Privacy Policy

Budget App

Privacy Policy

Last updated: 2026-06-27

Budget App ("the App") is a personal budgeting tool operated by ThePlaceLabs. This policy explains what data the App holds, how it is protected, and the rights you have over it. The App is built around an income timeline and connects to your financial institutions through Plaid to import transactions.

What we collect

  • Identity — your name and email, provided by ThePlaceLabs single sign-on (OIDC) when you log in. The App does not store a password.
  • Bank connection data (via Plaid) — when you link an institution, Plaid returns an access credential and your account and transaction data (balances, transaction amounts, dates, merchant names, categories). We store the account and transaction records; the Plaid access credential is stored encrypted (see "How we protect your data").
  • Information you enter — income events (salary, raises, bonuses, side income), budget categories, and budget allocations.

We do not store payment card numbers (PAN). Plaid returns tokenized transaction data, and manual entry captures only amount, merchant, and category. The App is therefore out of PCI-DSS scope.

How we use it

Your data is used solely to provide budgeting features to you — projecting income, categorizing spending, and tracking budgets. We do not sell your data, and we do not use it for advertising.

Plaid acts as a data processor for the bank connection. Plaid's handling of your credentials and data is governed by Plaid's own privacy policy (https://plaid.com/legal).

How we protect your data

  • Encryption at rest — the Plaid access credential is encrypted with AES-256-GCM; the key is held in a managed secrets store, never in the database.
  • Per-user isolation — every record is scoped to your account; your identity is derived server-side from your verified SSO session and is never accepted from the client.
  • Audit trail — security-relevant events (linking an institution, syncing transactions, exporting or deleting your data) are recorded in a tamper-evident, append-only log.

Your rights

  • Access / portability — you can export a complete, machine-readable copy of your data at any time (Settings → Export, or GET /api/auth/export).
  • Erasure — you can delete your account at any time. Deletion permanently removes all of your records (accounts, transactions, income, budgets), purges your data from the analytics cache, and revokes the Plaid connection at the source. Security audit-log entries are retained but anonymized (your identity is removed) so the App keeps a tamper-evident security record without retaining your personal data.

Retention

We keep your data for as long as your account exists. When you delete your account, your personal data is removed as described above; only anonymized audit records remain.

Contact

Budget App is part of ThePlaceLabs (https://www.theplacelabs.com). For privacy questions or requests, contact us through ThePlaceLabs.