Privacy Policy

Information you add

• Account details: your name, username, password, and the recovery question and answer you choose. You do not need to give us a personal email address to register.
• Finance details: the accounts and balances, transactions, budgets, goals, bills, categories, tags, notes, and settings you enter.
• Receipts and imports: receipt images or PDFs you attach, and transaction information read from CSV or Excel files you import.
• Basic connection details: when you use Smudget online, our servers receive your IP address and basic request metadata needed to deliver the service and protect accounts from repeated sign-in attempts.
• Offline app information: local copies of your records, account session details, and changes waiting to sync (stored via local device storage on Android or browser local storage on the web app). On Android, the app also saves local reminder settings and notification preferences.

Smudget does not connect to your bank. Do not add bank passwords or payment card details to notes or receipts unless you want them stored with your records.

How we use information

• To sign you in, help you recover your account, and keep your information in sync across devices.
• To provide expense tracking, budgets, goals, bills, reports, imports, exports, and offline access.
• To create spending categories and financial insights from the information you enter.
• To set reminders on your Android device for bills, budgets, goals, and summaries when notifications are enabled.
• To protect accounts and respond when you contact support.

When information is shared

When you use online features, Smudget processes and stores your information using our cloud database provider, Neon, strictly to provide the app's syncing and account features.

• The web app loads its font from Google Fonts. Google may receive your IP address and basic browser request details when serving the font files.
• Android displays reminders on your device. Smudget schedules these reminders locally on the device; they are not sent through third-party remote push notification servers.
• If you email support, your message is processed by our email service provider (Gmail). Never include your password or recovery answer in support emails.

Smudget does not sell or rent your personal information. The app does not include third-party advertising, analytics, crash-reporting, payment processing, or remote push notification SDKs.

Storage and deletion

Your account and finance information is stored on Smudget's cloud database while your account is active. The app also saves copies locally on your device so you can use it offline. Files you export are saved wherever you choose to download them.

When you delete your account in the app, your online account and associated finance records are deleted from our active database immediately, and local copies on that device are cleared. Residual copies in automated server backups and operational logs are retained for up to 30 days for disaster recovery before being permanently overwritten. Offline copies stored on other devices you previously used are not removed remotely, so you should uninstall the app or clear browser site data on those devices yourself.

Security

Smudget hashes and encrypts your password and recovery answer so they are never stored in readable plaintext. All data transferred between the app and our servers is encrypted in transit using HTTPS/TLS, and data stored in our Neon cloud database is encrypted at rest. Because the app also stores data locally on your device for offline access, we recommend protecting your phone or computer with a strong device passcode. No method of transmitting or storing data is completely risk-free.

Your choices

You can export transactions as a CSV, Excel, or PDF file. You can also make a JSON backup of accounts, categories, transactions, budgets, goals, bills, and tags. This backup does not include every setting or attached file.

In the app, you can update your name and username, change your password or recovery details, and delete your account at any time. To ask for a copy of your information or get help with a privacy request, email smudgetsupport@gmail.com. We may ask for information to verify that the request is about your account.

Children's privacy

Smudget is not directed to children under the age of 13 (or the minimum legal age required in your country), and we do not knowingly collect personal information from children. If you believe a child has registered an account, please contact us at smudgetsupport@gmail.com so we can delete the account and its data.

Policy updates

We may update this policy as Smudget changes. We will update the "Last updated" date at the top when we do. Check this page for the latest version.

Contact us

Smudget is developed and operated by Akash Sahani. For support, data requests, or questions about this privacy policy, email smudgetsupport@gmail.com.