Privacy Policy

Last updated: November 14, 2026

Bumbershoot Labs (“we”, “us”, or “our”) operates the Budgette mobile application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using Budgette, you consent to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your email address and name. If you create a family, we also collect the names and roles of family members you add. Child profiles are created and managed by a parent or guardian — children do not create their own accounts.

Family & Financial Data

Budgette stores allowance amounts, budget categories, and transaction records that you create within the app. This data is used solely to provide the Service’s functionality. Budgette does not connect to real bank accounts, process real money, or store payment card information. Subscription payments are processed entirely by Apple (App Store) or Google (Google Play); we receive only a confirmation of your subscription status.

Device, Usage, and Diagnostic Data

We use Google Firebase to understand how the app is used and to diagnose crashes, so we can improve the Service. Specifically:

Firebase Analytics collects app usage events (such as which screens are viewed and which features are used), your device type, operating system version, app version, a pseudonymous app-instance identifier generated by Firebase, and an approximate location inferred from your IP address (typically city- or region-level). It does not collect your precise location.
Firebase Crashlytics collects crash reports and diagnostic information (such as device state, stack traces, and app version at the time of a crash) so we can identify and fix stability issues.

This data is tied to a pseudonymous device/installation identifier and is not linked to your account identity — we do not send your name or email address to these services. We do not use advertising identifiers (such as Apple’s IDFA), and we do not use this data for advertising or cross-app tracking. Analytics collection is disabled entirely while the app is in child mode, and the Budgette Apple Watch app contains neither Firebase service (see Children’s Privacy below). For more information, see Firebase’s privacy and security information and Google’s Privacy Policy.

Push Notification Tokens

If you grant notification permissions, we collect your device’s push notification token to deliver notifications about allowance deposits, transactions, and other activity. You can disable notifications at any time through your device settings or the app’s Settings screen. Tokens are removed from our servers when you log out or revoke notification permissions.

Cookies and Website Tracking

Our marketing website (budgetteapp.com) uses Google Analytics cookies to understand how the site is used, and two cookies for the cookie banner: one remembers your choice, the other whether you are asked. You can turn Google Analytics off at any time from “Cookie settings” at the bottom of every page. In the EEA, the UK and Switzerland, it runs only if you accept it in the cookie banner (see “This website” below). We do not use cookies for advertising or cross-site tracking. The mobile app does not use cookies.

2. How We Use Your Information

We use your information for the following purposes:

To provide, operate, and maintain the Service
To authenticate your identity and manage your account
To sync your family’s data across devices
To send transactional communications (e.g., magic login codes, push notifications)
To send occasional reminders about your account, such as finishing setting up your family. Every reminder includes a link to unsubscribe, and unsubscribing doesn’t affect login codes.
To respond to support requests and feedback
To monitor and analyze usage trends to improve the Service
To detect, prevent, and address technical issues or abuse

3. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract: Processing necessary to provide the Service you signed up for (account data, family data, syncing).
Legitimate Interest: Processing for product improvement, analytics, and security, where our interests do not override your rights.
Consent: Processing that requires your opt-in, such as push notifications. You may withdraw consent at any time.
Legal Obligation: Processing required to comply with applicable laws.

We do not sell, rent, or trade your personal data. We may share data with the following categories of third-party service providers solely to operate the Service:

Cloud Hosting: Server infrastructure and database hosting.
Email Delivery: Transactional email services (e.g., login codes, invitations, account reminders).
Push Notifications: Apple Push Notification service and Firebase Cloud Messaging, which deliver app notifications to your device.
Analytics & Diagnostics: Google Firebase (Firebase Analytics and Crashlytics) to measure aggregate app usage and diagnose crashes, as described in Section 1. We do not use these services for advertising or cross-app tracking.
Payment Processing: Apple App Store and Google Play handle all subscription payments. We do not receive or store payment card details.

