Privacy Policy

1. Introduction

Friendly Budget (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you use the Friendly Budget web application (the “Service”).

2. Data We Collect

2.1 Data Provided by You

• Account details: name, email address, password hash.
• Budget information: categories, planned amounts, expense entries, comments, attachments.
• Communication data: messages sent via the contact form.

2.2 Data Collected Automatically

• Technical data: IP address, browser type, device information, operating system.
• Usage data: access times, pages visited, actions performed inside the app.

3. Purpose & Legal Basis

We process personal data based on the following legal grounds:

• Contractual necessity: to provide core budgeting features.
• Legitimate interest: to improve the Service and ensure security.
• Consent: for optional communications or features (where applicable).
• Legal obligation: to comply with laws and regulations.

4. Data Retention

• Account data is kept for as long as your account remains active.
• Financial entries are stored until you delete them or request removal of your account.
• Backups are retained for up to 30 days.
• Support communications are kept for up to 12 months unless required longer for legal reasons.

5. Data Sharing

• We do not sell personal data to third parties.
• Trusted service providers (e.g. hosting, email) may process data on our behalf under confidentiality agreements.
• We may disclose information if required by law or to protect our legitimate interests.

6. Security

We use industry-standard security measures, including HTTPS encryption, HttpOnly session cookies, CSRF protection, and hashed tokens to protect your data. However, no system can be entirely secure, so we encourage you to use a strong, unique password and keep your account credentials confidential.

7. Your Rights (GDPR)

• Access, rectification, deletion of your data.
• Restriction or objection to certain processing activities.
• Data portability when technically feasible.
• Withdrawal of consent for optional features.
• File a complaint with the Romanian Data Protection Authority (ANSPDCP) or your local supervisory authority.

8. Cookies

• Essential cookies: session management, CSRF protection.
• Preference cookies: language selection, theme preferences.
• We do not use advertising or tracking cookies.

9. International Transfers

If personal data is transferred outside the European Economic Area, we use appropriate safeguards (e.g. Standard Contractual Clauses) to protect your information.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you through the application or by email when significant changes occur. Continued use of Friendly Budget after updates indicates acceptance of the revised policy.

11. Contact