Privacy Policy

Last updated: March 2026

1. Overview

Budgitrack ("the App") is operated by Recurse Ltd. ("we", "us", "our"), a company registered in England and Wales. We are committed to protecting your privacy and handling your personal data transparently.

This privacy policy explains what data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all users of Budgitrack and visitors to budgitrack.com.

2. Data controller

The data controller responsible for your personal data is:

3. Data we collect

We categorise the data associated with Budgitrack into two types: data stored locally on your device (which we never access) and data processed by our services.

3.1 Data stored locally on your device

All financial data you enter into Budgitrack is stored exclusively on your device. This includes:

• Income sources and amounts
• Expense items and amounts
• Budget categories and names
• Projections and savings calculations
• Budget preferences and settings

We have zero access to this data. It is never transmitted to our servers, never uploaded to the cloud, and never shared with any third party. If you delete the app, this data is permanently removed from your device.

3.2 Data processed by our services

• Sign in with Apple data: When you sign in, we receive your Apple user identifier and, if you choose to share them, your name and email address. We use this solely for account identity, purchase restoration, and potential future sync capabilities.
• Waitlist email address: If you join our waitlist via budgitrack.com, we collect your email address to notify you when the app launches. This is stored in our email service provider (Resend) and can be removed upon request.
• Anonymous analytics data: We use PostHog to collect anonymous usage analytics, including screens visited, features used, and general interaction patterns. We do not track financial amounts, income values, expense values, category names, or any personally identifiable financial information.
• Purchase data: Subscription and lifetime purchase transactions are processed entirely by Apple through StoreKit. We do not see or store your payment card details. We receive only a transaction receipt to verify your purchase status.

4. Lawful basis for processing

Under the UK GDPR, we process your personal data on the following lawful bases:

• Contract: Processing your Sign in with Apple data and purchase data is necessary to provide you with the Budgitrack service and manage your subscription.
• Consent: When you voluntarily provide your email to join our waitlist, you consent to receiving launch notifications. You may withdraw this consent at any time by unsubscribing.
• Legitimate interest: We collect anonymous analytics data to improve the app's features and user experience. This processing is minimal, does not involve financial data, and is balanced against your privacy expectations.

5. Third-party services

We use the following third-party services:

• PostHog — Anonymous product analytics. PostHog processes data in the EU/US. No financial data is shared with PostHog.
• Apple StoreKit — In-app purchase and subscription management. Governed by Apple's privacy policy.
• Apple Sign In — Authentication. Governed by Apple's privacy policy.
• Resend — Email delivery for waitlist notifications. Stores your email address only if you joined the waitlist.
• Cloudflare — Website hosting and CDN. Cloudflare may process standard web request data (IP address, user agent) as part of delivering the website.

No other third-party services have access to your data. We do not sell, rent, or trade your personal information to any third party.

6. Cookies and tracking

The budgitrack.com website may use cookies or similar technologies for:

• Analytics cookies (PostHog): To understand how visitors interact with the website. These cookies collect anonymous usage data and do not identify you personally.

We do not use advertising cookies, tracking pixels, or cross-site tracking technologies. The Budgitrack iOS app respects Apple's App Tracking Transparency framework. You may opt out of analytics tracking via your device settings.

7. Data retention

• Local budget data: Retained on your device until you delete the app or clear its data. We have no control over this data.
• Sign in with Apple data: Retained for the lifetime of your account or until you request deletion.
• Waitlist email: Retained until the app launches and you are notified, or until you request removal. We will delete all waitlist data within 6 months of the app's public launch.
• Analytics data: PostHog retains anonymous analytics data for up to 12 months, after which it is automatically purged.

8. International data transfers

Some of our third-party service providers (PostHog, Resend, Cloudflare) may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office, or transfers to countries with an adequacy decision.

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate personal data.
• Right to erasure: You can request deletion of your personal data. For locally stored budget data, simply delete the app from your device.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a machine-readable format. Premium users can export their budget data as CSV directly from the app.
• Right to object: You can object to processing based on legitimate interest, including analytics.
• Right to withdraw consent: Where processing is based on consent (e.g., waitlist), you can withdraw at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's privacy

Budgitrack is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Data security

We take appropriate technical and organisational measures to protect your personal data. All financial data remains on your device and is never transmitted over the internet. Our website uses HTTPS encryption. We use Sign in with Apple rather than storing passwords. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may notify you via email or an in-app notification. We encourage you to review this policy periodically.

14. Contact us

For any questions about this privacy policy or how we handle your data, please contact us: