Your privacy with Bucki

Bucki Budget is a household money-management app operated by Yohann Blanchard. This policy explains the personal information processed when you use Bucki, including optional banking, subscription, and advertising features. Contact support@bucki.app with privacy questions or requests.

Information you provide

We process account information such as your email address, name, phone number if provided, account identifier, sign-in details, profile settings, and any profile photo you upload. Uploaded profile photos are served using public URLs; do not upload a photo you need to keep private. We also process information you enter or share in a household: transactions, income, expenses, budgets, balances, bills, savings goals, categories, notes, and other household content. Support messages contain the information you choose to send. Avoid including passwords or bank credentials in support messages.

Connected accounts and purchases

If you choose to connect a supported financial institution, Plaid helps establish the connection and provides the account and transaction information needed for bank-sync features, such as institution and account details, balances, transaction amounts, dates, merchants, and categories. Availability depends on your plan and supported institutions. Review Plaid’s privacy policy when connecting an account.

Apple and RevenueCat process in-app subscriptions, purchase records, app user identifiers, and subscription entitlements. Web billing may use RevenueCat and Stripe. Payment providers process payment credentials; Bucki uses purchase and entitlement information to provide paid features, restore purchases, and handle billing support.

Usage, diagnostics, and advertising

We process app interactions, device and app information, network information such as IP addresses, and crash and performance reports to operate and secure Bucki. Supabase provides account and data infrastructure, and Cloudflare hosts and protects web services. Optional web analytics may use Sentry for error/performance monitoring, Microsoft Clarity for product interaction diagnostics, and GrowthBook for feature experiments. These optional web services are disabled until you allow analytics in the privacy choices control. On mobile, optional Sentry crash, performance, session, and other diagnostic reporting starts only after you allow telemetry and stops when you withdraw that choice.

Ad-supported mobile features use Google AdMob. Web advertising may use Google AdSense, Google Publisher Tags, and related Google advertising services. These services may process device or browser identifiers, approximate location derived from IP address, ad views and interactions, app interactions, crash reports, performance information, and other diagnostics for advertising, measurement, analytics, and fraud prevention. Optional web advertising is disabled until you allow ads in the privacy choices control. Where permission or a lawful advertising choice is granted, advertising partners may combine data with information from other companies’ apps or websites to personalize or measure ads. See Google’s privacy policy and AdMob’s data disclosure.

You can decline tracking through the iOS permission prompt and change your choice in Settings → Privacy & Security → Tracking. Declining tracking does not prevent all operational, contextual-advertising, or diagnostic processing. Available ad-consent and personalization controls depend on your region and app settings.

How information is used and shared

We use information to authenticate you, maintain your household, sync and display financial records, calculate budgets and insights, manage subscriptions, provide requested features and support, prevent abuse, and improve reliability. Information shared with a household is visible to its authorized members according to their access. The optional ChatGPT connection sends the requests and Bucki information needed to answer them to OpenAI; see the details below.

Service providers receive information needed to perform their functions, including hosting, authentication, banking connectivity, purchases, diagnostics, and advertising as described above. We may disclose information when required by law, to protect users and the service, or in connection with a business transfer.

Optional ChatGPT connection

If you connect Bucki to ChatGPT and allow read-only access, Bucki sends OpenAI, the company that operates ChatGPT, information from the one household you select to answer your requests. Depending on the tool you use, this can include visible settled transaction descriptions, dates, amounts, currencies, types and category labels; spending and income summaries; budget names, periods, limits and available progress; active saved expense-bill names, amounts, currencies, due dates and frequency for the next 1–90 days; and savings-goal names, targets, recorded manual progress and target dates. A transaction search can also send the search phrase from your request, limited to 100 characters. The connection returns only information visible to you in the selected household, including your private and shared activity; it does not expose another member’s private transactions. Some budget progress and bank-linked goal progress are unavailable, and Bucki does not convert currencies or refresh a bank connection for ChatGPT.

OpenAI receives the requests and app responses directly. OpenAI is not Bucki’s service provider for this connection. OpenAI’s App Developer Terms permit it to use and store app responses; the terms and settings for your ChatGPT account or workspace govern how OpenAI handles conversation requests and responses. Bucki does not control the retention of prior ChatGPT messages or app responses. Review OpenAI’s App Developer Terms and ChatGPT data controls. This connection is read-only and expires no later than your current Bucki sign-in session, normally within one hour. Disconnect or remove Bucki in ChatGPT to stop future tool access after revocation takes effect. This does not delete data already sent or messages and app responses already present in your ChatGPT conversation. Use ChatGPT’s controls for that conversation data.

Storage and retention

Information may be processed on servers outside your province or country, where privacy laws may differ. We retain account and household information while it is needed to provide the service, and retain information as necessary for security, dispute resolution, purchase records, and legal obligations. Backup copies and provider records may have separate retention periods. Security measures reduce risk, but no online service can promise absolute security.

Your choices and requests

You can review and edit information through the app, manage household membership, and use the available banking controls to manage connected accounts. Device settings control permissions such as notifications, photos, camera, and tracking. Only grant optional permissions when you want the corresponding feature. European users can withdraw optional analytics or advertising consent at any time using Privacy choices; withdrawal does not make prior processing unlawful and does not affect processing needed to provide an account or comply with law.

To request access, correction, a copy of your data, withdrawal of consent, or deletion, email support@bucki.app from your account email. We may need to verify your identity. You can also request account deletion in the app. The deletion flow requires confirmation and may require fresh authentication, including Apple reauthorization for an Apple-linked account. Once confirmed, access is blocked and the request is queued for background processing; a pending status does not mean erasure has finished. You do not need to email us to complete an in-app request. Contact support if a request remains pending or you need help.

Deletion removes your personal account information and private data and disconnects linked bank access. Shared household records needed by remaining members are preserved with the departing member’s identity removed. If you own a household with remaining members, ownership passes to an active administrator, or otherwise the longest-standing active member; this does not transfer billing ownership. Backups, provider-held purchase records, and information needed for legal or security obligations may have separate retention periods. Deleting an app or account does not automatically cancel an App Store subscription; manage subscriptions in your Apple account settings.

Depending on your location and the legal basis for a processing activity, you may also have rights to restrict or object to processing, request portability, and complain to your local data-protection authority. We respond to verified requests within the period required by applicable law. International transfers and provider-specific retention periods can vary; contact us for the current processing and retention details for your request.

Children and policy changes

Bucki is a general household-finance service and is not directed to children under 13. If you believe a child has provided personal information without appropriate authorization, contact us. We may update this policy at any time as features or data practices change. The effective date above identifies the current version. Updates apply prospectively and do not authorize processing that occurred before the updated version took effect. When a change materially affects how information is processed, we will provide notice and request renewed consent before that processing begins where required. You can change or withdraw applicable consent at any time; a withdrawal stops future processing that depends on that consent once it takes effect, but does not undo information already sent to another service.