Effective date: 14 October 2026
This policy covers the Byudge apps, account services, AI assistant, website and support, including use without sign-in.
1. Who we are
Amal Nuritdinkhodzhaev, an individual in the Kyrgyz Republic, is responsible for Byudge's processing of personal data. Address: Building 4/2, 5th Microdistrict, Bishkek, Kyrgyz Republic. Email: [email protected].
2. What we collect
| Category | Information |
|---|---|
| Financial records you enter | Accounts, balances, assets, debts, goals, transactions, currencies, dates, comments, categories, transfers, budgets, recurrences and settings |
| Sign-in | Google/Apple identifiers, name, email, Google profile-picture link, session IP/device information and sign-in history; Apple may supply a relay email |
| Assistant | Questions, chat context, answers, chat identifiers and timestamps |
| Purchases | Receipts or purchase tokens, subscription/product/status information and customer identifiers, also for purchases without Byudge sign-in. We never receive your payment-card details |
| Usage | Feature interactions, currencies, item types/flags, schedule identifiers, reminder times, purchase events and approximate IP-derived location |
| Device and diagnostics | Device/OS/app information, device and installation identifiers, Android advertising ID, crash reports, session/request/error logs and, on iOS, performance measurements |
| Support | Messages, contact details and anything you attach |
Usage and diagnostics are collected automatically. Analytics profiles can include your account ID, name and email; usage events never include amounts, account/category names, comments or question text.
Local tracking works without an account; cloud sync requires sign-in and active Pro. Even without sign-in, analytics, diagnostics, subscription and rate/version requests communicate externally. We do not access contacts, photos, precise location or bank logins.
Our website is delivered through Cloudflare, which processes request data to serve and protect it and, where enabled, count visits, without analytics cookies or fingerprinting.
3. How we use it
We use data to provide tracking, sync, reference rates, assistant answers, purchases and support; understand usage; diagnose problems; protect the service; and comply with law.
For EU/UK users, our legal bases are:
| Purpose | Basis |
|---|---|
| Account, sync and subscription services | Performance of our contract with you |
| Answering your AI questions | Performance of our contract with you |
| Usage analytics, diagnostics, support and security | Legitimate interests in understanding, improving and securing the service and helping users |
| Processing required by applicable EU/UK law | Legal obligation |
For users in the Kyrgyz Republic, the same purposes rest on the matching grounds of Article 79 of the Digital Code, including contract performance for requested assistant answers.
No law requires you to give us personal data. Account data is necessary for sync and the assistant, store purchase data for subscription access; without them those features cannot work. Ending Pro does not erase existing records.
Protection. We encrypt transmitted personal data and restrict system access through authentication and access controls. These are safeguards, not a guarantee against every incident.
4. The AI assistant
The assistant explains records; it gives no financial, investment, tax or legal advice, decides nothing for you, and can make mistakes.
The chat names Google (Gemini API) below the input and links to this policy. To answer, Byudge sends your question, chat context and relevant records: account/category details and identifiers, balances, debts, goals, amounts, currencies/rates, dates, budget figures and transaction/transfer comments.
We do not attach your sign-in name, email, user ID or token as identity fields for the model. This is not anonymization: your text and records can identify people. Do not include others' information without authority or unnecessary sensitive information about yourself.
Under our paid API arrangement, Google does not use this content to train its models or improve its products. Its abuse monitoring retains prompts, context and outputs for 55 days; flagged content can be reviewed by authorized staff. Processing may occur internationally (§5).
We store chats until you delete the chat or account; there is no inactivity expiry. Chat deletion removes the server chat; device cleanup is best-effort, so local copies may remain after a storage error. It does not erase provider safety copies or other devices.
