Privacy, in plain words.

Everything you add to Senbud (amounts, shops, budgets, receipt photos, splits) is saved on your own device. In the web version that means your browser’s local storage (IndexedDB). It is never stored on Senbud’s servers.

Senbud doesn’t ask for your bank login and doesn’t connect to your bank. You can export everything as a CSV at any time.

Because we don’t hold a copy, we can’t recover it for you. If you clear your browser data or lose your device, your Senbud data goes with it. Export a backup now and then.

If you join the waitlist, we store:

• your email address
• the feature you picked
• when you signed up, and when you confirmed your email
• your referral code, who referred you (if anyone), and how many people joined with your link

We use this only to send you early-access emails and to decide invite order: people who brought friends go first, then everyone else in the order they confirmed. We don’t sell it or share it with advertisers.

We send a confirmation email when you sign up. The link in it works for 7 days. We keep only a scrambled (hashed) copy of the link’s code, and delete it once you confirm. The email is sent through [TODO: email delivery provider].

Your IP address is used for a short time to stop the form being spammed. It isn’t saved with your signup.

Want off the list? Email privacy@senbud.com from the address you signed up with and we’ll delete your entry. Anyone you referred stays on the list; they just won’t be linked to you anymore. We aim to reply within [TODO: response time, e.g. 30 days].

AI features are off until you turn them on. Without them, nothing you add ever leaves your device.

When you use them, only what that request needs is sent: the photo or line you’re adding, plus a short summary of this month (for example, how much is left to spend). It goes through Senbud’s server to an AI model provider (currently through OpenRouter) to get an answer, and comes straight back to your device.

Senbud doesn’t store or log what you send. The AI provider handles it under its own privacy terms. [TODO: link OpenRouter’s and the chosen model provider’s data policies]

The Senbud website uses no cookies. To see how many people visit, it may use Plausible Analytics, which counts page views and button clicks (like “Join the waitlist”) without cookies and without building a profile of you. It doesn’t collect your name or email.

Your browser keeps two small things on your device: the referral code from a friend’s link (until you close the tab) and your best ending in the Budget Dungeon game. Neither is sent to us, except the referral code when you join the waitlist.

Some parts of Senbud aren’t built yet. When they are, this page will be updated first. As planned:

• Payments will be handled by a payment provider (Polar on the web[TODO: confirm; app stores may use their own billing]). They hold your payment details, not us. We keep only a scrambled copy of your licence key.
• Reminders (push notifications) would need us to store a push address for your device, plus the reminder text and time your device has already worked out. Never your spending.
• Sync between devices is planned as encrypted sync. If we build it, this page will explain exactly what is stored and who can read it before it’s switched on.

Senbud is run by [TODO: legal name and address]. Our servers are in [TODO: hosting region].

You can ask to see, correct or delete what we hold about you (which is only the waitlist entry above). Email privacy@senbud.com.

If this page changes in a way that matters, we’ll say so on this page and, if you’re on the waitlist, by email.