Legal
Privacy Policy
Last updated May 20, 2026
CalBudget is a calendar-first budgeting app. This policy explains what we collect, why we collect it, how we share it, how long we keep it, and what choices you have. We wrote this to match the actual product: manual accounts, CSV import, subscriptions, support, optional AI reports, and no required bank login.
No required bank login
Your finance data is not sold
AI is optional
1. Scope and Contact
This Privacy Policy applies to CalBudget websites, web apps, mobile app experiences, subscription flows, support experiences, emails, and related services that link to this policy. In this policy, CalBudget, we, us, and our mean the CalBudget service.
Privacy questions, access requests, deletion requests, correction requests, or other data requests can be sent through CalBudget support. If you contact us, include the email address tied to your CalBudget account so we can verify and handle the request.
2. Data We Collect
CalBudget collects the information needed to operate a budgeting, forecasting, subscription, and support product. The table below is intentionally detailed so you can understand the actual categories of data involved.
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Account and identity data | Name, email address, password hash, account settings, subscription access status, login timestamps, and login IP address. | You, your device, and our authentication systems. | Create and secure your account, personalize your settings, prevent abuse, provide support, and operate the service. |
| Budget and financial planning data | Account names, account balances, account type, bank name, last four digits you enter, categories, transactions, dates, amounts, notes, URLs, recurrence, cleared status, bookmarks, debt accounts, APR, minimum payments, due days, and debt payoff plans. | You enter it, import it, or generate it through CalBudget tools. | Provide calendar budgeting, forecasting, recurring transactions, debt planning, reports, low-balance previews, and account organization. |
| Imported file data | Rows parsed from CSV, OFX, QFX, TXT, or similar bank-export files, including dates, descriptions, amounts, categories, account names, recurring indicators, and notes. | Files or data you choose to upload or paste. | Import historical transactions and create matching CalBudget accounts or categories when needed. |
| Payment and subscription data | Stripe customer IDs, subscription IDs, status, plan, billing period, cancellation status, payment method summary, customer balance, Apple transaction IDs, App Store product IDs, RevenueCat subscriber IDs, entitlement status, expiration dates, and webhook event IDs. | Stripe, Apple, RevenueCat, and your subscription actions. | Start trials, process subscriptions, manage cancellations, prevent duplicate billing events, restore purchases, grant access, and support billing questions. |
| Support, feedback, and communications | Support ticket subject and message, public support form details, replies, admin notes, feedback campaign responses, reward status, onboarding emails, password reset emails, newsletter metadata, email delivery status, and message IDs. | You, support tools, and email delivery providers. | Answer support requests, send account and product emails, process feedback rewards, maintain support history, and troubleshoot delivery. |
| AI recommendation data | If you opt in and request a report, selected transaction summaries, category totals, transaction samples, account-scoped date ranges, AI prompt content, AI output, generated report, period, and generation timestamp. | Your CalBudget data and your opt-in action. | Generate optional budgeting reviews or forecasts and store the resulting report in your account. |
| Product, device, and security data | Product events, onboarding steps, path, referrer, campaign values, anonymous ID, session ID, idempotency keys, device metadata, rate-limit buckets, request IP-derived keys, audit logs, webhook logs, and error diagnostics. | Your browser, device, our app, and service integrations. | Understand product usage, improve onboarding, protect accounts, debug the service, rate-limit abuse, investigate suspicious activity, and maintain admin accountability. |
| Weather and approximate location data | If you use weather features, latitude and longitude you provide or approximate location derived from IP address, plus weather response data such as temperature and condition. | Your request, your browser/device if coordinates are provided, IP-based lookup, ipapi, and Open-Meteo. | Display optional weather context in the product. CalBudget does not store weather location in your account records based on the current implementation. |
3. No Required Bank Login or Credential Collection
CalBudget is designed for manual planning. We do not ask for your bank login credentials, we do not require you to connect a financial institution, and we do not use Plaid or similar bank-linking services in the current product. If you enter a bank name, account label, account balance, last four digits, or imported transaction data, that information comes from you and is used to power the budget calendar.
If CalBudget later offers optional bank connection features, we will update this policy and the product disclosures before collecting new categories of bank-connected data.
4. How We Use Data
- Provide the core calendar budget, daily balance forecast, recurring transaction, account, category, report, and debt planning features.
- Create, authenticate, secure, and maintain your account, including password hashing, rate limiting, session management, login records, and fraud or abuse prevention.
