Privacy Policy

Effective: November 9, 2026
App: BudgetPro (Android package com.lennoxdigital.budgetpro), by Lennox Digital
Contact: support@lennoxdigitallabs.com
Address: https://www.lennoxdigitallabs.com/apps/budgetpro/privacy/

BudgetPro is a budgeting app. It's built so that your budget stays with you: on your phone, under your control. This policy explains what BudgetPro stores, where, and how to delete it.

The short version

• Your budget lives on your phone: accounts, transactions, bills, paydays, budgets and rules. We can't see it.
• You don't need an account. If you choose to create one (with Google, Apple or your email), we store your email, an account ID and which subscriptions you've bought, on our server in the US.
• If you choose to link a bank (when this feature is available), we use Plaid to read your balances and transactions, read-only.
  • The key that allows this is kept encrypted on our server, never on your phone.
  • Your transactions are passed to your phone and not stored on our server.
• No ads, no tracking, no selling of data. Ever.
• You can delete everything from inside the app.

1. What stays on your phone

Everything you put into your budget is stored only on your device, in the app's private storage:

• accounts, transactions, categories and budgets
• bills, paydays and the rules BudgetPro learns
• your settings

This includes statement files you import (OFX, QFX, QIF or CSV). They are read on the phone and never uploaded.

Bill reminders, if you turn them on, are scheduled by your phone's own notification system. Their text (the bill's name and amount) is created on the phone and isn't sent to us or anyone else.

This data is not sent to us or anyone else. It leaves your phone only when you choose to:

• export a backup file
• export your transactions to a spreadsheet
• save or share a PDF report

You decide where those files go.

Uninstalling the app, or Settings → Data → Erase all data, deletes it from the phone.

2. The optional Lennox Digital account

You can sign in with a Lennox Digital account, shared by all Lennox Digital apps. It lets your subscription work in our other apps and on a new phone. If you sign in, we store:

• your email address. If you sign in with Google (or with Apple on iPhone), we receive the email address and the account identifier that provider gives us; we never see your Google or Apple password.
• an account ID we create for you
• your subscriptions: which product, which store, and when it renews or expires

Your budget is not stored in your account. The account is held by our backend provider, Supabase, on servers in the United States. Supabase acts as our processor.

3. Purchases

Subscriptions are sold and charged by Google Play (and the App Store on iPhone). We never see your card or payment details.

• We receive the store's receipt: which product you bought, its order or transaction id, and when it renews or expires. We use it to unlock Pro.
• Our server checks each receipt directly with Google Play or Apple and keeps the result (your purchase history) in our Supabase database in the United States. If you're signed in, it's linked to your account so Pro works in our other apps and on a new phone.
• To cancel a subscription, use your Google Play or App Store subscription settings. Deleting your account doesn't cancel it.

4. Linking a bank (optional; not available yet)

If you choose to link a bank or card account, BudgetPro uses Plaid Inc. to connect to it.

• You sign in with your bank on Plaid's screen, or on your bank's own website or app. BudgetPro never sees or stores your bank username or password. That step is covered by Plaid's End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy).
• What BudgetPro can read:
  • the accounts you choose to share: name, type, the last 2–4 digits, and balances
  • their transactions: date, amount, description, merchant and category
  • whether the connection is working
• What BudgetPro can't do: move money, make payments or transfers, or see your full account or routing numbers. We request read-only access only.
• Where it's kept:
  • Plaid gives us an access token for the connection. It is stored encrypted on our server (Supabase Vault), can be used only by our server, and is never stored on your phone.
  • On the server we keep the connection's details: bank name, account names and last digits, connection status, and when it last synced.
  • Your transactions and balances are passed through our server to your phone and are not stored on our server.
• Disconnecting. In BudgetPro, Linked banks → Disconnect. This tells Plaid to revoke the connection, deletes the access token and the connection details from our server, and lets you keep or delete the imported transactions on your phone.
  • You can also remove BudgetPro's access from your bank's website, or through Plaid Portal (https://my.plaid.com).
• Deleting your account disconnects every linked bank first, then deletes everything above.

5. What we don't do

• No advertising, and no advertising or analytics SDKs.
• We don't sell or rent your data, or share it for anyone's marketing.
• No location, contacts, camera, microphone or phone permissions.
• We don't use your financial data to train AI models. BudgetPro doesn't send your data to any AI service.

6. Security

• All network traffic uses HTTPS.
• Bank access tokens are encrypted at rest, and only our server functions can read them.
• Database rules let each account read only its own connection details. Only our server can change them.
• Data on your phone is protected by your phone's own security (screen lock and device encryption).

7. Keeping and deleting your data

<a id="delete"></a>
To delete your account and its data, open BudgetPro → Settings → Account → Delete account. This deletes your Lennox Digital account in every Lennox Digital app. You can also email support@lennoxdigitallabs.com from the address on the account; we'll delete it within 30 days. Store subscriptions have to be cancelled in the store.

8. Children

BudgetPro is for adults (18+). It isn't designed for children, and we don't knowingly collect data from anyone under 18. If you think a child has created an account, contact us and we'll delete it.

9. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or US state privacy laws such as the CCPA), you may have the right to:

• access, correct, export or delete your data
• object to or restrict processing

Most of this you can do in the app. For anything else, email support@lennoxdigitallabs.com. We don't sell personal information or share it for cross-context advertising.

10. Changes

If we change this policy, we'll update the date at the top. If a change is significant, such as turning bank linking on, we'll also tell you in the app.

11. Contact

Lennox Digital: support@lennoxdigitallabs.com