Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how BUDGETYEP collects, uses, stores and protects personal data when you use the BUDGETYEP website, web application and related services (collectively, the “Service”).

BUDGETYEP is operated by:

BRIGHT FREQUENCY LTD.
UIC / Company ID: 208584139
VAT ID: BG208584139
VAT registered in Bulgaria
Registered in the Republic of Bulgaria
Email: myfuturemakersclub@gmail.com

For the purposes of the General Data Protection Regulation (“GDPR”) and applicable Bulgarian data protection law, BRIGHT FREQUENCY LTD. is the controller of personal data processed through BUDGETYEP.

1. Information We Collect

1.1 Account information

When you create or use a BUDGETYEP account, we may process:

• your name, where provided;
• email address;
• account identifier;
• authentication and login information;
• subscription status;
• preferences and settings.

You may register or sign in using email/password authentication or Google Sign-In.

If you use Google Sign-In, Google may provide information necessary to authenticate your account, such as your name, email address and Google account identifier.

BUDGETYEP does not receive or store your Google password.

1.2 Financial and budgeting information you enter

BUDGETYEP allows you to enter and manage personal budgeting information, including:

• income;
• expenses;
• transactions;
• accounts;
• budgets;
• categories;
• savings;
• savings goals;
• contributions;
• challenges;
• avoided purchases;
• notes;
• financial preferences;
• other information you choose to enter.

This information is provided by you for the purpose of using BUDGETYEP.

BUDGETYEP does not independently verify that user-entered amounts correspond to actual bank balances or transactions.

BUDGETYEP does not currently access or move money in your bank accounts.

2. Payment and Subscription Information

Payments and subscriptions are processed through Stripe.

Stripe may process information including:

• name;
• email address;
• billing details;
• payment method information;
• transaction information;
• subscription information;
• billing country;
• payment status.

BUDGETYEP does not store your full payment card number.

We may receive limited payment-related information from Stripe, including:

• Stripe customer ID;
• subscription ID;
• selected subscription plan;
• payment status;
• transaction reference;
• subscription status;
• renewal or cancellation status.

Stripe processes payment data in accordance with its own privacy documentation and legal obligations.

3. Technical and Device Information

When you use BUDGETYEP, certain technical data may be processed automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• language;
• approximate geographic information derived from technical data;
• timestamps;
• pages visited;
• application interactions;
• session information;
• error and diagnostic information.

We use technical information to operate, secure, troubleshoot and improve BUDGETYEP.

4. Cookies, Local Storage and Similar Technologies

BUDGETYEP uses cookies, browser storage and similar technologies.

We divide these technologies into the following categories:

Necessary

Necessary technologies support functions such as:

• authentication;
• account sessions;
• security;
• subscription management;
• remembering consent choices;
• returning users to an intended page after login;
• remembering dismissed reminders;
• remembering installation prompts;
• interface preferences.

Necessary technologies may operate without optional analytics or marketing consent where permitted by law because they are required to provide the Service or functionality requested by the user.

Analytics

With your consent, BUDGETYEP may use analytics technologies to understand how visitors and users interact with the Service.

These currently include:

• Google Analytics 4
• Microsoft Clarity

Analytics technologies are not activated through BUDGETYEP until the applicable Analytics consent has been provided.

Marketing

With your consent, BUDGETYEP may use advertising measurement technologies to understand conversions and improve advertising campaigns.

These currently include:

• Meta Pixel

Marketing tracking is not activated through BUDGETYEP until the applicable Marketing consent has been provided.

TikTok Pixel may be introduced in the future. It is not considered active unless and until it is technically enabled. This Privacy Policy and the Cookie Policy should be updated when additional tracking technologies are activated.

5. Google Tag Manager

BUDGETYEP uses Google Tag Manager (“GTM”) to manage certain analytics and marketing technologies.

GTM acts as a tag management layer.

BUDGETYEP's implementation is designed so that analytics and marketing technologies managed through GTM respect the user's applicable consent preferences.

Tags added through GTM must also be configured consistently with those consent requirements.

