Privacy Policy

Last updated: 30 June 2026

🔒 Your safety comes first. Budget Tracker will never ask for your bank account numbers, card numbers, BankID credentials, or online-banking passwords. Please never enter such details into this app. We only process the transaction files you choose to upload, which you export from your own bank.

This Privacy Policy explains how VolyMera AB ("we", "us") collects, uses, and protects your personal data when you use Budget Tracker (the "Service"). We are committed to handling your data in accordance with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is VolyMera AB, Sweden. Our data protection contact is Beatrice Stocker. For any privacy questions or to exercise your rights, contact us at Volymera@gmail.com.

2. What data we collect

Account information: your name, email address, and a securely hashed password.
Financial transaction data you upload: the contents of the bank-export files you choose to import (dates, descriptions, amounts, and categories). This is used only to display and organise your budget.
Usage information: basic technical data needed to operate the Service (such as login session tokens stored in your browser).

We do not collect or store bank account numbers, card numbers, or banking login credentials, and we never ask for them.

3. Why we use your data and our legal basis

To provide the Service (manage your account, display your budget) — legal basis: performance of a contract.
To keep the Service secure and functioning — legal basis: our legitimate interests.
Optional AI categorisation — only if you choose to enable it by adding your own API key; in that case transaction descriptions are sent to the AI provider you have configured — legal basis: your consent.

4. Where your data is stored

Your data is stored using Cloudflare infrastructure (Cloudflare Pages, Workers, and the D1 database). Data may be processed on servers operated by these providers acting as our processors.

5. Sharing your data

We do not sell your data and do not share it with third parties for marketing. We only share data with service providers that help us run the Service (such as our hosting provider), and only as needed to operate it. If you enable optional AI features with your own API key, the relevant data is sent to that AI provider under their terms.

6. How long we keep your data

We keep your data for as long as your account is active. You can delete your data at any time (see your rights below), after which it is removed from our active systems.

7. Your rights under GDPR

You have the right to: access your data; correct inaccurate data; delete your data ("right to be forgotten"); restrict or object to processing; receive a copy of your data in a portable format; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority (in Sweden, the Integritetsskyddsmyndigheten, IMY). To exercise any right, contact Volymera@gmail.com.

8. Cookies and local storage

The Service uses your browser's local storage to keep you signed in and to remember preferences. It does not use third-party advertising or tracking cookies.

9. Security

Passwords are stored only in hashed form, and access to your data requires authentication. While we take reasonable measures to protect your data, no system can be guaranteed completely secure.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date of the last update shown above.

11. Contact

Questions about this policy or your data: Volymera@gmail.com.