This page is maintained by the CozyBudget team to explain how we handle the personal and financial information you enter into the app. It is written in plain language and describes the app's current, in-product practices — it is not a legal certification or an audit report.
What we collect
- Account info: your email address, display name, and password (stored hashed by our auth provider).
- Financial data you enter: budgets, expenses, bills, goals, savings, giving, business transactions, credit cards, cash, and notes.
- Bank data (only if you connect a bank via Plaid): account names, balances, and transaction history for the accounts you choose to link. See our Plaid disclosure.
- Uploaded files: receipts, statements, and images you upload are stored in private buckets scoped to your account.
- Chat history: messages you send to the in-app AI assistant, so you can revisit past conversations.
How we use it
- To operate the app: show your dashboards, run categorization, and sync bank transactions.
- To personalize AI insights and budgeting suggestions you ask for.
- To secure your account and prevent abuse.
What we do not do
- We do not sell your personal or financial data.
- We do not share your data with advertisers.
Who can see your data
Your data is scoped to your account through row-level security rules in our database. Household members you explicitly invite can see the household data you share with them. Business workspaces are kept separate from personal data.
Subprocessors
- Supabase — database, authentication, and file storage.
- Plaid — bank account connections (only if you opt in).
- Google Gemini — AI features you invoke.
- Cloudflare — hosting and edge runtime.
Retention and deletion
Your data is retained while your account is active. You can delete individual entries any time from inside the app. To delete your entire account and associated data, contact support.
Security
Data is transmitted over HTTPS and stored with row-level access controls. Bank access tokens are stored server-side and never exposed to the browser. No system is perfectly secure — use a strong, unique password and keep your device protected.
Your rights
You may request access to, correction of, or deletion of your personal data by contacting us. We will respond within a reasonable timeframe.
Contact
Questions? Reach us through the in-app support option in Settings.