6. Google Analytics 4

Where Analytics consent has been given, BUDGETYEP uses Google Analytics 4 (“GA4”) to understand use of the Service.

GA4 may process information such as:

• page views;
• device and browser information;
• approximate location;
• interaction events;
• referral information;
• technical identifiers;
• conversion events.

BUDGETYEP may measure events such as:

• page views;
• registration started;
• registration completed;
• login completed;
• pricing viewed;
• checkout started;
• purchase completed;
• subscription started;
• PWA installation events.

BUDGETYEP is designed not to send personal budgeting records to Google Analytics.

In particular, analytics events should not contain:

• personal transaction descriptions;
• income amounts;
• expense amounts;
• account balances;
• personal budget values;
• savings amounts;
• financial goal amounts;
• challenge amounts;
• private notes;
• payment card numbers;
• passwords;
• authentication tokens.

Subscription plan information and the publicly advertised subscription price may be used for conversion measurement.

7. Microsoft Clarity

Where Analytics consent has been given, BUDGETYEP may use Microsoft Clarity to understand how visitors interact with the website and application.

Clarity may provide aggregated interaction information such as:

• page usage;
• clicks;
• scrolling;
• navigation behaviour;
• technical device information;
• session interaction information.

Our implementation is intended to prevent personal budgeting values and private financial records from being deliberately sent as analytics events.

8. Meta Pixel

Where Marketing consent has been given, BUDGETYEP may use Meta Pixel for advertising measurement and conversion tracking.

Meta Pixel may be used to understand events such as:

• page visits;
• registration;
• checkout initiation;
• purchases;
• subscription conversions.

We do not intentionally send personal budgeting records, balances, private notes or payment card information to Meta Pixel.

Automatic Advanced Matching is not currently enabled.

9. Google Authentication

BUDGETYEP allows users to authenticate using Google.

When you choose Google Sign-In, Google processes information according to Google's own privacy practices.

BUDGETYEP receives only information necessary to authenticate and operate your account.

10. Lovable Cloud and Supabase Infrastructure

BUDGETYEP uses Lovable Cloud and associated Supabase-based infrastructure for functionality such as:

• authentication;
• database storage;
• backend services;
• application hosting;
• server-side functionality;
• security.

Your BUDGETYEP financial records are stored in association with your account through this infrastructure.

Access to user-specific records is protected through application and database access controls, including row-level security where implemented.

11. Google Fonts

BUDGETYEP may load fonts through Google Fonts.

When fonts are requested from Google's servers, Google may receive technical information associated with the request, such as the user's IP address and browser information.

12. How We Use Personal Data

We process personal data in order to:

• create and maintain your account;
• authenticate users;
• provide BUDGETYEP functionality;
• store and display your financial records;
• calculate budgets and progress;
• provide savings and challenge features;
• process subscriptions;
• process and confirm payments;
• provide customer support;
• communicate about the Service;
• maintain security;
• prevent misuse and fraud;
• diagnose technical problems;
• improve the Service;
• measure website and application usage with consent;
• measure advertising performance with consent;
• comply with legal, tax and accounting obligations;
• establish, exercise or defend legal claims.

13. Legal Bases for Processing

Where the GDPR applies, we rely on one or more of the following legal bases.

Performance of a contract

Processing may be necessary to:

• create and maintain your account;
• provide requested BUDGETYEP functionality;
• store your records;
• process your subscription;
• provide paid functionality.

Legal obligation

We may process information where necessary to comply with:

• taxation requirements;
• accounting rules;
• consumer protection rules;
• regulatory obligations;
• lawful requests from authorities.

Legitimate interests

We may process personal data where necessary for legitimate interests such as:

• maintaining security;
• preventing fraud and abuse;
• protecting our systems;
• diagnosing problems;
• protecting our legal rights;
• improving the reliability of the Service.

Where we rely on legitimate interests, we consider the impact on your rights and freedoms.

Consent

We rely on consent where required for:

• Analytics cookies and technologies;
• Marketing and advertising technologies;
• certain optional tracking;
• electronic marketing where consent is legally required.

