← Back to Home

Privacy Policy

Last updated: April 2026

1. Who We Are

LetzBudget is operated by Constantin Munteanu, Luxembourg.
Contact: [email protected]

2. What Data We Collect

  • Account data: Name, email address, phone number (for WhatsApp/Telegram linking).
  • Financial data: Expense amounts, descriptions, categories, dates, currency.
  • Device and Push Tokens: Unique device push tokens and device platform information (Android, iOS) to deliver opt-in transactional notifications and budget alerts.
  • Receipt images and Bank Statements: Processed by AI for transaction extraction. The raw files are not permanently stored on our servers after extraction.
  • Usage data: Login timestamps, feature usage, streak data.

3. How We Use Your Data

  • To provide expense tracking and categorization services.
  • To generate budgets, savings goals, and spending reports.
  • To process shared event expenses and split calculations.
  • To send you push and messaging notifications (OTP codes, budget threshold warnings, event invites and updates).

4. AI Processing

  • Text messages, receipt photos, and bank statements are sent to our third-party AI provider (Google Gemini) for transaction extraction and categorization.
  • Location: Processing by Google Gemini currently occurs outside the EU (e.g., in the United States).
  • Retention & Training: We use a paid API tier. Google Gemini is prohibited from using your data to train their AI models. We do not retain raw PDF or image files on our servers after extraction is complete.

5. Data Storage

  • Your data is stored on Microsoft Azure servers located in Western Europe.
  • Data is encrypted in transit (HTTPS) and at rest (Azure encryption).
  • Database: Azure CosmosDB with server-side encryption.

6. Data Sharing

We do not sell or share your personal data with third parties, except:

  • Google Gemini (AI transaction extraction — see section 4).
  • Google Firebase / Firebase Cloud Messaging (FCM) & Apple Push Notification service (APNs) for mobile push notification delivery.
  • Microsoft Azure (cloud infrastructure and database hosting in Western Europe).
  • Meta/WhatsApp & Telegram (messaging delivery via official APIs).
  • Stripe (payment processing for subscription plans).

7. Your Rights (GDPR)

As a user in the EU/EEA, you have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and all associated data immediately in Settings or via our Account Deletion Page.
  • Export your data in a portable format (JSON / CSV) directly from your account Settings.
  • Object to processing of your data.

To exercise these rights, you can use the in-app controls or contact: [email protected]

8. Data Retention & Backups

  • Active accounts: data is retained as long as the account remains active.
  • Deleted accounts: data is permanently and irreversibly purged across all active production database containers immediately upon deletion request. Automated infrastructure disaster recovery backups are retained for up to 30 days before permanent rolling expiry.
  • Free tier: data retained for 3 months of inactivity.

9. Cookies

The web dashboard uses:

  • Session cookies for authentication (NextAuth.js).
  • Local storage for WhatsApp JWT tokens.
  • No third-party tracking cookies.

10. Changes to This Policy

We may update this policy. The "Last updated" date will reflect changes. Continued use constitutes acceptance.

11. Contact