Privacy Policy

Buiséad is a personal budgeting app. Your financial data is yours. This policy explains what we collect, why, how we protect it, and the rights you have under the GDPR.

Who we are

Buiséad ("we", "us", "the app") is the data controller for the personal data you provide. For any privacy question or request, contact us at hello@buisead.ie.

What we collect

• Account details — your email address and a password (we never store your password itself, only a secure hash).
• The budgeting data you enter — accounts, balances, bills, income, transactions, amounts, names, notes, custom fields and any receipt images you choose to attach.
• Minimal technical data — a sign-in token (kept on your own device) and basic server logs needed to run and secure the service. We do not use third-party advertising or tracking cookies.
• App usage & feedback — anonymous records of which features and screens you use (event names only — never your amounts, names or notes), and any feedback you choose to send us. See “Usage analytics & feedback” below.

How your data is protected

We take security seriously:

• Sensitive fields — amounts, names, notes, account and contact details, custom fields and attachment data — are encrypted at rest using AES-256-GCM.
• Passwords are hashed with Argon2id and are never readable, even by us.
• All traffic is served over HTTPS.
• Data is hosted on secure servers within the EU.

To be clear and honest: this is encryption at rest, not end-to-end encryption — our server holds the key so the app can show you your numbers and run features like projections. We never sell your data and never share it for advertising.

AI features (optional)

Buiséad includes optional AI features. The AI features are turned off until you choose to use one, and the first time you do, the app shows you exactly what will be sent, names the provider, and asks for your permission before anything leaves your device. If you never use the AI features, no data is ever sent to the AI provider.

What is sent, and to whom. When you use an AI feature, the specific content needed for that feature is sent to our AI provider, Google (its Gemini models), to produce the result, which is returned to the app:

• Scan a bill or receipt — the image or PDF you select, together with a short list of your existing bill names, types and amounts, so the scan can be matched to the right bill you already have.
• Import a list of bills — the file, image or text you provide.
• Insights — a compact, figures-only summary of your budget (no names, emails or account credentials).
• Auto-tagging and supplier look-ups — the receipt image or the supplier/bill name you ask us to look up.

How it is protected. Google processes this content as our data processor, acting only on our instructions under a data-processing agreement, and provides protections for it equivalent to those described in this policy. The content is used only to produce your result and is not used to train Google's models and not used to build an advertising profile. The AI provider's key is held only on our server and never in the app.

Usage analytics & feedback

To understand how Buiséad is used and make it better, we record anonymous usage events — which features and screens you open (for example “opened the calendar” or “added a bill”) and how often. These are event names only: they never include amounts, item names, notes or any of your financial detail. We use our own first-party analytics — there are no third-party analytics, advertising or tracking SDKs in the app, and we do not track you across other apps or websites.

If you choose to send feedback from Settings, the message you write (and an optional rating) is stored so we can read it and respond; it is encrypted at rest like your other content. All of this analytics and feedback data is deleted when you delete your account.

Why we use your data (legal bases)

• To provide the service you asked for (performance of a contract).
• Your consent for optional features such as AI and notifications, which you can turn off at any time.
• Our legitimate interest in keeping the service secure and working, and in understanding anonymous usage so we can improve it.

Who we share it with

We do not sell your data. We share it only with the service providers needed to run Buiséad, acting on our instructions: our hosting provider, Google (only for the AI features above, and only when you choose to use them), and our email provider (for things like password-reset emails). Each provider is bound by contract to protect your data to a standard equivalent to this policy and to use it only to provide their service to us — never for their own purposes.

How long we keep it

We keep your data while your account is active. When you delete your account (or your data), it is removed. Scanned images are processed for the result and only kept if you choose to save them to a bill.

Your rights

Under the GDPR you can ask us to access, correct, export or delete your data, and you can object to or restrict certain processing. You can delete everything yourself from within the app at any time. To make a request, email hello@buisead.ie. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

Children

Buiséad is not intended for children under 16, and we do not knowingly collect their data.

Changes to this policy

If we make material changes we will update this page and the date above. Your continued use after a change means you accept the updated policy.

Contact

Questions or requests: hello@buisead.ie.