Legal

Privacy Policy

Last updated: July 25, 2026

This Privacy Policy explains what information Budgetoria (operated by Loutronics, d/b/a Budgetoria — "we," "us") collects, how we use it, and the choices you have. It applies to budgetoria.com, app.budgetoria.com, and our SMS service.

1. Information we collect

• Account information — name, email address, password (stored by Amazon Cognito; we never see your password), household name, and timezone.
• Phone numbers and SMS content — the mobile numbers you register, your opt-in consent record (timestamp), and the content of text messages you exchange with the Service.
• Financial transaction data — transactions, balances, and account metadata from banks you connect through Plaid (read-only). We do not receive or store your bank username or password; those are handled by Plaid. See the Plaid End User Privacy Policy.
• Payment information — handled entirely by Stripe; we store only your Stripe customer ID and subscription status, never card numbers.
• Usage and log data — technical logs needed to operate the Service (timestamps, request identifiers, error diagnostics).

2. How we use it

• To provide the Service: sync and categorize transactions, compute budget status, and send you digests, alerts, questions, and answers.
• To generate message text: transaction summaries and your questions are processed by an AI language-model provider (xAI) to compose replies. We send only what is needed for the reply.
• To operate the business: billing (Stripe), support, fraud prevention, and legal compliance.

3. What we never do

• We never sell your personal or financial data.
• We never share your data with advertisers or data brokers.
• We never move money — bank access is read-only.

4. Service providers

We use a small set of processors to run the Service: Amazon Web Services (hosting, storage, SMS delivery), Plaid (bank connectivity), Stripe (payments), xAI (AI text generation), and Cloudflare (DNS and email routing). Each receives only the data required for its function.

5. Household sharing

Budgetoria is a family product: members of the same household see shared budget and transaction information by design. Adults you add can view spending and edit budgets; kid-role members can ask questions but cannot change budgets. Do not add members you don't want to share this information with.

6. Retention

Transaction and budget data are retained while your account is active. Chat history is retained for 90 days. If you cancel, your household's data is deleted within 14 days of the end of your final billing period (Section 9).

7. Security

Data is encrypted in transit (TLS) and at rest. Bank access tokens are stored encrypted in AWS. Access is limited to what the Service needs to operate. No system is perfectly secure; if a breach affecting your data occurs, we will notify you as required by law.

8. Children

Accounts may only be created by adults 18+. Household "kid" members may receive and send texts with a parent or guardian's consent; we collect only their phone number and message content, and only to provide the Service.

9. Your choices and rights

• Stop texts: reply STOP to any message.
• Disconnect a bank: anytime, in the portal or via support.
• Delete your account and data: use "Delete my account" in the portal or email support@budgetoria.com; we delete household data (transactions, budgets, chat history, phone numbers) within 30 days, except records we must keep for legal or billing-dispute purposes.
• Access/correction: email us and we'll provide or correct the personal information we hold about you.

10. Changes and contact

We'll announce material changes to this policy by email, text, or in the portal before they take effect. Questions or requests: support@budgetoria.com.