance data from Vercel Analytics and Speed Insights on budgetkin.app. These are cookieless and do not build a profile of you.

The plan data above is financial information about you, and we treat it accordingly: it is scoped to your account by database access rules that make one account’s rows unreadable to any other, and it is never used for marketing or profiling.

How we use your information

We use it to:

• Show you your plan and work out what is left to spend
• Keep the same plan in step across the devices you sign in on
• Send the reminders you have turned on, such as a contract ending
• Email those reminders to you, where you have turned email reminders on
• Manage your account
• Answer your support requests
• Keep the Service secure, diagnose faults, and improve it

We do not sell personal data, we do not share it with advertisers, and we do not use your plan data to make automated decisions with legal or similarly significant effects.

Our legal bases

Under UK GDPR we rely on:

• Performance of our contract with you — to provide the planner, sync your data, and manage your account.
• Legitimate interests — to secure, maintain, debug, and improve the Service, balanced against your privacy.
• Consent — for push notifications and email reminders, both of which are off unless you turn them on and can be turned off at any time.
• Legal obligation — where we must retain records, for example for accounting.

Where your data lives

BudgetKin is local-first. Your plan is written to a file on your own device so the app opens instantly and works offline, and a copy is stored in our database so it survives a new phone and reaches your other devices. Your session token is held in the device’s hardware-backed secure storage — the iOS Keychain or the Android Keystore — not in ordinary app storage.

Who we share it with

We share personal data only with providers who process it on our behalf under appropriate safeguards:

• Supabase — authentication, database hosting, and the emails that confirm your address or reset your password.
• Resend — delivery of the reminder emails we send you.
• Vercel — hosting and cookieless analytics for budgetkin.app.

Some providers may process data outside the UK. Where they do, we rely on appropriate transfer safeguards, such as the UK International Data Transfer Agreement or an equivalent mechanism. We may also disclose data where required by law, or to establish, exercise, or defend legal claims.

Cookies

The BudgetKin website uses no advertising or tracking cookies. Vercel Analytics and Speed Insights measure traffic and page performance without cookies and without profiling visitors. The app stores data on your device to work offline and to keep you signed in; this is app storage rather than cookies, and it is cleared when you sign out or uninstall.

How long we keep it

We keep your account data for as long as your account is open. We keep a record of which reminder emails we sent you for 90 days — long enough to be sure we do not send the same reminder twice — and then delete it. When you delete your account we delete the personal data behind it, subject to two things we cannot remove on demand: encrypted database backups, which may hold a copy for up to 30 days before being purged; and records we are required to retain by law.

Security

Data is encrypted in transit, session tokens are stored in hardware-backed secure storage on your device, and database access rules scope every row to the account that owns it. No system is perfectly secure, but we do not hold the thing an attacker would most want: there is no bank connection to abuse, and no card details to steal.

Your rights

You have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent where we rely on it.

• Access and correction — most of your data is visible and editable in the app. For anything else, email us.
• Export — export your plan from Settings. If you want a copy of your data and cannot export it yourself, ask us.
• Deletion — delete your account from Settings in the app, or at budgetkin.app/delete-account.

To exercise any right, email hello@swalescollective.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Where changes are material we will notify you in the app or by email. The date at the top of this page shows when it was last updated.

Contact us

Questions about this policy, or want to exercise a right? Email hello@swalescollective.co.uk, or write to Swales Collective LTD, 142 Somerset Road, Almondbury, Huddersfield, England, HD5 8HY. Our Terms of Service govern your use of the Service.