Last updated: 27 September 2026
This policy explains what tBudgetor collects, why, and what you can do about it. It covers the tBudgetor website and the tBudgetor apps for iPhone and iPad (iOS) and Android. All three use the same account and the same servers, so the same rules apply wherever you use it.
The short version
- Your trips are yours. Nobody else can see them, and we do not sell your data or use it for advertising.
- We collect what the service needs to work: your account, the trips and expenses you enter, and the files you attach.
- You can delete your account, and everything in it, at any time.
What we collect
Your account
- Your name and email address.
- Your password, stored only as a one-way hash that nobody — including us — can read back.
- Your preferences: language, base currency and which notifications you want.
If you sign in with Google or Apple, we receive the account identifier and email address that provider shares with us, and nothing else from your Google or Apple account. If you use Apple's "Hide My Email", we only ever see the relay address. For Apple sign-in we also keep a token that lets us tell Apple when you delete your account.
What you put in
Trips, destinations, dates, budgets, expenses, amounts, payment status, notes and links. Files you attach — receipts, booking confirmations, tickets and photos — are stored privately and are only served to your signed-in account. Reports you export (PDF or spreadsheet) are generated for you and deleted automatically after a short time.
Payments
- Web: card payments are handled by our payment provider, Thawani. Your card details go to Thawani, not to us. We keep the plan, amount, dates, status and an invoice number.
- iOS: subscriptions are bought through Apple's App Store. Apple handles the payment; we receive a record of the purchase and its renewals so we can unlock your plan.
- Android: subscriptions are bought through Google Play. Google handles the payment; we receive a record of the purchase and its renewals so we can unlock your plan.
Technical information
- Web: a session cookie that keeps you signed in and remembers your language. We do not use advertising or tracking cookies. Sign-up and sign-in forms may be protected by Google reCAPTCHA, which is subject to Google's Privacy Policy.
- iOS and Android: when you allow notifications, the app registers a push token with Firebase Cloud Messaging (a Google service) so we can reach that device. Alongside it we store an identifier the app generates for that installation, the device model, operating system and app version, and the device's language and time zone — used to deliver notifications at a sensible hour and to support the app version you are running.
- iOS and Android — usage and crash reports: the apps use Firebase Analytics (a Google service) to count which screens are opened, and Firebase Crashlytics (also Google) to send a report when the app crashes. These carry an identifier Firebase generates for the installation, the device model, operating system and app version, and — for a crash — the technical details of what went wrong. They do not include your name, email address, trips, expenses or files, and are not used for advertising.
- Everywhere: our servers keep standard logs (IP address, time and the request made) to keep the service secure and to investigate faults.
Permissions on your phone
The apps ask for the camera or your photo library only when you choose to attach a receipt or document, and for notifications only if you want them. You can turn any of these off in your device settings; the rest of the app keeps working.
How we use it
- To run the service: store your trips, calculate totals and conversions, and sync your data between devices.
- To send the emails the service depends on: verifying your address, resetting your password, invitations and receipts for payments.
- To send push notifications you have switched on.
- To manage your subscription and plan limits.
- To find and fix crashes, and to see which parts of the apps are used so we know what to improve.
- To keep the service secure and to help you when you contact us. When you ask for help, a member of our support team may view your account as you see it; every time this happens it is recorded.
Who we share it with
We share data only with the services we need to run tBudgetor, and only what each one needs:
- Our hosting and email providers, to store data and deliver email.
- Thawani, Apple and Google, to process payments made through them.
- Google (Firebase Cloud Messaging, Analytics and Crashlytics), to deliver push notifications, count app usage and report crashes.
- Google and Apple, when you choose to sign in with them.
Exchange rates are fetched from public rate services; none of your data is sent with those requests. We may disclose information if the law requires it. We never sell personal information.
How long we keep it
We keep your data for as long as your account exists. Exported reports are removed automatically after a short time. When you delete your account, your trips, expenses, notes, attachments and devices are deleted with it. Records of payments may be kept longer where tax or accounting law requires it.
Your choices and rights
- See and correct: everything you entered is visible and editable in the app. You can change your name, email, password and preferences in your profile.
- Take it with you: you can export any trip as a PDF or spreadsheet.
- Delete: in the iOS or Android app, open your profile and choose Delete account. On the web, or if you no longer have the app, request it on the delete account page. An active paid subscription must be cancelled first — on iOS and Android through your App Store or Google Play subscription settings.
- Notifications: switch them off in the app or in your device settings.
Children
tBudgetor is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.
Security
Connections to tBudgetor are encrypted, passwords are hashed, and attachments are stored privately and served only after checking that they belong to you. No system is perfectly secure, but we work to protect your data and will notify you if a breach affects it.
Changes to this policy
When we change this policy we will update the date at the top, and tell you in the app or by email if the change is significant.
Contact
Questions about this policy or your data? Contact us through the support details on tBudgetor's App Store or Google Play listing, or reply to any email we have sent you.