Privacy notice

Bloom Budget is a small, free tool for tracking personal and shared expenses. This notice explains, under the EU General Data Protection Regulation (GDPR, art. 13), what personal data is processed, why, and what your rights are.

Who is responsible

The data controller is Valentino Mettifogo, a private individual based in Italy. For anything related to your data, write to valentino.mettifogo@gmail.com.

What data is processed

• Account data: your email address and password (stored hashed by the authentication provider). If you sign in with Google: your name and profile picture as provided by Google.
• Content you create: spaces, categories and transactions (amount, date, description, category, tags, who paid) added by you or by the people you share a space with.
• Notifications: in-app notifications about transactions added by other members and, only if you enable them, the push subscription of your browser/device (endpoint, encryption keys and user agent).
• Technical data: IP address, browser and request information that the hosting and authentication providers record in their logs for security and operation.
• Anonymous usage and performance metrics: page views and load times. These do not use cookies, do not identify you and never include your expense data.

Why, and on what legal basis

• Providing the service (account, spaces, transactions, in-app notifications) — performance of the service you asked for (art. 6(1)(b) GDPR).
• Security, abuse prevention and keeping the app fast (logs, usage and performance metrics) — legitimate interest (art. 6(1)(f) GDPR).
• Push notifications — your consent (art. 6(1)(a) GDPR), which you can withdraw at any time by disabling them in the app or in your browser settings.

Data is never sold, used for advertising or profiling, or shared beyond what is listed here.

Who can see it

Only people you have explicitly invited into one of your spaces see that space's data. Access is enforced at the database level (row-level security). Nothing is public or indexed by search engines.

Service providers

The app relies on these providers, which process data on my behalf:

• Supabase — database and authentication. Data is stored in an EU region.
• Vercel — hosting (servers in Frankfurt, EU), anonymous Web Analytics and Speed Insights.
• Google — only if you choose "Continue with Google" to sign in; your profile picture is then loaded from Google's servers.
• Your browser's push service (e.g. Google, Mozilla or Apple) — only if you enable push notifications. Notification contents are end-to-end encrypted and cannot be read by the push service.

Some of these companies are based in the United States. Any transfer of personal data outside the EU is covered by the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

Cookies and local storage

The app only uses strictly necessary storage, which does not require consent:

• authentication cookies (sb-…) that keep you signed in;
• a session-storage flag and a local cache of the app's files, used to load the installable app (PWA) quickly and offline.

There are no advertising, tracking or third-party analytics cookies. Fonts are served from this site, not from third parties.

How long data is kept

• Account data and content: for as long as your account exists.
• Notifications: until the account, space or transaction they refer to is deleted.
• Provider logs: for the short period set by each provider (typically days to weeks).

When you delete your account, your login, profile, notifications, push subscriptions and the spaces only you belong to are deleted immediately. Transactions you added to spaces shared with others stay there, so the other members' history remains intact, but they are no longer linked to you. Ownership of shared spaces you own passes to another member. Residual copies in the providers' backups may persist for a short period before being overwritten.

Your rights

You have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data erased — you can do this yourself from Account → Delete account;
• restrict or object to processing based on legitimate interest;
• data portability — transactions can be exported as CSV from the home page, or ask me for a full export;
• withdraw consent at any time, without affecting earlier processing.

To exercise them, write to valentino.mettifogo@gmail.com. I'll reply within one month. You also have the right to lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, or with the authority of the EU country where you live.

Children

The service is not intended for people under 14 years of age.

Changes

This notice may be updated; the date at the top always shows the latest version. Meaningful changes will be communicated to active users.