Privacy Policy

Effective date: 24 July 2026

This notice explains what personal data Balanced Money (“the Service”, “we”, “us”) collects when you use it, why, and the rights you have over that data. It should be read alongside the Terms of Service.

What we collect

Account data. Your email address and sign-in credentials. Authentication is handled by Supabase Auth: passwords are stored only as secure hashes, and if you sign in with Google we receive your email address and basic profile details from Google.

Financial data you enter. The budgets, balances, transactions, categories, accounts, and imported files you add to the Service. This data is private to your account and is stored only so the Service can show it back to you.

Technical data. Our hosting providers keep standard server logs (such as IP address and browser type) for security and operations. We use no analytics, tracking, or advertising tools.

How we use it

We process your data to provide the Service you signed up for (performance of a contract) and to keep it secure and working (legitimate interests). We do not use your data for marketing or advertising, we do not sell it, and we do not share it with anyone except the providers below.

Monthly reminder email. If — and only if — you switch it on in Settings, we send one email a month reminding you that your statement should be ready. We rely on your consent for this, and you can withdraw it at any time from the link in every email or from Settings → Reminders. The reminder contains no financial information: no balances, no totals, no category or account names. Your figures stay behind your login.

Where it is stored

Your data is stored with Supabase (database and authentication) and the application runs on Vercel (hosting). If you turn on the monthly reminder, Resend (email delivery) processes your email address for that purpose only — never the financial data you enter. These providers may process data outside the UK; where they do, transfers are protected by appropriate safeguards such as UK-approved standard contractual clauses under the providers’ data processing agreements.

How long we keep it

Your data is kept for as long as your account exists. When you clear your data or delete your account, the records are permanently deleted from the live database immediately; residual copies may persist in our providers’ encrypted backups for a short period before being purged on their standard cycle.

Your rights

You can export, clear, or permanently delete your data at any time from Settings → Your data. Account deletion is permanent and removes your login and all associated records.

Under UK data protection law you also have rights of access, rectification, erasure, restriction, portability, and objection. Most of these you can exercise yourself through the self-service tools above. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

Balanced Money sets a single strictly-necessary cookie — your Supabase authentication session (HttpOnly, Secure,SameSite=Lax) — which keeps you signed in. We use no analytics, tracking, or advertising cookies, and we do not share your data for marketing. Because the only cookie is essential to providing the service, no cookie-consent banner is required.

Changes to this notice

We may update this notice from time to time. Changes take effect when the updated notice is posted on this page with a new effective date.