Privacy Policy
Last Updated: October 16th, 2026
Budgy (the "App") is an expense and budget tracker: you log what you spend in one line, and Budgy keeps your budget, your bills and your subscriptions in order. It is built by Mango Lab ("we", "us", or "our"). This Privacy Policy explains what happens to your information when you use the App.
The short version: there is no account and no signup, and we run no server of our own. What you log in the App never reaches us. Every amount, note, category, budget and bill stays on your devices and in your own private iCloud. The App does report how it is used, under a random identifier and never with your amounts, your notes or your name. Three named third parties are involved: Apple, RevenueCat, and Google (Google Analytics for Firebase). The App also downloads a public table of exchange rates from GitHub, which sees only what any website sees. The sections below say exactly what each of them receives.
If you do not agree with this Privacy Policy, please do not use the App.
What Changed in Budgy 2.0
Earlier versions of Budgy (1.x) offered sign-in with Apple or Google and stored your entries on a server run with Supabase. They also used Firebase Crashlytics and Firebase Cloud Messaging.
Budgy 2.0 was rebuilt from the ground up and removed all of that. There are no accounts, the App no longer connects to that server, and it uses neither Crashlytics nor Cloud Messaging.
If you had an account in an earlier version and would like the data from that time deleted, write to us at the address at the end of this page.
Data Stored on Your Device
All of the following is stored on your iPhone and, if you are signed in to iCloud, mirrored into your own iCloud as described under iCloud Sync below:
★ Your entries: the amount and its currency, the date, the category, any note you write, and whether it was spending or income.
★ Your categories and budgets: category names, emoji and colours, which ones you starred, and the monthly budgets you set, overall and per category.
★ Your bills and subscriptions: the name, the amount, how often it repeats, when it started, how many payments it has if it ends, and whether you asked for a reminder. Budgy logs each payment by itself on its date, on your device.
★ Your home currency.
The following is kept on each device only and is not synced:
★ Your preferences: theme, app icon, appearance, logging sound, whether the cat talks, the days you opened the App (for your streak), and which tips you have already seen.
★ Your widgets: a small snapshot of this month's spending (your totals, what is left of your budget, and your top categories), written to a container on your iPhone that Budgy's widgets can read. It is rebuilt whenever your entries change and never leaves the device.
★ Exchange rates: the most recent table of daily exchange rates the App downloaded (see Network Requests below), so that amounts in other currencies convert even when you are offline.
Everything that understands your entries happens on your iPhone: reading the amount out of a line you type, guessing its category from the categories you chose before, converting an amount in another currency to your home currency, and showing the logo of a service you pay for (the logos are built into the App). None of it involves a server.
The App does not ask for your name, email address, phone number, bank login, or any other detail that could be used to contact or identify you. There is no user profile, because there are no user accounts.
iCloud Sync
If you are signed in to iCloud, your entries, categories, budgets, bills and home currency go into your own private iCloud database through Apple CloudKit, so your other devices, and a new phone, pick up where you left off.
This is Apple infrastructure, tied to your Apple ID and governed by Apple's Privacy Policy. The data lives in your iCloud account, not ours. It is not sent to a Mango Lab server, because we do not operate one.
We cannot read, access, or recover data stored in your iCloud. Neither can we restore it for you if it is lost. Apple does not grant developers access to a user's private data.
When something changes on one of your devices, Apple sends your other devices a silent background notification so that they fetch the change. These notifications are Apple's, carry none of your data, and are never shown to you.
You can stop sync at any time by turning off iCloud for Budgy in iOS Settings → your name → iCloud, or by signing out of iCloud. If you do, the App keeps working and your data stays on that one device only.
Budgy Premium
Your first 20 entries are free, and the payments a bill logs by itself do not count toward them. Budgy Premium unlocks unlimited entries, every theme and app icon, and CSV export. You can get it as Budgy Lifetime, a one-time purchase, or as a monthly subscription, which renews automatically until you cancel it in your Apple Account settings.
Payment is processed entirely by Apple. The App never sees or handles your card details, your billing address, or your Apple Account credentials.
We use RevenueCat to validate purchases and to check whether you have Budgy Premium, through Budgy Lifetime or a subscription (including one from an earlier version). RevenueCat is a data processor acting on our behalf. It receives:
a) a random identifier that RevenueCat creates for this installation of the App
b) purchase and transaction data from Apple, such as which product was bought and when
c) basic device and country information that Apple provides with the purchase
RevenueCat does not receive your entries, your notes, your budgets, or anything else you log.
Analytics
Budgy is made by a very small team, and there is no other way to find out whether people can actually log their spending with it. So it reports how it is used to Google Analytics for Firebase.
What Google receives:
a) a random identifier that Firebase creates for this installation. It is not connected to your name, your email, your Apple ID, or your phone's advertising identifier. Deleting the App discards it, and a reinstall starts a new one
b) events Firebase records by itself: the first time the App is opened, when it is opened and for how long, which screens are shown, App and iOS updates, and in-app purchases (which product, and its price)
c) events the App sends: finishing the welcome screens; logging an entry, with the way it was logged (the bar, the form, or Siri and Shortcuts), how many entries were in the line, and whether Budgy guessed the category or you changed it; adding a bill, and how; the purchase screen being shown or closed, where it was opened from, which plan was chosen, and whether a purchase was finished or abandoned; opening the monthly summary; and roughly how many Budgy widgets are on your home and lock screens
d) your device model, iOS version, App version, and language and region settings
e) a masked version of your IP address, from which Google derives your general location, at most to the level of a city. The App never asks for or uses location services
Google never receives an amount, a note, a category name, a budget, or the name of a bill. What you spend stays out of Google's reports entirely.
