SimplBudget Privacy Policy

Effective date: June 11, 2026
Last updated: June 11, 2026

SimplBudget ("SimplBudget," "we," "us," or "our") operates the SimplBudget mobile application and related services (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use the Service.

By creating an account or using the Service, you agree to this Privacy Policy.

1. Who we are

SimplBudget provides consumer financial guidance software for United States users. SimplBudget is not a bank, lender, broker-dealer, investment adviser, credit repair organization, or debt settlement provider.

Contact: privacy@simplbudget.com

2. Information we collect

2.1 Account information

When you sign in with Apple or Google through our authentication provider (Supabase Auth), we receive:

• A unique user identifier
• Email address (when provided by your identity provider)
• Authentication session metadata

2.2 Financial account data (via Plaid)

If you connect a financial institution, we receive data from Plaid, which may include:

• Institution name
• Account names, types, masks, and balances
• Transaction history (amounts, dates, merchant names, categories where available)
• Pending transaction information

We use this data to detect recurring income and expenses, generate forecasts, calculate Available Margin, power Ask SimplBudget, and support Planning scenarios.

Important: We do not receive or store your online banking username or password. Authentication with your financial institution is handled by Plaid.

2.3 Derived and computed data

We generate and store:

• Recurring transaction patterns
• Forecast snapshots (projected balances at defined horizons)
• Available Margin snapshots
• Planning scenario results (computed in-app; not permanently stored as scenarios in the current version unless otherwise disclosed in-product)

2.4 Ask SimplBudget / AI processing

When you use Ask SimplBudget, we process:

• Your selected question
• Pre-computed financial decision outputs (Available Margin, forecast risk flags, amounts, dates)
• A natural-language explanation request sent to our server

Our server may send a structured summary of this information to OpenAI to generate an explanation. OpenAI does not receive your bank login credentials. We instruct our systems not to send unnecessary personal identifiers to OpenAI beyond what is required to explain the computed result.

We do not maintain a persistent chat history database for Ask SimplBudget in the current version. Each request is processed to produce a response shown in the app session.

2.5 Subscription information

If you purchase a subscription, RevenueCat and the Apple App Store (or Google Play, if applicable) process payment and subscription status. We receive entitlement status and product identifiers through RevenueCat. We do not receive your full payment card number.

2.6 Device and technical data

We may collect standard technical information necessary to operate the Service, including app version, device platform, and error logs. Debug logging in development builds may include additional diagnostic data and should not be enabled in production releases.

3. How we use information

We use personal information to:

• Provide and maintain the Service
• Connect financial accounts through Plaid
• Sync transactions and compute forecasts and Available Margin
• Answer Ask SimplBudget questions and generate explanations
• Operate subscription access through RevenueCat
• Improve reliability, security, and product performance
• Respond to support requests and legal obligations

We do not sell your personal information.

We do not use your data for third-party advertising profiling in the current version of the Service.

4. How we share information

We share information only with service providers that help us operate the Service:

| Provider | Purpose |
|----------|---------|
| Supabase | Authentication, database, and secure server functions |
| Plaid | Bank account connection and financial data aggregation |
| OpenAI | Natural-language explanations for Ask SimplBudget (structured decision context only) |
| RevenueCat | Subscription management and entitlement verification |
| Apple / Google | Sign-in and in-app purchase processing |

We may also disclose information:

• To comply with law, regulation, legal process, or governmental request
• To protect the rights, safety, and security of SimplBudget, our users, or others
• In connection with a merger, acquisition, or asset sale (with notice where required)

5. Data retention

See our Data Retention Policy (data_retention_policy.md) for category-specific retention periods.

In general:

• Financial data remains until you disconnect an institution or delete your account
• Forecast and Available Margin snapshots are replaced on subsequent computation runs
• Ask SimplBudget requests are not stored as persistent conversation logs in the current version

6. Security

We use industry-standard measures including encrypted transport (TLS), authenticated access controls, and server-side storage of sensitive integration secrets.

Plaid access tokens are stored on our servers and are not intended to be accessed by the mobile application. Users should not attempt to access server-side token fields.

No method of transmission or storage is 100% secure. Report security concerns to privacy@simplbudget.com.

7. Your choices and rights

Depending on your state of residence, you may have rights to:

• Access personal information we maintain about you
• Correct inaccurate information
• Delete your account and associated data
• Withdraw consent where processing is consent-based
• Opt out of certain data uses where applicable

In-app controls:

• Disconnect a linked institution (Settings → Connected Accounts)
• Sign out
• Manage or cancel subscriptions through the App Store

Account deletion: Submit a request to privacy@simplbudget.com with subject line "Account Deletion Request." We will verify your identity and delete or de-identify personal information subject to legal retention requirements.

California residents may have additional rights under the CCPA/CPRA. Virginia, Colorado, Connecticut, and other state privacy laws may provide similar rights. Contact us to exercise them.

8. Children

The Service is not directed to children under 13 (or 16 where applicable). We do not knowingly collect personal information from children.

9. International users

The Service is intended for users in the United States. If you access the Service from outside the U.S., your information may be processed in the United States.

10. Changes

We may update this Privacy Policy. We will post the updated version with a revised "Last updated" date and, where required, provide additional notice.

11. Contact

SimplBudget — Privacy
Email: privacy@simplbudget.com