Privacy Policy for SuppaBudget

1. Information We Collect and How We Use It

A. Financial Data (Stored Locally Only)

The Application provides tools for logging transactions, managing category budgets, and tracking portfolio history.

• What is collected: Ledger entries (names, dates, currency categories, transaction costs, and actual amounts)[cite: 1].
• Where it lives: All financial inputs are stored locally on your device via secure browser storage mechanisms (localStorage)[cite: 1].
• Developer Access: We do not transmit, sync, or copy your transaction logs to our servers[cite: 1]. We have zero visibility and zero access to your financial information[cite: 1].

B. Account Authentication and Profile Data

To provide secure account access and sync premium user status, the Application utilizes Supabase as a third-party identity management platform[cite: 1].

• Information collected: When you register or log in, Supabase processes your email address, display name, and optional avatar/profile picture URL[cite: 1].
• Usage: This metadata is used exclusively to personalize the app interface and authorize your secure access to premium features[cite: 1].

C. M-Pesa SMS Text Processing (Local Parsing)

The Application features an automated transaction parsing box (mpesa-paste-box) where you can voluntarily paste transaction SMS text confirmations to expedite manual data entry[cite: 1].

• Processing standard: This text parsing happens entirely on your local device thread[cite: 1]. The pasted text is instantly scrubbed for values (vendor, transaction cost, and amounts) locally[cite: 1].
• Data Isolation: The raw SMS text string is never uploaded to any backend database or transmitted across the network[cite: 1].

2. Third-Party Services and Sub-Processors

To facilitate user authentication and handle subscription features, the Application securely communicates with the following platforms[cite: 1]:

• Supabase Auth & Database: Handles secure user onboarding, session persistence, and verifies the premium subscription status (is_premium) linked to your unique account identifier[cite: 1].
• Netlify Functions: The Application forwards initialization metrics safely to serverless functions (/initiate-tuma) purely to securely request and cross-reference mobile payment states (such as M-Pesa) without collecting extraneous personal files[cite: 1].

3. Data Retention and Deletion Rights

Because you retain absolute custody of your financial metrics, you control how they are maintained[cite: 1]:

• Local Financial Data Wiping: You can permanently purge every transaction, budget setup, and portfolio configuration directly from your device at any point using the built-in Reset Data mechanism within the app settings[cite: 1].
• Account Deletion: If you wish to permanently delete your profile registration, email records, and premium billing links, you can request an account removal through standard authentication configurations[cite: 1] or by submitting a direct request below.

4. Security of Your Data

We employ industry-recognized safeguards to protect your identity profiles via verified Supabase client libraries[cite: 1]. Because your local device is the exclusive repository for your transaction ledgers, the integrity of your personal budgeting data heavily relies on the physical security of your smartphone or mobile hardware[cite: 1]. We highly advise implementing standard device security protocols (PIN, biometrics, or passwords)[cite: 1].

5. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to align with rolling software releases or shifting regulatory frameworks[cite: 1]. We will notify you of any structural revisions by updating the "Last Updated" date at the top of this document[cite: 1].

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy, or wish to manually request data deletion, please contact our support team[cite: 1]: