Privacy Policy
Last updated September 28, 2026
1. Who we are
Budgett is a personal finance app for virtual assistants, freelancers and their families. It is run by Marleo Enobio, based in General Santos City, Philippines. In this policy, "Budgett", "we" and "us" mean the operator, and "you" means anyone who uses the Budgett app.
Under the Data Privacy Act of 2012 (Republic Act No. 10173), Budgett is the personal information controller for the data you put into the app. We decide how it is used, and we are responsible for protecting it.
Data Protection Officer: Marleo Enobio · hello@usebudgett.com
2. What we collect
We only collect what the app needs to work. We do not sell your data, and we do not show ads.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Email, password (stored scrambled, never readable), name, optional phone number | You, when you sign up or edit your profile |
| Profile and settings | Display name, username, profile type (e.g. VA, freelancer), app preferences, security questions | You |
| Money records | Income, expenses, budgets, bills and due dates, savings goals, account balances, debts, net worth, grocery lists | You, as you use the app |
| Rewards and leaderboard | XP, rank, and your display name if you choose to show it on the leaderboard | Created by the app from your activity |
| Device information | Device name and a device ID, so you can see and sign out your devices | Your phone |
| Crash and error reports | What the app was doing when it crashed, phone model, app version | Your phone, automatically |
| Feedback | Messages you send us through the app | You |
Stays on your phone only: Face ID and fingerprint checks are done by your phone — Budgett never receives your face or fingerprint data. If you turn on quick login, your login details are kept in your phone's secure storage, not on our servers. A copy of your data is also kept on your phone so the app works offline.
Other people's data: some entries may name other people, like a client or a family member. Only add what you need, and only what you have the right to share.
3. Why we use it, and our legal basis
| Purpose | Legal basis under RA 10173 |
|---|---|
| Run your account and show your budgets, bills, savings and reports | Needed to give you the service you signed up for (contract) |
| Keep your data synced and backed up across your devices | Contract |
| Send bill reminders and app announcements | Contract; you can turn notifications off anytime |
| Give XP, ranks and the leaderboard | Your consent; the leaderboard is optional |
| Fix bugs and keep the app safe (crash reports, sign-in security, stopping misuse) | Our legitimate interest in a working, secure app |
| Answer your feedback and support requests | Contract and legitimate interest |
| Follow the law and respond to lawful requests from authorities | Legal obligation |
By creating an account, you agree to this processing. You can withdraw your consent anytime by deleting your account. We will not use your data for a new purpose without telling you first and, where the law requires it, asking again.
4. Who we share it with
We never sell or rent your data. We share it only with the service providers below, only for what they do for Budgett, and under terms that require them to protect it.
| Provider | What they do for Budgett | Data they handle |
|---|---|---|
| Supabase | Stores your account and app data; handles sign-in | All account and money records |
| Sentry | Collects crash and error reports | Crash details, device and app version |
| Expo | Delivers app updates and notifications | Device information |
| Apple App Store and Google Play | App downloads and, later, payments | What their own policies cover |
| Vercel and Cloudflare | Host our staff dashboard and this website | What staff open for support; website visit logs |
Outside the Philippines: some of these providers store or process data outside the Philippines, such as in the United States or Singapore. We stay responsible for your data wherever it is processed, as the Data Privacy Act requires.
Budgett staff: a small number of authorized staff can view account information to help with support, fix problems and manage plans. Every staff action is recorded in an audit log, and staff are bound to keep your data confidential.
Other users: nobody else can see your money records. If you turn on the leaderboard, other users see only your display name, XP and rank.
Authorities: we share data with the government only when the law requires it, such as a valid court order.
5. How long we keep it, and deleting your account
We keep your data while your account is open. You can delete your account anytime in the app: Profile → Delete Account. When you do:
- Your login and every record tied to your account are permanently erased from our database right away.
- The copy on your phone and your saved quick-login details are cleared.
- Backup copies are overwritten within 30 days.
- The only exception is records the law requires us to keep, such as payment records once paid plans exist — kept only for as long as the law requires.
Deleting cannot be undone. The same email can sign up again later, but it starts as a brand-new, empty account. Can't open the app? See Delete my account.
6. How we protect it
- Data is encrypted while it travels between your phone and our servers.
- Each account can only read its own data; database rules block everyone else.
- Passwords are stored scrambled (hashed), so nobody at Budgett can read them.
- App lock with Face ID, fingerprint or passcode, plus automatic lock when the app is idle.
- Staff use their own logins with roles, only see what their job needs, and every action is logged.
No system is 100% secure. Please use a strong password and keep your phone locked.
If there is a data breach: if a breach may cause you serious harm, we will tell the National Privacy Commission and you within 72 hours of finding out, explain what happened and what data was affected, and tell you what you can do.
7. Your rights
The Data Privacy Act gives you these rights. To use any of them, email hello@usebudgett.com. We reply within 15 days, and may first ask you to confirm your identity.
| Your right | What it means in Budgett |
|---|---|
| To be informed | Know what we collect and why — this policy |
| To access | Ask for a copy of the data we hold about you |
| To correct | Fix wrong details; most you can edit yourself in the app |
| To object | Say no to processing based on consent, like the leaderboard |
| To erase or block | Delete your account in the app, or ask us to |
| To data portability | Get your data in a common file format to take elsewhere |
| To damages | Be compensated if you're harmed by wrong or unauthorized use of your data |
| To file a complaint | Complain to the National Privacy Commission (below) |
8. Age, changes, and contact
Age: Budgett is for people 18 and older. We don't knowingly collect data from anyone younger. If you think a minor has made an account, email us and we will delete it.
Changes: if we change this policy in a way that affects you, we will tell you in the app before the change takes effect. The date at the top shows when it was last updated.
Contact: Marleo Enobio, Data Protection Officer · hello@usebudgett.com · General Santos City, Philippines.
Not happy with our answer? You can file a complaint with the National Privacy Commission at privacy.gov.ph.