Privacy policy

Who we are

To Budget Simply (tobudgetsimply.com) is run by Kyle, who is responsible for your personal information (the "data controller" under UK, EU and Swiss data protection law). For any privacy question or request, email support@tobudgetsimply.com or use the contact form.

What we collect and why

• Your account. Your email address and your password, which is stored only as a one-way hash so nobody, including us, can read it. We use your email to sign you in and to send account emails: confirming your address and resetting your password. We don't send marketing emails.
• Your budget. The income, expenses, categories, budgets and savings goals you enter. They're used only to show you your own budget.
• Sign-in security records. When someone signs in or fails to, we record the time, the email address used, the IP address and the browser type. We use these to stop people guessing passwords: after 5 failed attempts an account is locked for an hour.
• Where you found us. When you create an account, we store the path of the first page of ours you visited (for example /calculators/), so we can see which pages bring people to the app. Nothing else about your visit is kept with it.
• Messages you send us. The contact form sends us your email address, your name if you give it, your message, the page you mention, your browser type and, if you're signed in, your account email. We use them only to reply and fix problems.
• Server logs. Like any website, our hosting provider handles technical details of each request, such as IP address and the page requested, to deliver the site and keep it secure.

The budget calculators run in your browser. Numbers you type into them are saved only in your browser and are never sent to us.

Legal bases (UK, EU and Switzerland)

• To provide the service you signed up for (contract): your account and budget data.
• Our legitimate interests in keeping the site secure, fixing problems, answering messages and understanding which pages are useful: sign-in security records, server logs, contact messages and the first-page record.
• Your consent: personalized advertising and the advertising cookies that support it, for visitors in the UK, EEA and Switzerland. You can withdraw it at any time (see below).

Cookies and browser storage

Our own cookies are only the ones the site needs to work:

• sessionid: keeps you signed in (lasts up to two weeks, or until you sign out).
• csrftoken: protects forms from being submitted by other websites.
• messages: carries a one-time confirmation, such as "Your message was sent", to the next page.
• A cookie that remembers you hid the "Get started" checklist on your dashboard (one year).

We also keep a few things in your browser's local storage, which never leave your device: the numbers you enter in the calculators, and, for this visit only, the first page you landed on (used if you sign up).

Advertising partners set their own cookies on pages that show ads. See Advertising.

Who we share data with

We don't sell your personal information. We use these service providers, which process data on our behalf to run the site:

• DigitalOcean: hosts the website and the database.
• Zoho: sends our account emails and receives support email.
• Google: advertising on public pages, as described above.

We may also disclose information if the law requires it.

Our servers and these providers may be located in the United States or other countries outside the UK, EEA and Switzerland. Where data is transferred internationally, we rely on our providers' legal safeguards, such as the European Commission's standard contractual clauses.

How long we keep it

• Your account, budget data, first-page record and sign-in security records are kept until you delete your account. Deleting your account removes them immediately.
• Email verification and password reset links expire after 24 hours and 1 hour.
• Messages you send us stay in our support mailbox for as long as they're useful for helping you. Ask us and we'll delete them.

Your choices and rights

• Download your data as Excel or JSON at any time from your account settings.
• Correct it by editing your budget or changing your email in settings.
• Delete your account from your account settings. Everything is removed immediately.

Depending on where you live, you may also have the right to access, correct, delete or move your data, to object to or restrict how we use it, and to withdraw consent. Email us and we'll respond within one month. If you're in the UK, EU or Switzerland, you can also complain to your data protection authority, such as the UK's ICO, your EU country's authority, or Switzerland's FDPIC.

Security

The site is served only over HTTPS, passwords are hashed, and repeated failed sign-ins are blocked. No website can promise perfect security, but we work to protect your information and will tell you if a breach affects you.

Children

To Budget Simply isn't intended for children under 16, and we don't knowingly collect their personal information. If you think a child has created an account, contact us and we'll delete it.

Changes to this policy

When this policy changes, we'll update the date at the top of this page. If a change significantly affects how we use your information, we'll also tell signed-up users by email.