Privacy Policy
Buiséad is a personal budgeting app. Your financial data is yours. This policy explains what we collect, why, how we protect it, and the rights you have under the GDPR.
Who we are
Buiséad ("we", "us", "the app") is the data controller for the personal data you provide. For any privacy question or request, contact us at hello@buisead.ie.
What we collect
- Account details — your email address and a password (we never store your password itself, only a secure hash).
- The budgeting data you enter — accounts, balances, bills, income, transactions, amounts, names, notes, custom fields and any receipt images you choose to attach.
- Minimal technical data — a sign-in token (kept on your own device) and basic server logs needed to run and secure the service. We do not use third-party advertising or tracking cookies.
How your data is protected
We take security seriously:
- Sensitive fields — amounts, names, notes, account and contact details, custom fields and attachment data — are encrypted at rest using AES-256-GCM.
- Passwords are hashed with Argon2id and are never readable, even by us.
- All traffic is served over HTTPS.
- Data is hosted on secure servers within the EU.
To be clear and honest: this is encryption at rest, not end-to-end encryption — our server holds the key so the app can show you your numbers and run features like projections. We never sell your data and never share it for advertising.
AI features (optional)
If you use an AI feature — scanning a bill/receipt, auto-tagging, or insights — the relevant content (for example the image you scan, or a compact summary of your figures) is sent to our AI provider, Google (Gemini), to produce the result. It is processed to answer your request and is not used to train their models. If you never use the AI features, no data is sent to them. The AI provider's key is held only on our server and never in the app.
Why we use your data (legal bases)
- To provide the service you asked for (performance of a contract).
- Your consent for optional features such as AI and notifications, which you can turn off at any time.
- Our legitimate interest in keeping the service secure and working.
Who we share it with
We do not sell your data. We share it only with the service providers needed to run Buiséad, acting on our instructions: our hosting provider, Google (only for the AI features above, only when you use them), and our email provider (for things like password-reset emails).
How long we keep it
We keep your data while your account is active. When you delete your account (or your data), it is removed. Scanned images are processed for the result and only kept if you choose to save them to a bill.
Your rights
Under the GDPR you can ask us to access, correct, export or delete your data, and you can object to or restrict certain processing. You can delete everything yourself from within the app at any time. To make a request, email hello@buisead.ie. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).
Children
Buiséad is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
If we make material changes we will update this page and the date above. Your continued use after a change means you accept the updated policy.
Contact
Questions or requests: hello@buisead.ie.