- Process subscriptions, trials, cancellations, upgrades, purchase restoration, invoice support, billing portal requests, and subscription access checks.
- Send transactional emails, onboarding emails, password reset messages, support replies, product notices, and newsletters when applicable.
- Provide optional AI recommendation reports when you opt in and request one.
- Understand whether onboarding and product flows are working, debug errors, improve product quality, and protect against duplicate or abusive requests.
- Comply with legal obligations, enforce our terms, resolve disputes, preserve security, and maintain audit records for administrative actions.
5. Optional AI Recommendations
CalBudget includes optional AI-powered financial review and forecast reports. The feature is off unless you opt in. When you request a report, CalBudget sends the AI provider the information needed to generate the report for the selected account and period, such as transaction dates, titles, amounts, category names, recurrence indicators, monthly summaries, and forecast summaries.
The generated report is stored in your CalBudget account with its period and generation timestamp so you can view it later. AI reports are informational budgeting assistance only. They are not legal, tax, investment, credit, accounting, or professional financial advice.
The current AI provider is Anthropic. Anthropic publishes API data retention information separately. We do not send bank credentials because CalBudget does not collect them.
6. Payments, Trials, and App Store Purchases
Website payments and subscription management are handled by Stripe. CalBudget stores Stripe identifiers and subscription metadata, such as customer ID, subscription ID, subscription status, plan, billing period, cancellation status, and payment method summaries. Full card numbers are processed by Stripe and are not stored by CalBudget.
If you subscribe through Apple in-app purchase, Apple and RevenueCat may provide CalBudget with transaction IDs, product IDs, environment, entitlement status, expiration date, and related subscription metadata so we can grant or restore access. Apple and RevenueCat process payment and subscription data under their own terms and privacy practices.
9. Retention and Deletion
We keep personal information for as long as needed to provide CalBudget, maintain your account, comply with legal and accounting obligations, resolve disputes, prevent fraud, enforce terms, and maintain security. Different records have different retention periods.
- Account and budget data is generally kept while your account exists unless you delete or change it.
- Support tickets, feedback, and email delivery records may be kept as needed to answer requests, maintain a service history, process rewards, or document important account communications.
- Payment, subscription, webhook, and billing records may be kept as needed for accounting, fraud prevention, chargebacks, tax, subscription restoration, and legal obligations.
- Product events, rate-limit records, audit logs, and security records may be kept for product improvement, abuse prevention, and security investigations.
- Backups and logs may persist for a limited period after deletion before they are overwritten or expired through normal operations.
You can delete your account from within CalBudget where that feature is available. Current account deletion requires password confirmation and typing DELETE. Deletion attempts to cancel website billing, remove the Stripe customer record where available, remove product events tied to your user ID, remove Apple notification events tied to your app account token, remove related admin audit logs, and delete your user record. Related budget records that cascade from your user record are deleted through the database relationship.
10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These include password hashing, session controls, authentication checks, rate limiting, validation and sanitization, content security policy protections, vendor controls, billing webhook checks, and administrative audit logs.
No internet service can guarantee perfect security. You are responsible for using a strong unique password, keeping your login credentials private, signing out of shared devices, and contacting us quickly if you believe your account has been compromised.
11. Your Privacy Rights and Choices
Depending on where you live, you may have rights to know, access, correct, delete, export, restrict, object to certain processing, withdraw consent, appeal a decision, or opt out of certain sharing. California residents may have rights under the CCPA/CPRA, including rights to know, delete, correct, access, opt out of sale or sharing, and limit certain uses of sensitive personal information if applicable.
- Access and correction: update certain profile and budget data in your account, or contact support for help.
- Deletion: use the in-product deletion flow where available or contact support if you need help with deletion.
- AI opt-in: turn off AI recommendations in your settings if you do not want new AI reports generated.
- Marketing and newsletters: use unsubscribe links where provided, or contact support. We may still send transactional or account-required emails.
- Do not sell or share: CalBudget does not sell your personal finance data and does not currently share it for cross-context behavioral advertising.
We may need to verify your identity before completing a privacy request. We will not discriminate against you for exercising applicable privacy rights, but some data is necessary to provide the service.
12. Children, International Users, and Changes
CalBudget is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to CalBudget, contact support so we can review and delete it where appropriate.
CalBudget is operated from the United States. If you use CalBudget from outside the United States, your information may be processed in the United States and other locations where our service providers operate.
We may update this policy as the product, law, or vendors change. The Last updated date shows when the policy was last revised. Material changes may also be communicated in the app, by email, or through another reasonable notice method.