Privacy Policy

Effective date: October 10, 2026

BudgetWink is provided by Externum LLC. This policy explains what information BudgetWink stores and how it is used.

Information stored on your device

BudgetWink stores your jobs, paychecks, bills, payment status, savings goals, saved amounts, purchases, refunds, purchase splits, and other planning information in the app's private storage on your device. Receipt images you add are normalized and stored as private app copies.

Local planning does not require an account. BudgetWink does not include advertising, analytics, bank connections, or automatic synchronization of your local plan.

Optional account and household sharing

If you create an account or share a household plan, Supabase processes your email address, authentication information, and display name for Externum LLC. If you choose to send a household plan, Externum stores that plan and its referenced receipt images in the United States. Household members can read shared information. Editors and the owner can replace the shared plan.

Your display name is visible to other household members. Access uses authenticated membership controls and transfers use HTTPS. Household sharing is not end-to-end encrypted.

Sending and loading are manual actions that require confirmation. Loading replaces the device's plan; sending replaces the household copy. Removing a member prevents subsequent access but cannot erase copies already downloaded to another device.

Account and data deletion

You can use the in-app account and household deletion controls where provided, or contact admin@externum.dev to request deletion. Deleting an account also removes households it owns and their cloud receipts. Previously downloaded copies remain on other devices and must be deleted separately. Clearing device data does not delete a cloud household copy.

To prevent a deleted purchase from being linked to another account, Externum retains a one-way purchase identifier digest, its store and environment, and a deleted-owner marker. This record contains no email address, raw purchase proof, financial plan, or receipt image. It is retained while needed to prevent reuse of that purchase. Raw purchase proofs and account purchase references are removed with the account. Contact admin@externum.dev with privacy questions.

Backups and exports

You choose when to export a backup and where to save it using your device's file picker. A complete ZIP archive can include financial records and receipt images. A financial-only JSON backup excludes receipt images. Backup files contain readable financial information and are not encrypted by BudgetWink.

If you choose a cloud storage provider for an exported file, that provider handles the file under its own privacy policy. Importing a valid backup replaces your local plan and private receipt copies only after confirmation.

BudgetWink disables Android automatic cloud backup and device transfer for app data. Your local plan and private receipt copies remain until you use Start over in Settings, clear the app's data, or uninstall the app. Exported files remain wherever you saved them and must be deleted separately.

Optional Plus subscriptions

Local budgeting is free and does not require a subscription. Google Play manages subscriptions purchased in the Google Play edition. Stripe manages subscriptions purchased from the Windows and Samsung Galaxy Store editions. Stripe collects payment details on its own checkout and customer portal pages; BudgetWink does not store your full payment-card details.

For Stripe subscriptions, Externum associates your BudgetWink account with a Stripe customer identifier and verified subscription status, including its plan, renewal or expiry date, and cancellation status. This information is used to provide Plus access, restore access after sign-in, and manage billing. Simply signing in does not prove a purchase; purchases from other stores require the relevant store's verification.

You can manage or cancel Stripe subscriptions through the Stripe customer portal opened from BudgetWink. Deleting your cloud account cancels Stripe subscriptions linked to that account as part of the deletion process. Manage Google Play subscriptions separately in Google Play. Stripe may retain payment and transaction records under its own policies and applicable legal requirements. See Stripe's privacy policy.

Externum verifies Google Play purchases with Google and associates their purchase identifiers, product, expiry or renewal date, cancellation status, and verification status with your signed-in BudgetWink account. One verified subscription belongs to one BudgetWink account. Supported BudgetWink clients can recognize that account's verified Plus access across devices. Restoring and linking verify ownership; they do not create another purchase, cancel a subscription, or move it to a different account. Manage each subscription with its original payment provider.

Support

If you contact Externum by email, we receive your email address and the information you choose to include so we can respond. You may request deletion of support correspondence by contacting admin@externum.dev; applicable recordkeeping obligations may require some records to be retained.

Contact and policy changes

For support or privacy questions, contact admin@externum.dev. We will publish changes to this policy with an updated effective date.