Privacy Policy

Effective date: April 23, 2026

1. Data Controller

The data controller is Cezary Nowak, operating from ul. Pomorska 54/2, 85-051 Bydgoszcz, Poland, contact email: getcouplebud@gmail.com.

2. What data do we collect?

• Account data: email address, password (stored in encrypted form via Firebase Auth).
• Couple data: first names/nicknames, net income amounts, percentage cost-sharing, fixed recurring expenses.
• Financial data: expenses (amounts, categories, dates, descriptions), transfers between partners, savings goals.
• Transaction data: Stripe customer and subscription IDs, PRO subscription status. We do not collect or process full payment card numbers.
• Technical data: IP address, device identifier, access logs.
• Marketing data (optional): newsletter consent.

3. Purpose and legal basis for processing

We process data solely to provide the service, specifically:

• creating and managing a user account,
• syncing data between partners,
• generating financial statistics,
• processing recurring payments for the PRO subscription,
• sending commercial communications (only with explicit consent).

Note for US Residents: We comply with applicable US state privacy laws (including CCPA/CPRA where applicable). We do not sell your personal data.

4. Data recipients

Data is processed by the following third-party providers:

• Google LLC (Firebase) - data storage and authentication;
• Stripe, Inc. - subscription and payment processing;
• Resend, Inc. - email delivery.

5. Data retention periods

• Account and financial data: until the user deletes their account or for 24 months from the last login;
• Transaction data (Stripe): for 5 years for tax and accounting purposes;
• Technical logs: for 30 days.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion ("Right to be Forgotten"): Request deletion of your data, subject to legal retention obligations.
• Restriction: Request that we limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on our legitimate interests.

California Residents (CCPA/CPRA): You have the right to know what personal information we collect, disclose, and sell. We do not sell or share your personal information with third parties for their own marketing purposes. You also have the right to opt out of any future sale and the right to non-discrimination for exercising your privacy rights. To submit a verifiable consumer request, contact us at getcouplebud@gmail.com. We will respond within 45 days.

To exercise any of the above rights, contact us at getcouplebud@gmail.com. We respond within 30 days (or 45 days for CCPA requests).

7. Cookies and Analytics

We use the following categories of cookies:

• Essential cookies: Required for login and session management (Firebase Auth). These cannot be disabled.
• Analytics cookies: We use Google Analytics 4 with IP anonymization enabled to understand aggregate usage patterns. You can opt out at any time via Google's opt-out tool or by adjusting your browser settings.

We do not use advertising or tracking cookies.

8. Data security

Data is stored in Firebase's encrypted cloud infrastructure. Access to entered expenses is limited exclusively to authorized members of a given couple.

9. Children's Privacy

CoupleBud is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at getcouplebud@gmail.com and we will delete it promptly. Users must be at least 18 years old to enter into a subscription agreement.

10. Policy changes

We will notify users of any material changes to this Privacy Policy by email at least 7 days before changes take effect.