Privacy Policy

Last updated: August 24, 2026

BudgeFlow ("BudgeFlow", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, application, optional bank-connection features, SMS services, and related services. Bank connection is optional; you can use BudgeFlow without connecting a financial institution.

Information We Collect

We may collect account information such as your name, email address, phone number, login information, workspace settings, billing status, and preferences.

We also collect information you provide while using BudgeFlow, including expenses, income, budgets, goals, categories, accounts, subscriptions, reminders, SMS commands, SMS replies, uploaded receipt or transaction information, and other budgeting-related records.

When you communicate with BudgeFlow by SMS, we may collect your mobile phone number, message content, opt-in and opt-out status, message timestamps, delivery status, and related messaging records.

We may also collect device, browser, diagnostic, security, and coarse usage information, such as IP address, browser type, authentication events, application errors, and feature interactions. We limit analytics information and do not intentionally send financial amounts, transaction descriptions, SMS content, phone numbers, email addresses, or Plaid credentials to analytics services.

Optional Bank Connections and Plaid

If you choose to connect a financial account, BudgeFlow uses Plaid Inc. ("Plaid") to help establish and maintain that connection. Plaid Link shows the requested data types and intended use and lets you select which eligible accounts to share. BudgeFlow does not receive or store the username and password you use to sign in to your financial institution.

Depending on the accounts you select and the features you authorize, we may receive financial-institution information; account identifiers and metadata such as account name, type, subtype, and masked account number; balances made available with the selected Plaid product; transaction history and updates; transaction amount, date, merchant, category, pending status, and description; and technical identifiers, connection status, and error codes needed to operate and secure the connection. We request account and transaction data for budgeting and cash-flow features, not for lending, payments, advertising, or sale to third parties.

Plaid processes information under its own end-user privacy policy. You can review it at plaid.com/legal.

How We Use Information

We use information to operate, maintain, and improve BudgeFlow.

This includes creating and managing your account, recording expenses and income, categorizing transactions, sending budgeting reminders, generating summaries and reports, responding to support requests, processing billing, preventing fraud or abuse, and complying with legal obligations.

When you connect a financial institution, we use the information you authorize to import and update account and transaction activity, help categorize purchases and deposits, support transaction review and reconciliation, present cash-flow and budgeting insights, maintain the connection, and respond to connection errors or revocation events.

We may use aggregated or anonymized information to understand product usage and improve our services. Aggregated or anonymized information does not identify you personally.

Consent and Other Processing Grounds

When creating an account, you must acknowledge this Privacy Policy and our Terms of Service. Optional SMS consent is collected separately and is not a condition of purchase. An optional bank connection begins only when an authenticated user chooses to connect an account and authorizes the requested accounts and data through Plaid Link. You may decline or withdraw optional permissions without losing access to BudgeFlow features that do not require them.

Depending on applicable law and the context, we process information with your consent, to provide the service you request and perform our agreement with you, to comply with legal obligations, and for legitimate interests such as securing, supporting, and improving the service. Where processing is based on consent, you may withdraw that consent, although withdrawal does not affect processing already performed lawfully.

SMS Communications

If you opt in to receive SMS messages from BudgeFlow, we may send you two-factor authentication (2FA) codes, account notifications (including budget alerts, expense notifications, bill reminders, goal updates, and subscription or billing notifications), and customer care messages in response to your inbound SMS commands or support requests. BudgeFlow does not send marketing, promotional, or advertising SMS messages.

Message frequency may vary. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP. You may request help at any time by replying HELP, or by emailing support@budgeflow.com.

Consent to receive SMS messages is not a condition of purchase or use of BudgeFlow.

Mobile Information Sharing

No mobile information (including phone numbers and SMS opt-in data and consent) will be shared with third parties or affiliates for marketing or promotional purposes.

All categories exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

How We Share Information

We do not sell your personal information. We may share information only with service providers that help us operate BudgeFlow, such as hosting providers, database providers, payment processors, email providers, SMS providers, analytics providers, and security services. These providers are only allowed to use information as needed to provide services to us.

For optional bank connections, information is shared with Plaid and may be exchanged with the financial institution you select as necessary to establish, maintain, update, secure, or disconnect the connection. We do not share connected-account data with advertisers and do not use it for cross-context behavioral advertising.

We may also disclose information if required by law, to protect our rights, to prevent fraud or abuse, or in connection with a business transfer such as a merger, acquisition, or sale of assets.

Data Security

We use reasonable administrative, technical, and organizational safeguards to help protect your information. Data is protected in transit and at rest where supported by our service providers. Workspaces are designed to keep customer data separated.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain account, workspace, and budgeting information while your account is active and for as long as needed to provide the service you request. We may retain limited billing, consent, fraud-prevention, security, dispute, and legal-compliance records for longer when reasonably necessary or required by law. We review this retention schedule at least annually and after material changes to our services or legal obligations, and delete or de-identify information when it is no longer needed for an identified purpose.

When you disconnect a financial institution, we stop requesting new data for that connection, ask Plaid to remove the connected Item, and delete the stored Plaid access credential after provider removal is confirmed. Previously imported transaction and budgeting records may remain in your workspace to preserve the budgeting history you requested until you delete those records, delete your account, or ask us to delete them, unless continued retention is required by law or reasonably necessary to resolve a dispute, prevent fraud, protect security, or provide a feature you continue to request.

SMS message-log content and addressing values are scheduled for redaction after 90 days; processed reply and error content after 30 days; processed-message records after 180 days; and short-lived SMS confirmation, follow-up, and list state seven days after expiration. SMS opt-in, opt-out, consent, and related evidence may be retained longer to document compliance with messaging requirements.

Deletion from active systems may not immediately remove information from encrypted backup copies. Backup copies are isolated from ordinary use and age out according to our service providers' backup-retention schedules unless law requires longer retention.

Your Choices and Privacy Rights

You may update certain account information in your BudgeFlow account. You may opt out of SMS messages by replying STOP. You may request SMS support by replying HELP.

You may disconnect a financial institution from your bank-connection settings. Disconnecting ends future Plaid access for that connection but does not automatically delete budgeting history already imported into your workspace. You may delete individual budgeting records, use the self-service account-deletion control, or contact us to request deletion.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to object to or restrict certain processing; to withdraw consent; or to appeal a privacy-request decision. We may need to verify your identity and authority before fulfilling a request. Some information may be retained where permitted or required by law.

Children's Privacy

BudgeFlow is not intended for children under 18. We do not knowingly collect personal information from children under 18.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

Contact Us

Questions or privacy requests? Email support@budgeflow.com or contact us.

Website: https://budgeflow.com