Privacy Policy

Buxhet is a personal budget tracking app at buxhet.app. It is operated by Ağış Aydın Göksuna, based in Komuna e Parisit, 1019 Tirana, Albania ("we", "us"). We are the controller of the personal data described in this policy.

For anything about your personal data, write to support@buxhet.app. Other ways to reach us are on the Contact page.

We keep what the app needs in order to work, and a few details about you that you give us at sign-up.

• Account data. Your email address and your password. The password is stored only as a one-way hash, so we cannot read it. We also record when the account was created, when it was last used and, if it has been suspended, since when.
• Profile details. Your first and last name, your country and your date of birth, which we ask for when you sign up. You can also tell us your phone number and how you heard about Buxhet; both are optional. We also record whether you agreed to receive marketing emails, and when. You can see and change all of this on the Account page of the app.
• The records you enter. Wallets and their opening balances, transactions (date, type, amount, category, description), categories, the names of the people or companies you borrow from or lend to, and recurring payments. You type all of it yourself. Buxhet does not connect to your bank and never sees card or bank account numbers unless you write them into a text field, which we ask you not to do.
• Sign-in data. A record of each active session (a hash of the session token and its expiry date). After a failed sign-in we keep the email address that was tried and the IP address for about 15 minutes, to limit password guessing.
• Feedback. When you send feedback from the app we keep your message, the page you sent it from, your browser type and window size, and the screenshot if you chose to attach one. You see the screenshot before sending and can hide the amounts in it.
• Technical logs. Our server may record the IP address, time and address of requests for a short period, for security and troubleshooting.

We do not use analytics or advertising trackers, we do not track what you do on other sites, and we do not buy data about you from anyone.

• To provide the app: creating your account, signing you in, storing and showing your records, sending emails about your account. Legal basis: performing our contract with you (the Terms of Use).
• To check that you may use Buxhet: your date of birth shows that you are at least 18, as the Terms of Use require. Legal basis: performing our contract with you.
• To understand who uses Buxhet and to plan our marketing: we look at profile details (country, age group, how people heard about us) mostly as totals, to decide where and how to make Buxhet known and which languages and features to work on. Legal basis: our legitimate interest in growing Buxhet. You can object at any time by writing to us.
• To send you marketing messages: news, tips and offers about Buxhet, by email. Only if you ticked the box for it at sign-up or on the Account page. Legal basis: your consent, which you can withdraw at any time on the Account page or by writing to us; that does not affect messages about your account. We will not send marketing by phone or SMS without asking you separately first.
• To keep the app secure: limiting sign-in attempts, investigating abuse, keeping backups. Legal basis: our legitimate interest in a safe and reliable service.
• To fix problems and improve the app: reading and answering the feedback you send. Legal basis: our legitimate interest in improving Buxhet.
• To meet legal obligations, when a law requires us to keep or hand over certain data.

We do not sell your data, we do not share it with advertisers, and we do not make automated decisions about you. Your financial records are never used for marketing.

Only the service providers that Buxhet runs on receive personal data, and only to do their job for us:

• Contabo GmbH (Germany): the server that hosts the app, its database and the backups, located in the European Union.
• Resend (Plus Five Five, Inc., United States): delivery of the emails the app sends. It receives the recipient address and the content of the email. A feedback notification sent to us contains your message and the screenshot, if any.

We may also disclose data when the law obliges us to, or to a successor if Buxhet is transferred to a company, which would remain bound by this policy.

Your records are stored on servers in the European Union. Buxhet is operated from Albania, and our email provider is in the United States, so some personal data is accessed from or sent to countries outside the European Economic Area. Where that happens we rely on safeguards recognised by data protection law, such as the European Commission's standard contractual clauses.

• Your account and records: for as long as your account exists. When the account is deleted, they are deleted with it, and so is the feedback you sent. A suspended account is kept, with its records, until it is reactivated or deleted.
• Profile details: for as long as your account exists. If you start signing up but never confirm your email address, the details you typed are deleted within about an hour.
• Sessions: until you sign out, or 30 days after signing in at the latest.
• Failed sign-in attempts: about 15 minutes.
• Feedback: until it has been handled, and no longer than 24 months.
• Backups: deleted data can remain in backups for up to 30 days before it is overwritten.

Under the GDPR and the Albanian Law on Personal Data Protection you have the right to:

• get a copy of the personal data we hold about you;
• have incorrect data corrected (you can edit most of it yourself in the app);
• have your account and data deleted;
• receive your records in a commonly used, machine-readable format;
• withdraw your consent to marketing emails at any time, on the Account page or by writing to us;
• object to, or ask us to restrict, processing that is based on our legitimate interests, including the use of your profile details for marketing;
• complain to a data protection authority: in Albania the Information and Data Protection Commissioner (idp.al), or the authority of the EU country you live in.

To use any of these rights, write to support@buxhet.app from the email address of your account. We answer within one month, and it costs you nothing. When you ask for deletion, we remove the account together with all its records; it cannot be restored afterwards.

Connections to Buxhet are encrypted (HTTPS). Passwords are stored as hashes, session cookies cannot be read by scripts, the database is not reachable from the internet, and access to the server is limited to its operator. For support and for the requests described above, the operator uses an administration page that shows your account and profile details, how many records you have and the feedback you sent. It does not show your wallets or transactions. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authorities as the law requires.

Buxhet is meant for adults. We ask for a date of birth at sign-up and do not open an account for anyone under 18, and we do not knowingly collect data from them. If you believe a minor has opened an account, tell us and we will delete it.

When we change this policy we update the date at the top. If a change affects how we use your data in an important way, we tell you by email or in the app before it takes effect.