Privacy Policy

Who we are

Envelope Budget by Vima ("Envelope Budget", "we", "us") is a budgeting app for iOS, Android, and the web, run by 30 South LLC, [PLACEHOLDER: mailing address]. This policy explains what we collect, why, how long we keep it, and the choices you have. Questions go to support@vimabudget.com.

What we collect

Your account

• Your email address.
• Your password. Our sign-in provider stores it only as a one-way hash, so no one, including us, can read it.
• Your authenticator, if you set up two-step verification: the secret your authenticator app shares with us so we can check its codes, a name like "Authenticator 1", and when codes were checked.
• Email codes we send to confirm your address or reset your password. They expire after 15 minutes.

Your budget

What you enter: groups, envelopes, transactions you add (description, amount, date), how you split them, and your rules (keywords that sort imported transactions into envelopes).

Bank data through Plaid

If you link a bank, we receive and store:

• The bank's name and Plaid's id for it, the connection's status, and when it last updated.
• For each checking, savings, cash management, or credit card account: its name, the last few digits of the account number as the bank reports them, its type, and its current balance (or available balance when the bank gives no current balance).
• Posted transactions: the merchant name or description, amount, date, Plaid's id for the transaction, and which account it came from. Plaid's spending category is used at import to pick an envelope, and isn't stored. Pending transactions aren't imported until they post.
• For transactions already counted in an account's starting balance: the description, amount, and Plaid's id, so we can correct the balance if the bank later changes or removes one.
• Plaid's ids for your bank connection and accounts, and an access token that lets us fetch updates. The token is stored encrypted and is never sent to your devices.

We don't receive your bank username or password, your full account or routing numbers, or any account types other than those above.

Security and technical information

• For each signed-in session: your IP address, your browser or device type, and when you signed in. Our sign-in provider also keeps a security log of sign-ins and account changes, with your email and IP address.
• Standard logs kept by our hosting providers: IP addresses, the requests made, times, and error codes. These logs never include passwords or bank access tokens.
• On your device, your sign-in session. On iPhone, iPad, and Android it's encrypted with a key kept in the device's secure storage. On the web it's kept in your browser's local storage.
• A record of bank links, unlinks, and account deletions, kept for security (see below).

Messages you send us

If you email us, we keep your message and our reply.

What we don't collect

No location, contacts, photos, camera, microphone, or advertising id. The app has no analytics, advertising, or tracking tools, and we don't use cookies. Apple and Google may share download statistics with us, and crash reports if you've agreed to share them with app developers, under their own policies.

This website

This website (www.vimabudget.com) doesn't use analytics, advertising, or cookies. Our hosting provider keeps the standard logs described above. Images in blog posts load from cms.vimabudget.com, the content system that runs our blog, which keeps standard logs of those requests.

How we use Plaid

We use Plaid Inc. ("Plaid") to connect to your bank. When you link a bank, you sign in to it inside Plaid Link, which Plaid runs. Plaid collects your login and your account data and passes us the data listed above. By linking, you agree to Plaid's handling of your data under the Plaid End User Privacy Policy.

We send Plaid a random id for you, not your name or email. When you unlink a bank or delete your account, we tell Plaid to remove the connection, which stops it from collecting more data for us. You can also see and manage your Plaid connections at Plaid Portal. Plaid Link may also collect information about your device, under Plaid's policy.

How we use your information

• To run the app: show your envelopes and balances, import transactions, and keep your devices in sync.
• To keep your account secure: sign-in, two-step verification, security emails, and limits that stop abuse.
• To answer your messages and requests.
• To meet legal obligations.

We don't sell your information or share it for advertising. We don't use it for advertising, profiling, or anything else unrelated to running the app.

Who we share it with

Only with service providers that help us run the app, and only for that purpose:

• Supabase: our database, sign-in, and server functions. It stores all of the data above in the United States [CONFIRM: region of the production Supabase project], and sends our account emails today.
• Plaid: bank connections, as described above.
• Vercel: serves the web app's files and this website, and sees the requests your browser makes to load them.
• Apple and Google: distribute the iOS and Android apps.

