1. Who We Are

SimpleBudgetTracker is operated by Dave Burniston, Ontario, Canada. References to "we," "us," or "our" refer to this individual operator.

2. What We Collect

We collect only the information necessary to provide and maintain your account:

• Email address — used for account identification, login, and service communications
• Password — stored as a secure one-way hash (bcrypt). We cannot recover your password.
• Subscription status — whether your account is active, in a trial, or lapsed
• Account activity metadata — last login date, last backup date, backup reminder preference, AI scan usage count

We do not collect, store, or have access to:

• Your financial transactions, spending history, or budget data
• Receipt images (processed transiently for AI scanning and immediately discarded)
• Bank account information or credentials
• Payment card information (handled entirely by LemonSqueezy)

3. How Your Financial Data Is Stored

All financial data — your transactions, categories, budgets, income sources, and family members — is stored exclusively in your web browser's local storage on your own device. This data is never transmitted to our servers except transiently during device-to-device sync.

Device sync: When you sync a receipt from your phone to your hub, the transaction data passes through our relay server momentarily and is immediately deleted once received. We do not log, retain, or analyse this data.

4. AI Receipt Scanning

If you subscribe to the AI add-on, receipt images you photograph are:

• Compressed on your device before transmission
• Sent to our server, forwarded to Anthropic's API for processing
• Immediately deleted from our server after the result is returned
• Never stored, logged, or analysed by us beyond the usage count (number of scans)

Anthropic's handling of API data is governed by Anthropic's Privacy Policy.

5. Cookies and Local Storage

We use a session cookie (fb_session) to keep you logged in. This cookie contains only a session token — no personal information. It expires after 30 days of inactivity.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

6. Payments

Payments are processed by LemonSqueezy. We do not receive or store your payment card details. LemonSqueezy's privacy practices are governed by their own privacy policy.

We receive your email address from LemonSqueezy when you complete a purchase, to provision your account.

7. Data Retention

We retain your account information (email, password hash, subscription status) for as long as your account exists. You may request deletion of your account at any time by contacting us at hello@simplebudgettracker.com.

Your financial data is under your sole control — it exists only in your browser and any backups you have created. Deleting your account does not affect data on your device.

8. Data Security

We use HTTPS for all connections. Passwords are stored using bcrypt hashing. Session tokens are cryptographically random. We do not store financial data on our servers, which significantly limits the impact of any potential security breach.

9. Your Rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Withdraw consent to the processing of your data

To exercise these rights, contact us at hello@simplebudgettracker.com.

10. Third-Party Services

We use the following third-party services:

• LemonSqueezy — payment processing
• Anthropic — AI receipt scanning (AI subscribers only)
• Google Fonts — typography (loaded from Google's CDN)

11. Changes to This Policy

We may update this policy from time to time. We will notify you by email if we make material changes. Continued use of the service after changes constitutes acceptance.

12. Contact

Questions about this policy? Contact us at hello@simplebudgettracker.com or via our contact form.