Privacy Policy

Who handles your data

The data controller is Giuseppe Simone Sassano. For any question about your data, or to exercise your rights, write to support@buddoapp.com.

What data

Your account: name, email, the code that identifies the account and the date you accepted the Terms. We never see your password: it is stored encrypted. If you log in with Google or Apple, they give us your name and email address; with Apple you can choose to hide your real address.

What you enter in Buddo: salary, account balance, expenses, income, due dates, savings goals, categories, and preferences such as currency and country.

Login records: when you log in, the system notes the date, time, IP address and type of device, to protect your account.

Only on your phone, never reaching us: language, appearance and your Remember me choice. Buddo doesn’t ask for your location, contacts, photos or access to your bank account.

Why we use it

To provide the service you ask for by signing up: logging you in, saving your numbers, working out how much you can spend and sending you the emails you need, such as confirmation codes. The legal basis is the contract, that is these Terms.

For the security of your account, through the login records, and to be able to show when you accepted the Terms. Here the legal basis is our legitimate interest, which you can object to.

Name and email are needed to have an account; Buddo needs your numbers to do its calculations. Without them, the app can’t work.

What we don’t do

Buddo shows no ads, doesn’t sell or lend your data, uses no analytics or tracking tools and doesn’t profile you. The calculations on your numbers only show you estimates: they make no decisions that affect you.

Who processes it for us

Supabase stores the data and handles logging in: the database is in Ireland, in the European Union. Resend sends the emails with the codes and is based in the United States; the transfer is protected by the EU-US Data Privacy Framework and by the European Commission’s standard contractual clauses. The same applies to any access to the data by Supabase from outside the Union. These providers only process data on Buddo’s behalf and with the same protections described here.

If you log in with Google or Apple, they handle your data as independent controllers, under their own privacy policies.

How long

Your account data and what you enter are kept as long as you have an account. When you delete it, they are deleted straight away, together with the login records. Records kept by the providers and any backups they hold are deleted automatically within a few days.

How to delete everything

In Account → Email and password → Delete account. You don’t need to write to anyone: your account and your data are deleted straight away. If you used Sign in with Apple, you can also disconnect Buddo from your Apple Account: in Settings tap your name, then Sign in with Apple, choose Buddo and tap Delete.

Your rights

You can ask to see your data, correct it, delete it, restrict its use, object to its processing and receive it in a format another service can read. You can already do much of this in the app: correct your data in Profile, export it from Account → Your data and delete it by deleting your account. For anything else write to support@buddoapp.com: we reply within one month. If you think your data is being handled badly, you can contact the Italian data protection authority (Garante per la protezione dei dati personali) or the authority of the country where you live.

How we protect it

Data travels encrypted between the app and the server. In the database each account can only see its own data, and not even the app can read anyone else’s.

Children

Buddo is not meant for anyone under 14. If we find out we hold the data of a child under 14 without a parent’s permission, we delete it.

If it changes

If this policy changes in an important way, we’ll tell you in the app before the change applies. The date of the latest version is always at the top.