All providers are bound by data processing agreements and are prohibited from using your data for their own purposes. We may also disclose data if required by law, court order, or governmental authority, or to protect the rights, safety, or property of Bumbershoot Labs, our users, or the public.

5. International Data Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place with all providers to protect your data.

6. Children’s Privacy

Budgette is designed for families and may be used by children under the supervision of a parent or guardian. We comply with the Children’s Online Privacy Protection Act (COPPA) and applicable state laws.

Only a parent or guardian may create and manage the family account, including child profiles.
Children do not create their own accounts or provide personal information directly to us.
Child profiles contain only a name (chosen by the parent) and their allowance and budget data — no other personal or contact information about children.
A parent can set up a child’s own phone, tablet, or Apple Watch by approving it from the parent’s device. The child does not enter an email address, password, or any other information. For each such device we keep only its type (for example, iPhone, Android, or Apple Watch) and when it was paired and last used, so the parent can see the child’s devices and sign them out at any time.
The Apple Watch app only shows a child their own balances, goals, and next allowance; it cannot change anything. It keeps a copy of what it last showed on the watch, so it opens without a connection, and deletes that copy when the watch is signed out. It contains no analytics or crash reporting.
Analytics collection is turned off while the app is in child mode, so no usage events are collected from children. Crashlytics may record anonymous crash diagnostics for stability purposes only (permitted under COPPA’s “support for the internal operations” exception) and never includes a child’s name or other personal information.
Parents may review, modify, or delete their child’s data at any time through the app.
Parents may request deletion of all child data by contacting us at [email protected].

If you believe we have inadvertently collected information from a child without proper parental consent, please contact us immediately and we will delete it promptly.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements). Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytics purposes.

8. Data Security

We use industry-standard technical and organizational measures to protect your data, including:

Encrypted connections (TLS) for all data in transit
Hashed passwords (never stored in plaintext)
Role-based access controls limiting internal access to data
Regular security reviews of our infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and no later than required by applicable law. We will also notify relevant supervisory authorities as required.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data.
Portability: Request your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interest.
Restriction: Request that we limit how we process your data.
Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or sooner if required by applicable law).

Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide an opt-out mechanism.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app, updating the “Last updated” date above, and, where appropriate, sending a notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. People in the European Economic Area, the UK and Switzerland

If you live in the European Economic Area (EEA), the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR), the UK GDPR or the Swiss Federal Act on Data Protection gives you the rights below. This section adds to the rest of this policy; where they differ, this section applies to you.

Who is responsible for your data

The controller of your personal data is Bumbershoot Labs LLC, United States. Write to us about anything to do with your data at [email protected].

What we use your data for, and why we may

Your account, your family, allowances, budgets, goals and transactions; syncing them between devices; pairing a child’s device; login codes and sign-in with Apple or Google. Necessary to provide the Service you asked for (Article 6(1)(b), contract).
Your Budgette Pro subscription status, which Apple or Google tells us. Contract (Article 6(1)(b)).
Your children’s names and their allowance and budget data, which you, the parent or guardian, enter. Necessary to provide the Service you asked for on your family’s behalf (Article 6(1)(b)), and our legitimate interest in letting your family use it together (Article 6(1)(f)). See “Children” below.
Reminder emails about your account, such as finishing setting up your family. Our legitimate interest in helping you get started (Article 6(1)(f)). Every one has an unsubscribe link, and you can object at any time.
Push notifications. Your consent, given in your device’s permission prompt (Article 6(1)(a)). You can withdraw it in your device settings.
App usage analytics (Firebase Analytics). Your consent (Article 6(1)(a)). The app asks the first time you open it, collects nothing until you agree, and lets you change your answer at any time in Settings.
Crash reports (Firebase Crashlytics). Our legitimate interest in keeping the app working (Article 6(1)(f)).
Answering your support requests and feedback. Contract, or our legitimate interest in answering you (Article 6(1)(b) or (f)).
Keeping the Service secure and preventing abuse; establishing or defending legal claims. Our legitimate interest (Article 6(1)(f)).
Keeping records the law requires. Legal obligation (Article 6(1)(c)).

