Privacy policy

What we process about you, why, for how long — and what rights you have.

BManager is a personal budget manager. Only you see your financial records — we do not sell them, do not pass them to third parties for marketing, and do not use them for profiling or automated decision-making.

1. Who is the controller

The controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 (GDPR) is:

Mgr. Patrik Porubän
Data protection contact: porubanpatrik@gmail.com

2. What data we process and on what legal basis

Data category	Purpose	Legal basis	Retention period
E-mail, password (as a hash), e-mail confirmation	Creating and securing the account, signing in	Performance of a contract (Art. 6(1)(b))	For as long as the account exists
Profile — name, bio, picture, city, country, website, date of birth	Tailoring the app to your preferences	Consent (Art. 6(1)(a)) — the fields are optional	Until you delete them or the account is closed
Financial records — transactions, budgets, savings goals, cash, debts and loans, shopping list, price list and transaction rules	Providing the service itself	Performance of a contract (Art. 6(1)(b))	For as long as the account exists; trashed items are deleted after 30 days
App settings — currency, theme, text size	Keeping your settings across devices	Performance of a contract (Art. 6(1)(b))	For as long as the account exists
Google sign-in — e-mail address, name from the Google account and its stable identifier	Signing in without creating another password	Performance of a contract (Art. 6(1)(b)) — processed only if you choose this option	Until the Google account is unlinked or the account is closed
Signed-in devices — browser and system type, truncated IP address, last activity time	An overview of devices with access to the account and the ability to sign them out remotely	Legitimate interest (Art. 6(1)(f)) — control over your own account	Until sign-out; ended sessions are deleted after 30 days
Connected applications — granted permissions and issued access tokens	Access to your data on your behalf by an app you connected yourself (e.g. an AI assistant)	Consent (Art. 6(1)(a)) — given on the confirmation screen when connecting	Until the app is disconnected; invalid tokens are pruned continuously
Security records — sign-ins, password changes, truncated IP address, browser type	Protecting the account against unauthorised access, detecting incidents	Legitimate interest (Art. 6(1)(f)) together with the duty to secure data (Art. 32)	365 days
Consent records — what, when, from which network	Demonstrating that consent was given	Legal obligation (Art. 7(1))	3 years from the withdrawal of consent
E-mail address for newsletters	Information about news in the app	Consent (Art. 6(1)(a)) — withdrawable at any time	Until consent is withdrawn
Monthly summary e-mail — total income and expenses, budget and goal status for the past month	An overview of your finances without opening the app	Performance of a contract (Art. 6(1)(b)) — switch it off under Settings → Notifications	Not stored — assembled fresh from your records each time
AI features — provider, model, encrypted API key and the data sent to the provider (transaction name and amount, list of budgets, month summary with the largest expenses, your questions to the assistant)	Transaction autofill and a conversation with the AI assistant about your month	Consent (Art. 6(1)(a)) — given by connecting your own key and withdrawn at any time by disconnecting it	Settings until disconnected or the account is closed; the data sent is not kept by us and is governed by the provider's own policy
Feedback — rating, text, optional contact e-mail and the e-mail of the account it came from	Improving the app and replying to your request	Legitimate interest (Art. 6(1)(f)) — you send the feedback yourself	2 years from sending or until the account is closed

3. Cookies and server logs

The app uses strictly necessary technical cookies only — the sign-in cookie (which keeps you signed in) and the antiforgery cookie that protects forms against forged submissions. The app would not work without them, so under EU law they require neither consent nor a cookie banner. We store no other cookies.

For operations and troubleshooting the server keeps technical logs (request time, requested address, result). They contain neither your account identifier nor the content of your records.

4. What we do not do

We use no third-party advertising or analytics cookies.
We do not sell or rent personal data.
We do not profile you and make no automated decisions with legal effect (Art. 22).
Your financial records are stored with our hosting provider in the EU and we do not transfer them outside the European Economic Area ourselves. The only exception is the AI features you enable with your own key — then exactly what section 5 describes goes to the provider you chose.

