Privacy policy

Who we are

BudgetMuna is operated by [Company legal name], [Registered business address] ("BudgetMuna", "we", "us"). We are the personal information controller for the information described here, under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

For anything about your privacy, including using the rights described below, email our Data Protection Officer at [email protected].

What we collect

We collect only what running BudgetMuna needs:

• Your account: your name and email address; your password, stored only as a one-way hash that we cannot read back; or, if you sign in with Google, the identifier Google gives us for your account along with your name and email. Also your settings, such as your timezone and currency.
• The money records you enter: accounts, transactions, envelopes, budgets, loans, credit cards, assets, wishlist items, tags and notes. For credit cards this includes the card name, issuer and billing dates, and the card number you choose to type — of which only the last four digits are kept. If you type or paste more than that, the rest is discarded before it is saved, because BudgetMuna never needs it.
• Statements and receipts you upload: the file is read to pull out its lines. A statement file is deleted as soon as it has been read; a receipt file is never saved at all. The lines read from a statement are kept with your account so you can review them. If a PDF is password-protected, you unlock it in your own browser: the password is never sent to BudgetMuna, and only the unlocked pages are uploaded. A CSV export you import is read on our server and never saved as a file; only its lines are kept.
• Your subscription: your plan, billing period, and the amount, status and method type of each payment. Your card or e-wallet details are entered on our payment provider's page and never reach BudgetMuna.
• Technical information: our servers log each request with your IP address, your browser and device type, the address requested and the time. We use this to keep the service secure and to fix problems.
• Scan counts: how many statement and receipt scans you use and their size, so plan limits work and we can measure cost. These records hold counts, never the contents of a document.

In your browser, the app stores your sign-in session and display preferences, such as theme and list views, in local storage, and uses no advertising cookies or analytics. If something breaks in the app, it sends us a short report (the error message, the page path, your browser version and page-speed timings) so we can fix it; the report carries nothing you typed and nothing that identifies you. Our public website at budgetmuna.com uses Cloudflare Web Analytics, which sets no cookies and does not identify visitors.

How we use it

• To provide BudgetMuna: saving your records, calculating balances, envelopes and reports, and showing them only to you.
• To read statements and receipts you upload, and to suggest matches and categories from your own past entries. Every suggestion waits for you to approve it.
• To run your subscription: taking payment, applying your plan, and sending payment confirmations and renewal reminders.
• To send the emails the service needs, such as password reset codes, and a short series after you sign up and around the end of a Pro trial about getting set up. Every email in that series has a link to stop it, and it can be turned off in Settings.
• To keep BudgetMuna secure: preventing abuse, investigating problems, and enforcing fair-use limits.
• To answer you when you contact us.

We don't sell or rent your information, use it for advertising, or use it to train AI models.

Why we are allowed to

Under the Data Privacy Act we rely on:

• Our agreement with you, to provide the service you signed up for.
• Your consent, each time you choose to upload a statement or receipt to be read, and for anything else we ask your permission for. You can withdraw consent; doing so doesn't affect what was done before.
• Our legitimate interests in keeping BudgetMuna secure and working, balanced against your rights.
• Legal obligations, such as keeping payment records for tax and accounting.

Who we share it with

We use a small number of service providers who process information on our behalf and only as we instruct:

Each provider handles information under its own privacy and security terms. Under OpenAI's API terms, content sent through its API is not used to train its models by default; OpenAI may keep it for a limited period to detect abuse.

We may also disclose information when the law requires it, to protect the rights or safety of our users or others, or as part of a merger or sale of the business, in which case this policy continues to protect it.

Where your information is kept

BudgetMuna's database is hosted in [hosting region, e.g. United States], and some of the providers above process information in other countries, including the United States. When information leaves the Philippines we remain responsible for it under the Data Privacy Act, and we choose providers that protect it to a comparable standard.

How long we keep it

• Your account and money records: for as long as your account is open.
• After you ask us to delete your account: removed from our live systems within 30 days, and from backups when they expire.
• Payment records: for as long as tax and accounting law requires, even after your account is deleted.
• Server logs: for a limited period set by our hosting provider, then deleted.
• Error reports (the message, the page or route, the browser version): 30 days from when the error was last seen.
• Uploaded files: scanned statement files are deleted once read; receipt and CSV files are never stored.

How we protect it

• Information travels between your device and BudgetMuna over encrypted connections (HTTPS).
• Passwords are stored only as one-way hashes.
• Every record belongs to one account, and BudgetMuna checks that you are its owner before showing or changing it.
• Access to user information inside BudgetMuna is limited to the people who need it to run and support the service.

No system is perfectly secure. If a breach puts your information at risk, we will tell you and the National Privacy Commission as the law requires.

Your rights

Under the Data Privacy Act you have the right to:

• Be informed about how your information is used, which is what this policy is for.
• Access the information we hold about you.
• Correct it. You can edit your profile and records in BudgetMuna yourself, or ask us.
• Take a copy of it. You can export your transactions as CSV or PDF from Settings.
• Object to processing, withdraw consent, and ask us to delete or block your information. You can delete your whole account from Settings → Security; it is scheduled 14 days ahead so you can call it off, and is permanent after that.
• Be compensated for damages caused by inaccurate, unlawfully obtained or misused information.
• Complain to the National Privacy Commission (privacy.gov.ph).

Deleting your account is done from Settings → Security, without asking anyone. For anything else here, email [email protected] from the address on your account. We may need to confirm it's you, and we'll respond within 30 days.

Children

BudgetMuna is for people 18 and older. We don't knowingly collect information from anyone younger. If you believe a child has signed up, contact us and we'll delete the account.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your information in a significant way, we will tell you in BudgetMuna or by email before it takes effect.

Contact us

Data Protection Officer, [Company legal name], [Registered business address]. Email: [email protected].