You may withdraw consent at any time through the Cookie Settings functionality or other available mechanisms.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

14. Service Providers and Recipients

Depending on the functionality you use and your consent choices, personal data may be processed by or disclosed to service providers including:

• Lovable;
• Supabase-related infrastructure providers;
• Stripe;
• Google;
• Meta;
• Microsoft;
• hosting, security and infrastructure providers;
• professional advisers or authorities where legally required.

We do not sell your private budgeting records.

15. International Data Transfers

Some service providers may process data outside Bulgaria or the European Economic Area (“EEA”).

Where GDPR rules on international transfers apply, transfers are made using an applicable lawful transfer mechanism, which may include:

• European Commission adequacy decisions;
• Standard Contractual Clauses;
• other recognised safeguards.

16. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was processed.

Account and budgeting records may generally be retained while your account remains active.

Information may be retained for longer where required for:

• tax obligations;
• accounting requirements;
• payment records;
• fraud prevention;
• security;
• dispute resolution;
• legal claims;
• compliance with law.

Deleted information may remain temporarily in secure technical backups before routine deletion or overwriting.

17. Your Financial Records

Your budgeting records are associated with your BUDGETYEP account.

You may be able to add, edit or delete records using the controls available in the Service.

Deleting or resetting financial records does not cancel your paid subscription.

Subscription cancellation must be performed separately.

18. Account and Data Deletion

Where available, you may use BUDGETYEP account controls to delete records or request deletion of your account.

You may also contact:

myfuturemakersclub@gmail.com

We will delete or anonymise personal data that we are no longer required or permitted to retain.

Certain information may remain where retention is necessary for legal, tax, accounting, fraud-prevention or legal-claims purposes.

Deleting an account does not automatically create a refund for a subscription period already purchased.

19. Your GDPR Rights

Subject to applicable law, you may have the right to:

• obtain information about processing;
• access your personal data;
• correct inaccurate or incomplete data;
• request deletion;
• request restriction of processing;
• object to certain processing;
• object to direct marketing;
• withdraw consent;
• receive eligible data in a portable format;
• lodge a complaint with a competent supervisory authority;
• exercise rights relating to qualifying automated decision-making.

Requests may be sent to:

myfuturemakersclub@gmail.com

We may need to verify your identity before fulfilling certain requests.

20. Supervisory Authority

You have the right to lodge a complaint with a competent data protection supervisory authority.

For a controller established in Bulgaria, the relevant supervisory authority is the:

Commission for Personal Data Protection of the Republic of Bulgaria (CPDP).

21. Automated Decision-Making

BUDGETYEP does not use your budgeting data to make automated decisions that produce legal or similarly significant effects such as credit approval.

Budgets, progress indicators, savings calculations and challenges are application features based on information entered by the user.

22. Data Security

We use reasonable technical and organisational safeguards intended to protect personal data against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure;
• destruction.

No online system can guarantee absolute security.

You are responsible for keeping your credentials and devices secure.

23. Device Storage and PWA Installation

BUDGETYEP may use browser or device storage to:

• maintain authentication;
• remember consent;
• remember navigation state;
• remember dismissed reminders;
• remember installation prompts;
• maintain application preferences.

BUDGETYEP may be installable as a Progressive Web App (“PWA”).

Installing the PWA creates an app-like experience or shortcut.

It does not create a separate account or subscription.

A network connection may be required for current information and certain functionality.

24. Children

BUDGETYEP is not intended for children where processing their personal data would require parental authorisation under applicable law unless valid authorisation has been obtained.

If we become aware that personal data from a child has been processed unlawfully, appropriate steps may be taken to delete it.

25. Changes to This Privacy Policy

We may update this Privacy Policy when:

• the Service changes;
• new providers are introduced;
• tracking technologies change;
• legal requirements change;
• data-processing practices change.

The current version will display an updated revision date.

Where legally required, we will provide additional notice or obtain renewed consent.

26. Contact

For privacy questions or requests, contact:

BRIGHT FREQUENCY LTD.
UIC / Company ID: 208584139
VAT ID: BG208584139
Republic of Bulgaria
Email: myfuturemakersclub@gmail.com