Budget AI — Privacy Policy

Last updated: July 12, 2026

Budget AI ("we", "us") operates the Budget AI mobile application (the "App"), an AI-powered personal finance and budgeting tool. This Privacy Policy explains what we collect, how we use it, and your rights.

1. Information we collect

• Account data: your name and email address (or the identifier provided by Apple/Google when you use social sign-in).
• Financial data you enter: accounts, transactions (amounts, categories, notes, dates), budgets, and shopping lists. This data is yours — we use it only to run the App's features for you.
• Usage data: basic activity needed to operate features (e.g. AI usage counters).
• Diagnostics: crash and error reports to keep the App stable.

2. How we use it

• To record and organize your transactions, budgets and reports.
• To power AI features — the assistant, auto-categorization, budget suggestions and insights.
• To create and secure your account and authenticate you.
• To operate, maintain, and improve the App.

3. AI features and your data

The App's AI features are powered by OpenAI, L.L.C. ("OpenAI"), a third-party AI provider based in the United States. AI features are off by default: the first time you open the assistant we explain this and ask for your explicit permission, and nothing is sent to OpenAI until you agree. You can withdraw your permission at any time in Profile → AI features, which immediately stops any further sharing.

When you use an AI feature, only the data needed for that specific request is sent to OpenAI:

• AI assistant — the question you type, plus the transactions, balances, categories and budgets needed to answer it (e.g. amounts, category names, dates, notes).
• Auto-categorization — the description, optional merchant name, and amount of the transaction being categorized.
• Receipt scanning — the photo of the receipt you choose to scan.
• Budget suggestions and insights — aggregated spending figures per category for the period concerned.

We never send your name, email address, password, or authentication identifiers to OpenAI. Your data is not used to train OpenAI's models. OpenAI processes this data solely on our instructions as our processor, under contractual terms that require confidentiality and security protections equivalent to those described in this policy, and retains API data for a limited period for abuse monitoring only. If you never grant permission, the App still works — categorization, budgets and reports fall back to non-AI logic that runs on our own servers.

4. Other third-party services

To provide the App we share the minimum necessary data with:

• Apple / Google — optional social sign-in.
• Resend — to send account emails (verification, password reset).

Product analytics and error diagnostics are processed on our own servers (not shared with third-party analytics providers). We derive coarse location (country/city) from your IP address to understand usage; the IP address itself is not stored.

We do not sell your personal data.

5. Data retention & deletion

We keep your data while your account is active. You can delete your account at any time from the App, which permanently removes your financial data from our systems. Diagnostic error logs auto-expire after 30 days.

6. Security

Passwords are stored hashed (bcrypt), traffic is encrypted in transit (HTTPS), and access tokens are short-lived with revocable refresh tokens.

7. Children

The App is not directed to children under 13, and we do not knowingly collect their data.

8. Your rights

You may access, correct, export, or delete your data. To exercise these rights, contact us at support@lumen-lab.app.

9. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

10. Governing law

This policy is governed by the laws of Ukraine.

Questions? Contact us at support@lumen-lab.app.