Privacy Policy

Last updated: June 2026

1. Data Controller

The controller of your personal data is:

MICODE Sp. z o.o.
ul. Jana Heweliusza 11/811
80-890 Gdańsk, Poland
NIP: 5833510147
KRS: 0001108050
REGON: 528740633
Email: perevertkinma@gmail.com

2. Data We Collect

2.1 Account Data

• Email address (required for account creation)
• Name (optional, for personalization)
• Password (stored encrypted)
• Timezone and currency preferences

2.2 Financial Data

• Expenses and income records you create
• Budget configurations
• Categories and tags
• Investment portfolio data (if used)

2.3 Technical Data

• Device type and operating system
• App version
• Crash reports and error logs
• Usage analytics (anonymized)

2.4 Payment Data

Payment processing is handled by Stripe. We do not store your credit card details. We only receive confirmation of successful payments and subscription status.

3. How We Use Your Data

Purpose	Legal Basis (GDPR)
Provide the budget tracking service	Contract performance (Art. 6(1)(b))
Process payments	Contract performance (Art. 6(1)(b))
Send service notifications	Contract performance (Art. 6(1)(b))
Improve the app and fix bugs	Legitimate interest (Art. 6(1)(f))
Send marketing emails	Consent (Art. 6(1)(a))
Comply with legal obligations	Legal obligation (Art. 6(1)(c))

4. Data Sharing

We share your data only with:

• Stripe - payment processing
• Google Cloud / AWS - hosting infrastructure
• Firebase - push notifications
• OpenAI - AI features (expense descriptions only, no personal data)

We do NOT sell your personal data to advertisers or data brokers.

5. Data Retention

• Active accounts: Data retained while account is active
• Deleted accounts: Data deleted within 30 days of account deletion request
• Backups: Removed from backups within 90 days
• Legal requirements: Invoice data retained for 5 years (Polish tax law)

6. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access - Request a copy of your data
• Rectification - Correct inaccurate data
• Erasure - Request deletion of your data ("right to be forgotten")
• Portability - Export your data in a machine-readable format
• Restriction - Limit how we process your data
• Object - Object to processing based on legitimate interest
• Withdraw consent - For processing based on consent

To exercise these rights, contact us at perevertkinma@gmail.com. We will respond within 30 days.

7. Data Security

• All data encrypted in transit (TLS 1.3)
• Database encryption at rest
• Passwords hashed using bcrypt
• Regular security audits
• Two-factor authentication available

8. International Transfers

Your data may be processed in countries outside the EEA. We ensure adequate protection through:

• EU Standard Contractual Clauses
• Adequacy decisions where applicable

9. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy. Significant changes will be notified via email or in-app notification.

11. Cookies & Website Analytics

Our website at ai-budget.pl uses Google Analytics 4 to measure traffic and improve the site. Analytics cookies are set only after you accept them in the cookie banner; if you decline, no analytics cookies are stored. This data is aggregated and does not identify you. See our Cookie Policy for details. The mobile app itself does not use advertising or analytics cookies.

12. Contact & Complaints

For privacy questions: perevertkinma@gmail.com

If unsatisfied with our response, you may lodge a complaint with:

UODO (Polish Data Protection Authority)
ul. Stawki 2, 00-193 Warszawa
https://uodo.gov.pl