The App does not track you across other companies' apps or websites, shows no ads, and sells nothing. It does not collect Apple's advertising identifier (IDFA): the App uses the build of the Firebase SDK that leaves it alone.
This analytics collection is a standard part of the App and cannot currently be turned off from within it. If you would prefer not to be included, you may stop using the App and delete it. Data handled by Google is subject to Firebase's privacy documentation.
Notifications
If you turn on a reminder for a bill, the App reminds you on the day of the payment, or one or three days before it, at 9 in the morning. It sends no other notifications, and it asks for permission only when you first turn a reminder on.
These are local notifications. They are scheduled and delivered by your own device. No server is involved, no message is sent to us, and we do not know whether you opened one.
You can turn a reminder off in the bill itself, or turn off notifications for Budgy in iOS Settings, at any time.
Siri and Shortcuts
If you log an entry with Siri or the Shortcuts app, Apple turns what you say into text, under Apple's own privacy policy. The App receives that text and reads it on your iPhone, exactly as it reads a line typed into the bar.
Export and Feedback
★ CSV export: with Budgy Premium you can export your entries as a CSV file. The file is made on your iPhone and handed to the iOS share sheet. Where it goes from there is your choice, and we do not receive a copy.
★ Feedback: sending us feedback from the App opens your mail app with our address and the App's version in the subject. If you send it, we receive your email address and whatever you write, and we use them only to reply to you.
Network Requests
The App makes only five kinds of network request, and no others:
a) RevenueCat's API, for purchase validation and checking Budgy Premium, as described above.
b) Google's Firebase Analytics endpoints, which receive the usage events described in the Analytics section.
c) Apple's App Store, to show the price and to make and restore purchases.
d) Apple iCloud, which carries your entries, categories, budgets and bills to and from your own iCloud. This goes to your Apple account rather than to any server of ours.
e) A public table of exchange rates, at most twice a day, so that an amount you log in another currency ("Netflix 9 USD") counts toward your budget in your home currency. It is a single file, the same for everyone, published on GitHub Pages (minhoko.github.io). The request carries nothing about you or what you log. Like any website, GitHub sees your IP address when the file is downloaded, under GitHub's Privacy Statement.
The App contacts no other server. Logging, budgets, bills, reminders and category guesses all happen on your device, so logging works with no connection at all.
What We Do Not Do
We never see what you log. Your amounts, notes, categories, budgets and bills go to your own devices and your own iCloud, and to nobody else.
The App never asks for a bank login and never connects to your bank or card accounts. Everything in it is what you typed yourself.
The App contains no advertising and no cross-app tracking. We serve no ads, we do not collect Apple's advertising identifier, and we do not track you across other companies' apps or websites. This is why the App never shows you an App Tracking Transparency prompt: it has nothing to ask you for.
We do not sell, rent, or share your information with a data broker.
The App does not ask for access to your location, contacts, photos, camera, or microphone.
Data Retention and Deletion
★ In the App: you can delete any entry, bill or category at any time. Settings → Erase all data deletes every entry, category, budget and bill from your device and, when it next syncs, from your iCloud.
★ Local data: Deleting the App from your iPhone removes all of its local data.
★ iCloud data: Deleting the App does not by itself remove what is already in your iCloud. Use Erase all data first, or manage it through iOS Settings → your name → iCloud. Because it is private to your Apple ID, we cannot delete it for you.
★ Our systems: We hold nothing of yours on any server of ours, because we operate none.
★ Everything else: Your purchase record at RevenueCat and your usage records at Google are filed under the random identifiers described above, not under your name or email, and the App does not show those identifiers. That means we cannot pick out your records from a name or an email address. Deleting the App discards the identifiers from your phone, and from then on the old records are no longer connected to your device. If you would like us to delete records, write to us and we will do everything we can to find and remove them.
Apple separately retains its own record of every transaction.
Children's Privacy
The App is not directed at children under 13, and we do not knowingly collect personal information from them. It requires no account and collects no name, email address, photograph, contact, or precise location from anybody of any age, so we have no means of determining a user's age.
Third Party Providers
Three third parties are involved in the operation of the App.
• Apple: Apple processes your purchase through the App Store, stores your synced entries, categories, budgets and bills in your own iCloud, and handles Siri. Your relationship for this data is with Apple, under your Apple ID. We have no access to it.
• RevenueCat: RevenueCat validates purchases and manages access to Budgy Premium. It receives its own random identifier, purchase and transaction data, and basic device information. It receives nothing you log. RevenueCat acts as a processor on our behalf and honours data deletion requests.
• Google (Analytics for Firebase): Google processes usage measurement on our behalf: an app installation identifier, device and App version information, automatically collected session and purchase events, the events listed in the Analytics section, and a masked IP address for general location. It receives no amount, no note, no category name and no budget.
Links to Other Sites
The App contains links to sites we do not operate, such as the App Store for reviews, Apple's standard terms of use, or your email app to contact us. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party site. We encourage you to review their policies.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of the App after a change takes effect constitutes acceptance of the revised policy.
Who We Are
We are Mangolab team by 1 developer and 1 designer from Vietnam tropical country. You can contact us regarding privacy issues via