5. Who receives your data
| Recipient category | Purpose and information |
|---|---|
| Cloud database/sign-in services | Account information, financial records, chats, settings and subscription status; primary database in Switzerland |
| AI provider Google (Gemini API); our server host in Switzerland | Questions, context, relevant records and technical processing |
| Subscription services; Apple/Google stores | Customer/purchase information, account identifiers and supplied email; billing, access and restoration |
| Analytics, crash and performance services | Usage/device/diagnostic information, purchase events, identifiers and profile/contact properties; advertising features disabled |
| Network, website and support-mailbox providers | Encrypted delivery of app and website traffic, site requests and correspondence |
The recipient and location notice names these providers and their transfer safeguards.
Recipients processing on our behalf are bound by data-processing agreements to equal protection. Apple and Google run their sign-in/store services under their own policies. We do not sell your data.
Byudge operates from Kyrgyzstan; providers process in Switzerland, the EU, the US and other locations listed in the recipient notice. Switzerland has EU/UK adequacy recognition; other transfers rest on EU Standard Contractual Clauses with UK and Swiss addenda or the EU-US Data Privacy Framework, and under Kyrgyz law on contract performance and those contractual safeguards (Digital Code Article 89). Copies are linked in the recipient notice.
6. How long we keep it
| Data | Retention |
|---|---|
| Local financial records | Until successful sign-out/account deletion or removal of app data. Deleting an item hides it while its contents remain stored |
| Synced records, including deleted items | Until account deletion or verified erasure; no inactivity purge |
| Chats | Until chat/account deletion; device cleanup limitations are in §4 |
| Account information and sign-in audit | Deleted with the account; sign-in audit records stay in platform logs for 1 day |
| Purchase/customer and identified analytics profiles | Until account deletion or a verified erasure request, including purchases without a Byudge login; store records are separate |
| Analytics events | Usage events up to 2 years; app-analytics user-level data up to 14 months. Profiles are retained as above |
| Crash/performance reports | Crashes 90 days; iOS performance events 30 days when IP-associated, 60 days when installation-associated or de-identified |
| AI-provider copies | Safety retention per §4, separate from chat deletion |
| Server and platform logs, backups | Technical records without question/answer text, overwritten as they fill and cleared at each release; database platform logs 1 day; any database backups at most 7 days |
| Support correspondence | While needed for your request and follow-ups; deleted on request |
On account deletion or a verified request, we delete the profiles tied to your account ID at our analytics and subscription services; installation-level diagnostic data expires within the periods above. Installation IDs do not make data anonymous; only statistics that identify no one may remain. OS backups are managed by your device provider.
7. Your rights and choices
- AI sharing: the assistant is optional. Stop sending questions to stop new requests; delete existing chats separately. This does not cancel billing or erase provider safety copies.
- Usage analytics: analytics and diagnostics run by default; the app has no analytics switch. You can object (below) and limit identifiers in device settings, for example by resetting or deleting the advertising ID.
- Deletion: use Settings → Profile → Delete account or the no-app request route. Cancel billing separately in the purchasing store; cancellation is not a condition of deletion.
- Access and portability: request access, correction, restriction or deletion from support, and where applicable a machine-readable copy or direct transfer. There is no in-app export; we cannot retrieve device-only records.
Your right to object: you may object, for reasons relating to your situation, to processing based on our legitimate interests. Contact support; we stop unless compelling grounds or legal claims override.
You can complain to [email protected] and to your data-protection authority. We verify identity proportionately and respond within applicable deadlines.
Tracking: we do not track you across other companies' apps or websites, show no ads, and keep advertising features in our analytics services disabled; those services act as our processors. Our website sets no tracking cookies and does not respond to Do Not Track signals, as there is nothing to switch off.
8. Children
Byudge is for people aged 18 or older. If we learn that a child supplied data contrary to this policy, we delete it as applicable law requires. Contact support if this happens.
9. Changes
We update the effective date and notify material changes. Before changing AI recipients or purposes, we disclose the change and obtain any required consent, including before replaying earlier chats.
10. Contact
[email protected] · Amal Nuritdinkhodzhaev, Building 4/2, 5th Microdistrict, Bishkek, Kyrgyz Republic.