Privacy Notice
Last updated: October 3, 2026
This Privacy Notice explains how BudgetNewb LLC ("BudgetNewb", "we", "us") collects, uses, shares, and protects personal data when you use the BudgetNewb website and application (the "Service"). We are the data controller for this data: we decide how and why it is processed.
1. Personal data we collect
Account information
- Name and email address, used to create and identify your account.
- Login credentials — your password is stored only in a one-way, salted (hashed) form.
Budget information
- The budgets you build: buckets, line items, amounts, priorities, income details (including paycheck schedules you enter for members of your household), spending logs, savings goals, and notes.
Linked bank account information (optional)
- If you connect a bank account, the connection is made through Plaid. We receive account names, account types, masked account numbers, and balances so bucket amounts can be checked against real funds. We never see or store your online banking login — those credentials go directly from you to Plaid.
Usage and device information
- IP address, device and browser type, pages viewed, and in-app events, used to keep the Service secure and to understand how it is used.
Support communications
- Messages you send us when you ask for help or feedback.
2. How we use personal data, and why
- To provide the Service (create your account, store and calculate your budgets, sync linked bank balances) — because this is necessary to perform our contract with you.
- To bill subscriptions (via Paddle, our Merchant of Record) — because this is necessary to perform our contract with you, and to comply with legal obligations such as tax and accounting rules.
- To keep the Service secure and prevent fraud (detecting misuse, protecting accounts) — based on our legitimate interests.
- To provide customer support — because this is necessary to perform our contract with you.
- To improve the Service (understanding feature usage, fixing problems) — based on our legitimate interests.
- To send service and marketing messages — service messages (receipts, renewal reminders, security alerts) are based on our contract or legal obligations; marketing emails, if you subscribe to them, are based on your consent, which you can withdraw at any time.
3. How we share personal data
We share personal data only with the following categories of recipients:
- Service providers (subprocessors) who host and operate parts of the Service for us — including cloud hosting, authentication, database, and email delivery providers — under contracts that require them to process data only on our instructions.
- Plaid, to establish and maintain the bank connections you request. Plaid's handling of your data is described in Plaid's privacy policy.
- Paddle, our reseller and Merchant of Record, which processes your payment, manages your subscription, handles refunds, and issues tax-compliant invoices and receipts.
- Professional advisers (lawyers, accountants, auditors) when reasonably needed, under confidentiality obligations.
- Authorities — law enforcement, regulators, or courts — where required by law or necessary to protect rights, safety, or property.
- A buyer or successor — if we are involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this Notice.
We do not sell your personal data or share it for cross-context behavioral advertising.
4. Data retention
We keep personal data for as long as needed to provide the Service, comply with legal and accounting obligations, and resolve disputes. If you delete your account, we delete or anonymize your budget data within 90 days, except where we must retain it longer (for example, billing records kept as required by tax law). You can ask us to delete your data sooner by contacting us.
5. Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — ask us to delete your data.
- Restriction — ask us to pause processing in certain circumstances.
- Portability — receive your data in a portable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — for processing based on consent, at any time, without affecting prior processing.
- Non-discrimination — we will not treat you differently for exercising your rights.
To exercise any right, email budgetnewb@gmail.com. We respond within one month (30 days), or tell you if we need more time. If you are in the EEA or UK and believe we have mishandled your data, you may complain to your local supervisory authority.
6. International transfers
We and our service providers may process personal data outside of your home country, including in the United States. When personal data leaves the EEA or UK, we rely on safeguards such as the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum) or an adequacy decision for the destination country. Contact us for details of the safeguards we use.
7. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, and least-privilege access for our team. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
8. Cookies and local storage
We use a small number of essential cookies and browser local storage to keep you signed in, remember your security session, and store your interface preferences (such as which dashboard sections you have chosen to show and how you have arranged them). We do not currently use advertising cookies. If we add analytics or marketing cookies in the future, we will update this Notice and, where required, ask for your consent first. You can clear cookies and local storage through your browser settings at any time; signing out and back in will restore your session.
9. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this Notice
We may update this Notice from time to time. When we make material changes, we will notify you in the app or by email. The "Last updated" date above shows when it was last revised.
11. Contact us
BudgetNewb LLC is the controller of your personal data. Questions or requests? Email budgetnewb@gmail.com.