BudgiePrivacy Policy
Budgie (also shown as "Budgies" on some devices) is operated by RRDL Limited ("we", "us", "our"). This policy explains what we collect, why, who we share it with, and the rights you have. It applies to the Budgie apps for iOS and Android and to the websites at couplense.com and app.couplense.com.
1. Who we are
- Data controller: RRDL Limited
- Contact: hello@couplense.com
2. The short version
Budgie helps couples and individuals track shared expenses, split bills fairly, and decide on purchases before making them. We collect what is needed to run those features, plus standard analytics and ad-attribution data. You can use the app without giving us your name or email. We never ask for bank logins. We do not sell your personal data. You can delete your account at any time from Profile → Delete Account.
3. What we collect
a. Account
- An anonymous user ID created on first launch (Firebase Authentication).
- If you choose to sign in with Apple or Google: the identifier and, if shared, the email address those services give us.
- An optional display name and profile picture.
- If you pair with a partner: the invite code and the link between your two accounts.
b. Money data you enter
- Expenses, categories, amounts, dates, split settings, settle-ups, recurring bills, items you park in the cooldown, purchase requests and your decisions on them.
- Your income or hourly rate, if you enter it. This stays private to you and is never shown to your partner.
- Inside a couple, shared expenses and settle-ups are visible to your partner by design.
c. Photos
- Profile pictures you upload are stored on our servers.
- If you attach a receipt image, it is stored with the expense. If you use automatic receipt reading, the image is sent to our text-extraction provider (Mistral AI) to read the merchant, total and date.
d. Device, usage and diagnostics
- App events and screen views (Firebase Analytics, Mixpanel). Mixpanel Session Replay may record a small sample of sessions (5% or less) with all text and images masked.
- Crash and error reports (Firebase Crashlytics).
- Device model, OS version, language and, if you allow notifications, a push token (Firebase Cloud Messaging).
e. Advertising attribution
- With your permission (see section 5) we use the iOS advertising identifier (IDFA) or the Android advertising ID and attribution tools from AppsFlyer, Meta and TikTok to learn which ad or link brought you to Budgie. We also use Apple's SKAdNetwork, which does not identify you.
f. Subscriptions
- Purchases are handled by Apple (App Store) or Google (Google Play) and managed through RevenueCat. We receive your subscription status (active or expired, product, renewal date). We never see your card details.
g. Website
couplense.com does not use cookies or third-party trackers. Our web server keeps standard access logs (IP address, browser, page requested) for security and troubleshooting, for up to 30 days.
4. Why we use it
| Purpose | Examples | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Run the service | Track and split expenses, sync with your partner, cooldown reminders | Contract |
| Subscriptions | Unlock and restore Budgie Pro | Contract |
| Improve and fix the app | Analytics, crash reports | Legitimate interest |
| Ad attribution | Measure which campaigns work | Consent |
| Notifications | Partner requests, cooldown finished, settle-up nudges | Consent |
| Security and legal | Abuse prevention, legal requests | Legal obligation / legitimate interest |
5. Tracking permission
On iOS we show Apple's App Tracking Transparency prompt before any cross-app tracking. If you decline, we do not use your IDFA. You can change your choice any time in Settings → Privacy & Security → Tracking. On Android you can reset or delete your advertising ID in your device's Google settings.
6. Who we share data with
We share data only with providers that process it for us:
- Google Firebase: sign-in, analytics, crash reports, push notifications, remote configuration
- MongoDB Atlas and Fly.io: database and servers
- RevenueCat, Apple, Google: subscriptions and payments
- Mixpanel: product analytics
- AppsFlyer, Meta, TikTok: install attribution, only with your permission
- Mistral AI: receipt text extraction, only when you use it
We may also disclose data where the law requires it, or to protect the safety of our users.
7. International transfers
Some providers process data outside your country, including in the United States and the EU. Where required we rely on safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
8. How long we keep it
- Account and money data: while your account is active.
- When you delete your account, it is scheduled for deletion and permanently removed, with its expenses, settle-ups and relationship history, after a 14-day grace period. Email hello@couplense.com if you want it removed sooner.
- Anonymous, aggregated statistics that cannot identify you may be kept.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA) you can access, correct, delete, export or restrict your data, object to processing, and withdraw consent. Use Profile → Delete Account in the app, or email hello@couplense.com. We will reply within 30 days. You can also complain to your local data-protection authority. We do not sell or "share" personal information for cross-context behavioural advertising as defined by the CCPA, beyond the attribution described above.
10. Deleting your account without the app
Use couplense.com/delete-account to request deletion with your email or User ID. If you no longer have the app installed, email hello@couplense.com with the subject "Delete my Budgie account". Tell us the name shown in your profile or your partner's invite code so we can find the account. We will confirm once it is deleted.
11. Children
Budgie is not meant for children under 13 (under 16 in the EEA), and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
12. Security
Data is encrypted in transit (HTTPS). Access is protected by signed tokens, rate limits and input checks. No system is perfectly secure, but we work hard to protect yours.
13. Changes
If we change this policy we will update the date above, and tell you in the app if the change is significant.