Privacy Policy
Last updated: May 30, 2026
Introduction
Cosmic BudgetTM("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our budgeting application and services.
Information We Collect
Account Information
When you create an account, we collect your email address and name. You may also choose to enable multi-factor authentication for additional security.
Financial Data
With your explicit consent, we connect to your financial institutions through Plaid. We may receive account names, account types, account masks, balances, transaction dates, amounts, merchant names, categories, institution metadata, and connection status. We do not receive or store your bank username or password.
Email Data
If you choose to connect your email (Gmail or Outlook), we request read-only access and search for messages that match receipt-related signals so we can help categorize and itemize your purchases. We do not intentionally access unrelated personal emails.
Usage Data
We collect information about how you interact with our app, including features used, pages visited, and actions taken. This helps us improve our service.
How We Use Your Information
- To provide and maintain our budgeting service
- To categorize and analyze your transactions
- To generate insights and spending reports
- To send you notifications about budget alerts and weekly summaries
- To provide customer support
- To improve and personalize your experience
- To detect and prevent fraud or security issues
Data Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit using TLS 1.2 or higher
- Sensitive financial tokens are encrypted at rest using AES-256-GCM encryption
- We offer multi-factor authentication (MFA) for account security
- Access to production systems requires authentication
- We use role-based access controls to limit data access
Third-Party Services
We use trusted third-party services to provide our application, including:
- Financial data aggregation services (such as Plaid) for secure bank account connections
- Cloud infrastructure and hosting providers
- Authentication and database services
- Email service providers for optional email integration
- Analytics and error monitoring services
- AI/ML services for transaction categorization and insights
These services are subject to their own privacy policies and terms of service. For bank connections specifically, you can review Plaid's privacy policy at plaid.com/legal.
Data Sharing
We do not sell your personal information. We may share data in these circumstances:
- With household members you invite to share your account
- With service providers who help us operate our service (under strict confidentiality)
- When required by law or to protect our legal rights
- In connection with a merger, acquisition, or sale of assets (with notice to you)
- In aggregated or de-identified form that does not identify you
Service Improvement
We use account and transaction data to run the features you choose, including transaction import, categorization, budgets, reports, alerts, and cash-flow views. We may also use aggregated or de-identified information to understand app performance, improve category matching, fix bugs, and build better budgeting features.
We do not sell your Plaid data. We do not use your bank login credentials because we never receive them.
Your Rights and Choices
You have the following rights regarding your data:
- Access - You can export all your data from the Settings page
- Deletion - You can delete all your financial data using the "Clear All Data" feature in Settings
- Disconnect - You can disconnect bank accounts and email integrations at any time
- Plaid access - You can revoke bank data access through the app, your bank, or Plaid where supported
- Account Deletion - Contact us to request complete account deletion
- Preferences - You can adjust notification preferences and AI coaching settings in Settings
Data Retention
We retain your data for as long as your account is active. Transaction history is kept indefinitely to provide long-term spending analysis, trends, and year-over-year comparisons. You can delete your financial data at any time using the "Clear All Data" feature in Settings, which permanently removes your transactions, accounts, and connected bank data.
After account deletion, we may retain anonymized or aggregated data for analytics and service improvement purposes. Backup copies may persist for a reasonable period as part of our standard data protection practices.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our application.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: hello@cosmicbudget.com