An email address is needed to create an account; without one we can’t provide the Service. Everything else you enter is up to you. We do not make decisions about you based solely on automated processing, we do not profile children, and we do not use your or your children’s data for advertising.

Children

Only a parent or guardian can create a family and add children to it, and children never sign up or give us information themselves. Each country sets the age below which a parent must agree to a child’s use of an online service (for example 16 in Germany and Ireland, 15 in France, 14 in Italy and Spain, 13 in Portugal). Because the parent creates and manages every child profile, the parent makes that choice for the child. A parent can see, change or delete a child’s data in the app at any time, and can sign out a child’s devices.

Who receives your data

We use these providers to run the Service. Each processes data only on our instructions:

Google Cloud (United States): our servers and database.
Google Firebase (United States): app analytics, crash reports and, on Android, delivering push notifications (Firebase Cloud Messaging).
Resend (United States): emails such as login codes and reminders.
Cloudflare (United States): hosting this website.

Apple and Google also receive data when you sign in with them or buy a subscription through their stores. They do so as independent controllers under their own privacy policies. Apple also delivers push notifications to Apple devices (Apple Push Notification service).

Transfers outside the EEA and the UK

We and our providers process your data in the United States. Google, Resend and Cloudflare are each certified under the EU–U.S. Data Privacy Framework, its UK Extension and the Swiss–U.S. Data Privacy Framework, and we rely on those certifications. If a provider’s certification lapses, or the Framework stops applying, we use the European Commission’s Standard Contractual Clauses (with the UK Addendum) instead. You can ask us for a copy of the safeguards that apply.

How long we keep it

Your account and family data: while your account exists. When you delete your account, we delete it within 30 days.
A family member you remove: deleted, with all of a child’s data, as soon as you remove them.
App analytics: individual usage events for 2 months, and what’s tied to the app-instance identifier for up to 14 months. After that only totals remain, which identify no one.
Crash reports: 90 days.
Support emails: up to 2 years after your request is resolved.
Data we must keep by law or to defend legal claims: only as long as that requires.

Your rights

You have the right to access your data, to have it corrected, to have it deleted, to restrict how we use it, to receive it in a portable format, and to object to our use of it where we rely on legitimate interest. Where we rely on your consent, you can withdraw it at any time; that doesn’t affect what we did before.

Many of these you can do yourself in the app:

Correct your name, your children’s names and your family’s data in Settings.
Delete a child or another adult from Family members, or your whole account from Settings → Delete account (or on our website).
Sign out a child’s devices from that child’s profile.
Stop reminder emails with the unsubscribe link, and push notifications in your device settings.

For anything else, including a copy of your data, email [email protected]. It’s free. We reply within 7 days and complete your request within one month, usually much sooner. We may ask you to confirm it’s your account first. If a request is unusually complex, we’ll tell you within that month if we need longer, and why, as the law allows.

Complaints

You can complain to the data protection authority where you live or work, or where you think the problem happened. In the EU, the European Data Protection Board lists them all; in the UK it is the Information Commissioner’s Office. We’d be grateful for the chance to sort it out first.

This website

budgetteapp.com uses Google Analytics only if you agree to it in the cookie banner (Article 6(1)(a), consent), and you can change your mind at any time from “Cookie settings” at the bottom of every page. Until you agree, the site contacts no Google service: even its fonts come from our own server. A cookie remembers your choice for six months. The site tells where you are from the country your connection comes from, as our host Cloudflare reports it; if it can’t tell, it asks for your consent. A second cookie remembers only whether you are asked for it (never your country), so the site checks once per visit; your browser deletes it when you close it.

Translations

We provide this policy in several languages. If a translation differs from the English version, the English version applies, as far as the law where you live allows.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Bumbershoot Labs
Email: [email protected]