1 Information you provide
You enter this information into the app:
This information remains on your device unless you choose to back it up to Google Drive.
When you scan a receipt or share a receipt screenshot to MyBudget2U, its text is read on your device; the image is never sent anywhere to be read.
2 Where your data is stored
Everything listed above is stored locally on your device in the app’s private database. We, the developer, have no server that receives or stores this data, and we cannot see it. (Section 7 describes the payment notifications that may be read on our server.)
3 Google Drive backup
Receipt photos are stored locally on your device. If you enable Google Drive backup, they — together with your database — are included in a backup stored privately in your own Google Drive account, where Google encrypts it at rest. The backup lives in a private application folder that only the app can see; only you can access it. You can delete these backups from your Drive at any time.
4 Subscriptions & payments
To offer and manage the Pro subscription we use RevenueCat and Google Play Billing. When you purchase or restore Pro, these services process your purchase and a randomly-generated anonymous identifier to determine whether your subscription is active. We never receive your card or payment details — Google Play handles all payment.
If you redeem a promo code, the code and that same anonymous identifier are sent to our own small server, hosted on Cloudflare. It checks the code, keeps a record of which identifier claimed it, and asks RevenueCat to give you the free month. Cloudflare also handles your IP address while the request is made, as any web host does.
5 Currency exchange rates
When you record spending in a foreign currency, the app fetches current rates from a third-party rate service. Only a request for rates is sent — no personal or financial data leaves your device.
6 Notifications
Budget alerts and daily reminders are generated locally on your device. Nothing is sent to us.
7 Payment notifications (optional)
Payment notifications are off unless you turn them on. When you do, MyBudget2U uses Android’s notification access to read notifications only from the banking and wallet apps you choose, looking for a payment’s amount, the shop or person, and the time, so it can offer to log it. Android’s permission screen says the app can read all your notifications, because Android has no narrower permission; MyBudget2U ignores every app you have not chosen.
- What is kept: only notifications that contain a payment. Login codes, messages and everything else are discarded immediately and never stored.
- Where, and for how long: on your device only, in the app’s private storage, for at most 7 days, or until you log or ignore the payment.
- Read on your phone first: most notifications are read entirely on your device.
- When the phone can’t read one: if a payment notification is worded in a way the app doesn’t recognise, or it can’t tell the amount or whether money came in or went out, the app may send that notification’s title and text, exactly as your bank or wallet wrote them, to our own server, hosted on Cloudflare, together with the app’s name, the time it arrived, your currency and the same anonymous identifier described in section 4. The text can include names (yours, or the other person’s) and the last digits of an account or card. Our server passes it to Anthropic’s Claude, an AI model, which says whether it is a payment, its amount, direction and shop or person. The app checks the answer before using it. Nothing from your budget is sent: no entries, accounts, categories, notes or profile.
- Not kept: our server does not store or log the notification text. It keeps counts: how many notifications each anonymous identifier has had read, and daily totals used to prevent abuse. To teach the app new wordings, it also keeps the wording pattern of a notification that was read, with amounts, names, numbers and reference codes replaced by placeholders (for example “You have paid {AMOUNT} to {PERSON}.”), together with the name of the banking or wallet app and a count. A pattern is stored only after the same wording has been seen more than once, is never linked to you or your identifier, and rare ones are deleted after 30 days. Anthropic processes the text to answer and handles it under its commercial terms and privacy policy. So that only the genuine app can ask for a reading, the app also asks Google Play for an integrity check (Google’s Play Integrity API) and sends its result with the request; Google processes the device and app signals this needs under its own terms. This only applies if you turned on “Read payment notifications” in app version 1.3.5 or later.
- Never backed up: the notification text is never included in your exports or Google Drive backups. A payment you log becomes an ordinary entry, and the list of apps you chose is saved with your settings; both are kept like the rest of your data (sections 2 and 3).
- Turning it off: switch off “Read payment notifications” under Payment alerts in Settings → Auto-capture, which also deletes any payments still waiting, or remove MyBudget2U’s access in Android Settings → Notification access.
8 Third-party services
Google Sign-In, Google Drive Backup, and Google Play Billing are governed by Google’s applicable terms and privacy policies. RevenueCat, Cloudflare and Anthropic (which reads the payment notifications described in section 7) are governed by their own privacy policies. They act as our service providers. We encourage you to review them.
9 What we do not do
- We do not show ads.
- We do not sell, rent, or share your data. The service providers in section 8 process only what is needed for the features you use.
- We do not run third-party analytics or trackers on your financial data. (RevenueCat processes only the subscription information described above.)
10 Keeping & deleting your data
Your data stays on your device until you remove it. You can:
- Export a full JSON backup any time (Settings → Data).
- Delete individual items in the app.
- Clear the app’s data or uninstall to remove everything from the device.
- Delete Drive backups from your Google Drive.
11 Children
MyBudget2U is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect data from them.
12 Security
Your data is held in the app’s private storage on your device and, if you enable backup, in your private Google Drive folder. Please protect your device with a screen lock.
13 Changes to this policy
We may update this policy; the “Last Updated” date above will change. Continued use of the app means you accept the update.
14 Contact
Questions about this policy? Contact us at bleuleo.dev@gmail.com.