App privacy policy

Effective date: 26 September 2026

Panda Budget (“we”, “our”, “the app”) is committed to protecting your privacy. This policy explains what the Panda Budget app collects, how it is used and your choices. The website has its own website privacy notice.

1. Data we collect

We collect only what is needed to provide the budgeting service:

• Account information: name, email address and sign-in credentials, managed by Firebase Authentication. If you sign in with Google or Apple, we receive your name and email from that provider.
• Budget data: envelope names and amounts, transaction descriptions, amounts and dates, income sources, savings accounts and goals, loans, bills, subscriptions and credit cards that you enter. We do not connect to your bank accounts.
• Household data: household name, member IDs and invite codes for shared budgeting.
• Device data: device locale (to suggest a currency), platform and app version for diagnostics, and a notification token if you allow reminders.
• Subscription data: purchase and trial status, managed by RevenueCat, to decide which Premium features you can use. We never see or store your payment card details.

2. How we use your data

• To provide the budgeting service and sync it across your devices and household
• To manage your subscription and free trial
• To send reminders and alerts you have turned on
• To provide smart suggestions, only if you allow them (see section 3)
• To provide support when you ask for it

We do not sell, rent or share your personal data with advertisers or data brokers.

3. Smart suggestions (AI)

Smart suggestions are optional. The app asks for your permission before using them, and you can turn them off at any time in Settings → Smart Suggestions. The app works fully without them.

When they are on, suggesting an envelope sends the purchase description, amount and currency, your envelope names and categories, and up to five of your recent categorized purchase descriptions to our server, which forwards them to our AI provider, TypeSafe. “Can I Buy This?” also sends the purchase description and amount with a summary of your budget totals (such as money available to spend and how many envelopes need attention). This data is used only to create the suggestion. It is not used for advertising, and we do not send your name or email address with it.

Free accounts have a monthly number of smart suggestions. To enforce it, our server stores a count of requests per account for each month, without the purchase details.

4. Storage and security

Your data is stored in Google Firebase (Cloud Firestore) with server-side security rules so that people can only access their own household’s data. Data is encrypted in transit and at rest. A copy is cached on your device for offline use and can be protected with Face ID, Touch ID or a passcode lock.

5. Third-party services

• Firebase (Google): sign-in, data storage and sync, server functions and notifications
• RevenueCat: subscription and free-trial management
• TypeSafe: AI processing for smart suggestions, only with your permission
• Sign in with Apple and Google Sign-In: optional sign-in providers
• Apple App Store: downloads and payments, under Apple’s own policies

6. Data retention and deletion

Your data is kept while your account is active. When you delete your account (Settings → Delete Account), we permanently delete your sign-in account, your member record, and your income sources, savings accounts and commitments. If you are the last member of your household, its envelopes, transactions and the household itself are deleted too. Deletion is immediate and cannot be undone. Deleting your account does not cancel an App Store subscription; cancel it in your App Store settings.

7. Children’s privacy

Panda Budget is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal information, contact us and we will delete it.

8. Your rights

• Access: all your data is visible in the app
• Export: download your data as CSV (Premium)
• Correct: edit any transaction, envelope or account detail in the app
• Delete: use Delete Account in Settings, or contact us
• Withdraw AI permission: turn off Smart Suggestions in Settings

9. Changes to this policy

We may update this policy. Changes are posted on this page with a new effective date.

10. Contact

Questions about this policy or your data: sreerajtawork@gmail.com