Privacy Policy
Budget Enveloppes — Effective as of August 24, 2026
Budget Enveloppes is a personal budgeting app available on iOS (iPhone, iPad, Mac), Apple Watch and the Web (budget.vizualy.app). It is developed by Jérémy Lepoetre, an independent developer. The protection of your personal data is a priority. This privacy policy details the data collected, how it is used and your rights under the General Data Protection Regulation (GDPR), the UK GDPR and, for users in the United States, the California Consumer Privacy Act (CCPA / CPRA).
The app is available in French, English (United States) and English (United Kingdom). This policy applies to all supported languages and platforms.
1. Data controller
Jérémy Lepoetre — [email protected]
For any privacy-related question or to exercise your rights, contact me at the address above. I undertake to respond within 48 hours.
2. Data collected
Budget Enveloppes collects only the data strictly necessary for your account to work and to synchronize your data across devices (iOS, Web, Apple Watch):
- Email address: used for authentication via Firebase Authentication (Google Sign-In or Sign in with Apple). Depending on the provider you choose, your display name and avatar may also be transmitted.
- Financial data: income, fixed costs (global or itemized by category), savings goals (global or itemized), budget envelopes (permanent and temporary) and transactions (amount, description, category, date). This data is stored in Firebase Firestore and associated with your account.
- User identifier (UID): generated by Firebase Authentication, not linked to your civil identity.
- Push notification token (FCM): used only for optional notifications (daily reminders, over-budget alerts). On iOS, local notifications are handled natively without any data transfer.
- Daily activity: a timestamped entry is recorded for each day you open the app. This data is used exclusively for the consistency calendar and progress badges (streaks). It is not shared and only contains the date.
- Display preferences: theme (light/dark), currency, dashboard density (Bento Grid), anonymous mode. Stored in Firestore and locally.
This data is hosted on Google servers (Firebase / Google Cloud Platform), which comply with the GDPR for European users and with the UK GDPR for users in the United Kingdom.
3. Data not collected
Budget Enveloppes does not collect any of the following data:
- Location data
- Contacts, photos or media
- Advertising identifier (IDFA)
- Third-party tracking, analytics or advertising SDKs
- Bank data or financial account credentials
- Tracking or profiling cookies
No data is shared with advertising partners, data brokers or data aggregators. No automated profiling is performed.
4. Third-party services
Budget Enveloppes uses Google Firebase services for authentication, storage and notifications:
| Service | Provider | Purpose |
|---|---|---|
| Firebase Authentication | Google LLC | Authentication (Google Sign-In and Sign in with Apple) |
| Firebase Firestore | Google LLC | Storage and synchronization of data across devices |
| Firebase Cloud Messaging | Google LLC | Push notifications (optional, Web only) |
Firebase privacy policy: firebase.google.com/support/privacy
5. Data security
On iOS, local data is protected by native mechanisms: the app sandbox and encrypted storage via Data Protection. On the Web, the app uses the encryption at rest provided by your browser. Data in transit is protected via HTTPS/TLS.
Data hosted on Firebase Firestore is encrypted at rest through Google Cloud's security guarantees. Access is strictly limited to your user account: Firestore security rules ensure total data isolation per user. Only your authenticated account can read or modify your data.
6. Data retention
Your data is kept for as long as your Budget Enveloppes account exists. You can delete all of your data at any time from the app (Settings → Delete account, confirmed by typing "DELETE"). This action:
- Deletes your Firebase Authentication account
- Deletes all your Firestore documents: profile, envelopes, transactions, settings, monthly income, daily activity
- Erases local data: SwiftData on iOS, IndexedDB on the Web
Simply uninstalling the app removes local data but does not delete your Firebase account or remote data. For a complete deletion, use the "Delete account" feature in the app before uninstalling.
7. Your rights (GDPR / UK GDPR)
In accordance with the GDPR and the UK GDPR, you have the following rights:
- Right of access: you can view your data at any time in the app (dashboard, history, settings).
- Right of rectification: all your data (envelopes, transactions, settings, income) can be edited directly in the app.
- Right to erasure: the "Delete account" feature permanently erases all your data.
- Right to data portability: contact me to obtain a copy of your data in a structured JSON format. On iOS, the PDF Export (paid option) also allows you to export your monthly reports.
- Right to object: you can disable push notifications and the daily reminder at any time in the settings. Anonymous mode lets you hide amounts without disabling the service.
To exercise these rights, contact me at [email protected]. I will respond within a maximum of 30 days in accordance with the regulations.
8. Users in the United States (CCPA / CPRA)
For users in California (and, where applicable, other US states), the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you the following rights:
- Right to know: you can ask which personal information we collect, use or disclose. This policy describes those categories in section 2.
- Right to delete: you can request the deletion of your personal information at any time (see section 6 and 7).
- Right to correct: inaccurate personal information can be corrected directly in the app.
- Right to non-discrimination: exercising your rights will never affect the service or pricing offered to you.
We do not sell or share your personal information — including for cross-context behavioral advertising — and we do not process sensitive personal information for purposes other than providing the service. No targeted advertising is displayed in the app.
To exercise your rights, contact me at [email protected]. I will respond within 45 days as required by the CCPA.
9. Changes to this policy
If this policy is updated (in particular if a new feature involving data processing is added), users will be informed at the next app update or by email.
10. Contact
For any question regarding the privacy of your data or this policy: [email protected]