Privacy Policy

Scope

This Privacy Policy explains how Financial Literacy Group LLC ("Company", "we", "us") collects, uses, shares, and protects information in connection with Budgefy (the "Service"). We are not a bank or financial institution. This Policy focuses on U.S. law with emphasis on California (CCPA/CPRA).

Information We Collect

• Identifiers & Contact: name, email, device IDs, IP address.
• Account Security: hashed passwords, authentication tokens, multi-factor data.
• Financial Data: via Plaid or manual input (balances, transactions, merchants, categories, budgets, debts, and related metadata). We do not store your financial institution credentials; we use tokens.
• Usage/Device Data: logs, timestamps, app version, OS, settings, crash reports.
• In-App Communications & AI Content: prompts, chat transcripts, and AI-generated outputs.
• Inferences: insights we derive about spending patterns, budgeting trends, preferences.

Sensitive Personal Information (SPI): certain financial data may be SPI under California law. We use SPI only as reasonably necessary to provide and secure the Service, prevent fraud, maintain quality, and as permitted by law.

Sources of Information

• Directly from you (registration, manual data entry, support).
• Automatically from your device and use of the Service (cookies/SDKs/pixels/analytics).
• From third-party services you authorize, including account connectivity via Plaid.

How We Use Information

• Provide, operate, secure, troubleshoot, and improve the Service.
• Analyze financial data (including via AI) for dashboards, categorizations, insights, and recommendations.
• Personalize experiences and present relevant content and offers.
• Communicate about features, security, and policy changes.
• Detect, investigate, and prevent fraud, abuse, and security incidents; enforce our Terms.
• Comply with law and respond to lawful requests.
• De-identify and/or aggregate data for analytics, research, and product improvement.

AI/Model Improvement: We may use de-identified and/or aggregated information derived from your usage and data to improve our models and services. We do not use your identifiable financial data to train publicly available models. If we use third-party AI providers, contracts restrict their data use to providing services to us and prohibit unrelated model training unless you consent.

Plaid Notice

We use Plaid Technologies, Inc. ("Plaid") to connect your financial accounts. By using our Service, you authorize us and Plaid to access and transmit your personal and financial information from your financial institution(s). We do not store your financial institution login credentials; we receive and store tokens only. Review Plaid’s policies for details.

Sharing; “Sale” and “Share” (CCPA/CPRA)

• We do not sell your personal information for money.
• We may “share” personal information for cross‑context behavioral advertising unless you opt out.
• We honor Global Privacy Control (GPC) signals as valid opt‑out requests.
• Disclosures: service providers/processors (hosting, analytics, customer support, AI infra), Plaid and similar connectivity providers (to retrieve data you direct), professional advisors, legal/regulatory requests, business transfers, and representatives you explicitly authorize within the app.
• We do not disclose raw banking credentials.

Targeted Offers/Referrals: We may present targeted offers or referrals based on your usage or de‑identified/ aggregated insights. We do not disclose your identifiable financial data to third parties for their independent use without your consent. You can opt out of “sharing” in settings or by contacting support@budgefy.io.

Your Privacy Rights

• Access/Know: request categories and specific pieces of personal information we collected.
• Delete: request deletion, subject to legal exceptions.
• Correct: request correction of inaccurate personal information.
• Data Portability: request a copy in a portable format.
• Opt Out of “Sale/Sharing”: opt out of cross‑context behavioral advertising.
• Limit Use of Sensitive Personal Information to necessary purposes permitted by law.
• Non‑Discrimination for exercising your rights.

How to Exercise: use in‑app privacy controls or email support@budgefy.io. California residents may also use our “Do Not Sell or Share My Personal Information” and “Limit the Use of My Sensitive Personal Information” controls. We verify requests as required and maintain request records for at least 24 months. We honor Global Privacy Control (GPC) signals as valid opt‑outs for sale/sharing.

Retention

We retain personal information only as long as necessary for the purposes described or as required by law. We maintain retention schedules considering data category, purpose, and legal requirements, and delete or de‑identify data when no longer needed.

Security

We implement administrative, technical, and physical safeguards appropriate to the nature of the information processed, including encryption in transit and at rest, role‑based access controls, multi‑factor authentication, logging, vulnerability management, vendor due diligence/DPAs, and incident response procedures. No system is perfectly secure.

Cookies, SDKs, Pixels, and Tracking

We keep track of site/app activity using cookies/SDKs/pixels and similar technologies to operate the Service, improve performance, and personalize your experience (including analytics and advertising). Where required, we obtain consent. Manage preferences in‑app and via your browser/device settings. Disabling cookies may affect functionality. We do not respond to Do Not Track (DNT) signals, but we honor Global Privacy Control (GPC) for sale/sharing.

AI Chats & Transcript Handling

We store chat transcripts and related context to operate the Service, improve quality, and provide continuity. Access is limited to authorized personnel on a need-to-know basis. We may de-identify/aggregate content for analytics and improvement; we do not publish identifiable chat content. If third-party AI providers are used, contracts limit their use to providing services to us and prohibit unrelated model training unless you consent.

Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child provided information to us, contact support@budgefy.io to request deletion.

International Users

We host and process data in the United States. If you access the Service from outside the U.S., you consent to transfer to the U.S. and application of U.S. law.

Contact Us

Financial Literacy Group LLC
250 West Ocean Boulevard, Long Beach, California, 90802
support@budgefy.io