Planned: when we add subscriptions, RevenueCat will handle them [CONFIRM: on the web, through RevenueCat Web Billing and Stripe], and we'll move account emails to Amazon Simple Email Service (Amazon SES). We'll update this policy before either one receives your information. We also use tools such as Expo and GitHub to build the app. They don't receive your information.

We may disclose information when the law requires it, such as a valid court order, or to protect our users or the service from fraud or abuse. If the business is ever sold or merged, we'll tell you before your information moves, and you can delete your account first.

How long we keep it, and how to delete it

We keep your account, budget, and bank data while your account is open.

• Unlinking a bank deletes its accounts and connection right away and tells Plaid to remove the connection. Transactions already imported stay in your budget until you delete your account.
• Deleting your account (Settings, then Delete account) deletes your account, budget, transactions, linked banks, authenticators, and sessions right away. We tell Plaid to remove your bank connections at the same time. If Plaid can't be reached, we keep retrying automatically until it confirms. We keep only the encrypted token needed to do that.
• By email: write to support@vimabudget.com from your account's email address, and we'll delete your account within 30 days.

A few records stay for a limited time after you delete your account:

Backups are used only to recover from a disaster, and they are deleted on a schedule.

[PENDING: purge jobs not built yet, SwiftBudget todo 117-118]

Security

• All connections use encryption (HTTPS/TLS), and our database is encrypted at rest.
• Bank access tokens are encrypted separately, and every use of one is logged.
• Two-step verification with an authenticator app is required before you can link a bank, and is enforced by our database, not just the app.
• Database rules make sure each user can reach only their own data.
• The administrator accounts that run the service are protected with two-step verification.

No system is perfectly secure. If a breach affects your information, we'll tell you without unreasonable delay and as the law requires. More detail is on our security page.

Your rights and choices

Wherever you live, you can:

• Know and access: ask what we hold about you and get a copy in a common format.
• Correct: change your budget data in the app, or ask us to fix anything else.
• Delete: delete your account in the app, or ask us by email.
• Unlink: remove a bank at any time in the app.

Email support@vimabudget.com from your account's email address. We'll answer within 30 days and may ask you to confirm the request from that address. You can use an authorized agent; we'll ask for proof that they act for you. If we turn down a request, we'll explain why, and you can reply to ask us to reconsider. We won't treat you differently for using these rights.

California residents

The California Consumer Privacy Act, as amended by the CPRA, gives you the rights above. In plain terms:

• In the past 12 months we collected: identifiers (email, user id, IP address); financial information (bank account names, last digits, balances, transactions); account credentials (your email, and your password stored only as a hash); and technical information (device and browser type, logs).
• Some of this is "sensitive personal information": your account login and financial account information. We use it only to provide the service, so there's nothing to limit.
• Sources: you, your devices, and your bank through Plaid. Purpose: running the app and keeping it secure. Disclosed to: the service providers listed above, for those purposes only.
• We don't sell or share personal information, and haven't in the past 12 months. Because we don't, we treat browser privacy signals like Global Privacy Control as already honored.
• How long we keep each kind of information is described above.

Children

Envelope Budget isn't directed to children under 13, and we don't knowingly collect information from them. You must be at least [DECIDE: minimum age, such as 18] to use it. If you believe a child has given us information, email us and we'll delete it.

Where the service is offered

Envelope Budget is meant for people in the United States, and your information is stored in the United States. [DECIDE: the countries where the app is offered. If outside the US, add the rights that apply there, such as those under the GDPR.]

Changes to this policy

We'll post any change on this page and update the effective date. If a change is significant, we'll tell you in the app or by email before it takes effect.

Contact

30 South LLC
[PLACEHOLDER: mailing address]
support@vimabudget.com