Privacy Policy and KVKK Notice

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Melisa Uyar. Budget Buddy is developed and operated by an individual.

For any request about your personal data, write to budgetbuddy.main.info@gmail.com.

2. Personal data we process

• Identity and contact: name, email address, profile photo (depending on how you sign in).
• Account preferences: language and currency.
• Financial records you enter: accounts, income and expense transactions, categories, budgets, savings goals and CSV imports.
• Receipt images: JPG, PNG or WEBP files you attach to transactions.
• Family group data: groups you belong to, roles, invitations, transactions and goals you share with a group, allowance plans, shared shopping lists and wishlists.
• AI assistant: your questions, the answers and conversation history.
• Technical data: session information, application error reports (error message, page path, browser details) and IP address for abuse prevention.

Budget Buddy does not connect to your bank, never asks for card or bank account numbers and cannot move money. Please do not put such details in transaction descriptions.

3. Purposes and legal grounds

• Creating your account, managing your session and providing the app's features: performance of a contract (KVKK Art. 5/2-c).
• Showing data you share with a family group to its members: performance of a contract and your sharing choice (Art. 5/2-c).
• Security, error detection and preventing abuse or excessive requests: legitimate interest (Art. 5/2-f).
• Complying with legal obligations and handling legal claims: Art. 5/2-ç and Art. 5/2-e.

4. Service providers and transfers abroad

The app relies on the providers below, each processing only what its role requires. Their servers are located outside Türkiye (the United States and/or the European Union), so your data is transferred abroad. Transfers rely on the safeguards set out in KVKK Art. 9 and are necessary to provide the service.

• Supabase: sign-up, sign-in and session management; database and private storage for receipt images.
• Email delivery (Resend): sending account verification and password reset emails. Only your email address and the relevant link are sent.
• Vercel: application hosting.
• Groq: generating AI assistant answers. Only your question and the summary financial data needed to answer it are sent.
• Sentry: error monitoring. Only your internal user ID is sent, never your name or email.

5. Retention

Your data is kept while your account is open. When you delete your account from Settings, your sign-in account, personal financial records, family groups you own and your receipt images are deleted. Family transactions created by other members remain as their records.

Error reports and system logs are kept for a limited time for security and troubleshooting. Data subject to a legal retention obligation is kept for the required period.

6. Security

The database cannot be accessed directly from the browser; every request is processed on the server after your identity and permissions are verified. Receipt images are kept in private storage and shown only through links valid for 60 seconds. All connections are encrypted (HTTPS).

7. Cookies

Only essential cookies and browser storage are used, to keep you signed in and remember your language. No advertising or tracking cookies are used.

8. Your rights under KVKK

Under KVKK Art. 11 you may ask the data controller to:

• Confirm whether your personal data is processed and request information about it,
• Tell you the purpose of processing and whether it is used accordingly,
• Name the third parties in Türkiye or abroad it is transferred to,
• Correct incomplete or inaccurate data,
• Delete or destroy your data,
• Notify corrections and deletions to the third parties it was transferred to,
• Reconsider an outcome against you that results solely from automated analysis,
• Compensate damage caused by unlawful processing.

9. How to apply

Send your request from your registered email address to budgetbuddy.main.info@gmail.com. Requests are answered free of charge within 30 days. You can export your transactions as CSV and delete your account from Settings at any time.

If you are not satisfied with the response, you may file a complaint with the Turkish Personal Data Protection Board.