Legal

Privacy Policy

Last updated: September 12, 2026

In short

The Budwisea app — on both iOS and Android — collects no personal data. Your financial data stays exclusively on your device. We operate no app servers, no analytics, no advertising and no accounts. The app makes no network calls with your data — there is nothing to transmit, so nothing can leak.

The only outgoing links in the app are the "Guide" and "Contact" buttons in the More tab, which hand off to your system browser or mail app; when you tap them, you leave the app and open a standard web page or email draft — Budwisea itself does not fetch anything.

This policy also covers the few places where data is processed around the app — this website, email support, the App Store / Google Play purchase, and device backups you control — so you know the complete picture.

Controller

Florin Kämpfer
Sunnhalde 19, 3365 Grasswil, Switzerland
Email: hello@budwisea.com

This policy is governed by the Swiss Federal Act on Data Protection (revFADP). Where the EU General Data Protection Regulation (GDPR) applies to users in the EU/EEA, the information below covers its requirements as well.

Data in the app

We process none. Everything you enter into Budwisea — first name, income, expenses, savings goals, accounts, labels, settings — is stored locally on your device (localStorage inside the app's WebView sandbox, protected by the iOS or Android app sandbox and your device's encryption).

We recommend protecting your device with a passcode and using the app's biometric lock (Face ID / Touch ID on iOS, fingerprint or face unlock on Android) so this local data is protected if your device changes hands.

Device backups (iCloud / Google Drive / computer)

If you use your platform's device backup features, your device may include Budwisea's local data in your own backup, under your own account:

That data goes to Apple or Google respectively as your backup provider — not to us.

Biometric unlock (Face ID / fingerprint)

When you enable biometric unlock, Budwisea uses the operating system's own framework — LocalAuthentication on iOS, BiometricPrompt (AndroidX Biometric) on Android. Neither the biometric template nor the authentication result is stored or transmitted by Budwisea. The OS only reports a success/failure signal to the app.

Backup / Export

You can export your data under More → Export backup as a local JSON file via the system share sheet — you decide where the file goes (Files, iCloud Drive, Mail, AirDrop on iOS; Files, Google Drive, Gmail, nearby share on Android). The file is unencrypted; choose its destination with the same care as any financial document. Storage location is entirely your responsibility.

Purchases (Apple App Store / Google Play)

Budwisea is sold through the Apple App Store and the Google Play Store. The purchase — including payment data, billing address and receipt — is processed exclusively by the respective store as the merchant:

We never receive your name, payment details or any other personal purchase data from Apple or Google.

Advertising, tracking, analytics

We integrate no ad networks, no analytics SDKs (no Firebase, no Google Analytics, no Meta SDK, no AppsFlyer, no Adjust) and no trackers inside the app — on either iOS or Android.

Store analytics (Apple / Google)

Apple and Google provide us as developer standardised, aggregated and anonymised metrics via App Store Connect and the Google Play Console respectively — such as number of downloads, country breakdown, store impressions, active sessions, crash reports and revenue. This data is at store level and does not allow identification of individual users. Scope is defined by the respective store; see Apple App Store Privacy and the Google Privacy Policy. You can turn off sharing with developers in iOS under Settings → Privacy & Security → Analytics & Improvements, and in Android under Settings → Google → Usage & diagnostics (and, per app, under Play Store → Settings → Play Store data sharing where available).

This website (budwisea.com)

This website is static: it sets no cookies, runs no analytics and loads no third-party scripts or fonts. It is hosted on Cloudflare Pages (Cloudflare, Inc., USA / Cloudflare EMEA). When you visit, Cloudflare technically processes your IP address, user agent and requested URLs in server logs to deliver the site and protect it against attacks (DDoS mitigation). Legal basis: legitimate interest in secure, reliable delivery (GDPR Art. 6(1)(f)). We do not use these logs to identify visitors. Cloudflare processes this data as described in the Cloudflare Privacy Policy, with EU Standard Contractual Clauses for international transfers.

Contact & Support

If you email us at hello@budwisea.com, we process your email address and message content solely to respond to your request. Our mailbox is operated by our email provider (Neo/Titan) acting as processor. Correspondence is deleted once your request is resolved and no legal retention duty applies. Legal basis: GDPR Art. 6(1)(f) — legitimate interest in providing support, or Art. 6(1)(b) where your request relates to the purchase.

Beta testing (Google Play)

If you click the "Google Play" button on our website to join beta testing, a dialog appears where you enter your email address. When you click "Request Testing Link", your email address is not stored on our servers. Instead:

No data collection, no third-party services, no tracking. The dialog itself stores nothing; it only triggers your email app. Once you send the email, any resulting correspondence is processed as described under "Contact & Support" above — your email address and message are used solely to respond to your beta testing request and provide updates. We delete it once the beta period ends or upon your request. Legal basis: GDPR Art. 6(1)(b) — your email request to participate in the beta program.

Children

Budwisea is rated 4+. Because we collect no data, no special child-protection requirements apply (COPPA, GDPR Art. 8).

Your rights

Under the Swiss revFADP and (where applicable) the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. In practice:

You may also lodge a complaint with a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or your local EU/EEA authority.

Changes

We update this policy as needed — for example if a future app version ever adds an online feature, which would be clearly disclosed here and in the App Store privacy label / Google Play Data safety section first. The current version is always at budwisea.com/privacy.