5. Recipients of the data

The data is processed by us and by our hosting and database provider, who acts as a processor under Art. 28 GDPR and is bound by a data processing agreement. For e-mails (account confirmation, password reset, notifications and the monthly summary) we use an e-mail service provider based in the EU. We disclose data to public authorities only where the law requires it.

AI features with your own key

AI features stay off until you connect your own API key under Settings → AI from a provider of your choice (for example Anthropic, OpenAI or Google, or your own server). We store the key encrypted and never display or export it. When you use an AI feature, our server sends the chosen provider only what that task needs: for transaction autofill the transaction name, amount and date, your list of budgets and a few earlier transactions as "name → budget"; for the analysis and the assistant a summary of the month and the month before (total income and expenses, budget status and the largest expenses with their names and dates) plus the questions you type to the assistant. We never send your e-mail, name or your full transaction history.

The AI provider acts as an independent controller under its own policy and the agreement you entered into with it when obtaining the key. Most of them are based in the USA, so this is a transfer outside the EEA — it happens solely on the basis of your explicit consent (Art. 49(1)(a)), which you give by connecting the key and withdraw at any time by disconnecting it. We do not keep the data sent. If you do not want your financial data to leave the EEA, leave the AI features off or use an EU-based provider or your own server.

Signing in with Google

If you choose to sign in with Google, the verification itself happens at Google Ireland Limited, which acts as a separate controller there and follows its own privacy policy. Google learns from us that you are signing in to BManager; in return it passes us your e-mail address, the name on the account and a stable account identifier. We do not give Google your financial records. During this verification data may also travel outside the EEA — Google covers that with standard contractual clauses under Art. 46 GDPR. Signing in with Google is optional; you can create the account with a password instead and unlink it any time in Security → Linked accounts.

Applications you connect yourself

BManager lets you connect a third-party application (for example an AI assistant) so it can access your data on your behalf. Such a connection is created only after your explicit confirmation on the consent screen, where you see the scope of access the app is requesting. The operator of the connected app handles the data it receives under its own policy — we have no control over that, so connect only applications you trust. You can see connected applications and disconnect them in Security → Devices. Disconnecting immediately invalidates every token the application received.

6. Your rights

Under the GDPR you have the following rights, and you can exercise all of them in the app or by e-mail:

Right of access (Art. 15) — Data and privacy shows an overview of everything we hold about you.
Right to rectification (Art. 16) — edit your profile details in the Account section.
Right to erasure (Art. 17) — deleting the account removes all your data.
Right to restriction of processing (Art. 18) — write to our contact e-mail.
Right to data portability (Art. 20) — download a complete JSON export in one click.
Right to object (Art. 21) — against processing based on legitimate interest.
Right to withdraw consent (Art. 7(3)) — at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing before it. It also covers access by connected applications.

7. Data security

We have adopted appropriate technical and organisational measures under Art. 32 GDPR:

Encrypted transport (HTTPS with HSTS) and security headers including a Content Security Policy.
Passwords stored only as a salted hash, never in readable form.
Optional two-factor authentication and temporary account lockout after repeated failed attempts.
A log of security events you can review in the Security section.
API rate limiting and an ownership check on every access to data.
Regular backups with the ability to restore.
The account overview used to administer the service is reachable only by an account with an explicitly granted permission, holds only counts and details identifying the account, and never the content of your records.

Should a personal data breach nonetheless occur with a likely high risk to your rights, we will inform you without undue delay (Art. 34 GDPR) and report the incident to the supervisory authority within 72 hours (Art. 33).

8. Closing the account and erasure

You close the account in Data and privacy. All your records including server backups are removed immediately and irreversibly. We recommend downloading a data export first, because recovery after erasure is not possible.

Once the retention periods in the table above elapse, an automated job running once a day deletes the data — the periods are not just a promise in the text.

9. Complaint to the supervisory authority

If you believe that our processing of your data breaches the GDPR, you have the right to lodge a complaint with the supervisory authority (Art. 77): Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, statny.dozor@pdp.gov.sk.

10. Changes to this policy

For a material change we raise the document version and ask you to accept it again at your next sign-in. We keep the older versions so it is clear which wording you agreed to and when.

This is an informative translation. The Slovak wording is the binding one.