Privacy Policy
Last updated: September 13, 2026
This Privacy Policy describes how TRIERIA BRASIL LTDA ("Budgy", "we") handles your personal data when you use the Budgy app and this website. It is written to comply with Brazil’s General Data Protection Law (LGPD, Law No. 13.709/2018) and other applicable data protection regulations.
Data controller
The party responsible for processing your personal data is:
- Legal name: TRIERIA BRASIL LTDA
- Tax ID: 68.450.023/0001-31
- Registered address: Alameda Rio Negro, 503, Sala 2020 — Alphaville Centro Industrial e Empresarial, Barueri/SP, CEP 06454-000, Brasil
- Data protection officer (DPO) contact: contato@budgy.online
What data we collect and why
We only collect the data needed to provide the service. We group it as follows:
Account and identity data. Name, email, password (always stored hashed, never in plain text), country, time zone, language, primary currency, profile photo, tax document (CPF, CUIL/CUIT or RIF depending on the country), WhatsApp number, and Google or Apple identifiers if you sign in with those services. Purpose: to create and manage your account, authenticate you, and provide support.
Demographic profile (optional). If you choose to fill it in: year of birth, gender, state/province, employment status, income range, household size, whether you have dependents, housing situation, main financial goal, level of financial knowledge, and main financial challenge. Purpose: to personalize recommendations and budgets. It is optional and you may leave it blank.
Financial data. Transactions, accounts, credit cards with their statements and installments, budgets, goals, debts, investments, and the PDF files of statements and bills you upload to import. Purpose: to provide the core financial-organization feature.
Technical and session data. IP address, browser type (user agent), detected country, device identifier, and the dates of login, last activity, and logout. Purpose: security, fraud prevention, and operation of the service.
Legal basis for processing
We process your data on the following legal bases (LGPD arts. 7 and 11): performance of the service contract, for the features you request; your consent, for optional data such as the demographic profile; compliance with legal and regulatory obligations; and our legitimate interest in security, fraud prevention, and improving the service, always respecting your rights and freedoms.
Who we share your data with and international transfer
To provide the service, we share data with providers acting as processors, only for the stated purposes:
| Provider | Purpose | What it receives |
|---|---|---|
| Anthropic (Claude) | Extract the data from the statement and bill PDFs you upload, and understand your WhatsApp messages | The text of the statement/bill and the content of the messages |
| Meta (WhatsApp Cloud API) | WhatsApp messaging channel | Your phone number and the messages |
| Twilio | WhatsApp messaging channel | Your phone number and messages |
| MercadoPago | Subscription billing | Billing data |
| Google / Apple | Sign-in (SSO) | Your email and account identifier |
| Railway | App hosting and database | All app data (see international transfer) |
| Cloudflare | Hosting of this website | Site navigation data |
| Resend | Sending transactional email (notices and password recovery) | Your email |
When you upload a statement or bill PDF, its content is sent to Anthropic (Claude) to extract the data automatically. We state this explicitly because it is processing carried out by a third party.
International transfer. Budgy’s database is hosted on Railway, outside Brazil. This means your personal data is transferred and stored outside the country. We carry out this transfer on the following legal basis, in accordance with LGPD art. 33 and ANPD Resolution CD/ANPD No. 19/2024: the need to perform the contract you enter into with us when you create your account, together with the contractual clauses we require from those providers so that they protect your data at a level equivalent to the LGPD.
Retention period
We keep your personal data while your account is active and for as long as necessary to fulfill the described purposes and applicable legal obligations. When you delete your account, we erase your personal data, except for any data we are required to keep by legal or regulatory obligation for the period the law requires.
Your rights and how to exercise them
As the data subject, the LGPD (art. 18) grants you the following rights: confirmation that processing exists; access to your data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary data or data processed in breach of the law; portability; information about the parties with whom we share your data; and withdrawal of consent.
You can delete your account and your data directly from the app, with no paperwork or intermediaries. To exercise any of the other rights, write to us at contato@budgy.online.
There is one exception and we would rather say it plainly: if you shared an account or a card with someone in your household, the transactions you recorded on those instruments are not deleted. They are left unlinked from you and with nothing that could identify you: deleting them would erase the other person’s history, and they did not ask for anything. If you want them removed too, write to us and we will sort it out with whoever shares the household.
Cookies
This website uses a single functional cookie, "budgy_lang", to remember the language you choose. We do not use analytics, advertising, or third-party tracking cookies. The app uses the technical storage needed to keep your session signed in.
Changes to this policy
We may update this Privacy Policy. We will publish the current version on this page, with its last-updated date. If the changes are substantial, we will notify you through the available means.