How Your Data Is Protected
Secure infrastructure
Your financial data is stored in a secure cloud database powered by Supabase.
Security measures include:
- Encryption in transit (TLS)
- Encryption at rest
- Column-level encryption (AES-256 via pgcrypto) on all financial amounts, balances, and descriptions
- Row Level Security (RLS) to isolate each user's data
- Secure authentication handled through Supabase Auth
These protections ensure that only you can access your financial records.
Private by design
Budgetter follows a simple principle:
Your financial data belongs to you.
We do not:
- Sell your data
- Share financial data with advertisers
- Use your financial information for marketing
Your information is used only to provide the features of the application.
Local Storage and Application Caching
Budgetter uses modern web technologies such as Progressive Web App (PWA) features and service workers to improve performance and reliability.
These technologies may store static application files on your device, including:
- icons
- fonts
- interface resources
This allows the app to load faster and function more reliably. Service-worker caching is limited to selected static/media files and intentionally avoids stale JavaScript/CSS chunk caching. No financial data is stored locally by these mechanisms. All financial records, transactions, balances, and account information are stored securely in our backend infrastructure and retrieved from the server each time they are needed.
AI-generated insights
Budgetter can generate financial insights using Google Gemini. When you use features such as Next Move or AI Coach:
- Relevant financial data may be sent to the AI service to generate insights
- The data is processed only for that request
- We do not use your data to train AI models
- Access to AI endpoints is authenticated and rate-limited to reduce abuse
AI responses are designed to help you understand your finances but do not constitute professional financial advice.
Push notification security
If you enable push notifications, delivery uses modern Web Push standards.
- Browser push subscriptions are tied to your authenticated account
- Messages are sent with VAPID authentication
- Push payloads are encrypted in transit
You can disable push permissions in your browser at any time.
Account security
Budgetter includes several security protections, including:
- Secure login authentication
- Encrypted communication between your browser and our servers
- Optional privacy lock screen to protect your financial dashboard
- When enabled, PIN storage uses salted hashing on-device (not plaintext)
You are responsible for keeping your account credentials secure.
Your control over your data
You remain in control of your information. You can:
- Access your financial data
- Export your data at any time
- Delete your account whenever you choose
When an account is deleted, associated personal and financial data is permanently removed from our systems within 30 days.
No advertising trackers
Budgetter does not use advertising trackers or marketing cookies.
Session cookies are used only to keep you securely logged in.