Privacy Policy

When you use BarryBudget, we collect the following information:

• Account information: your name, email address, and profile picture (provided via Google sign-in).
• Financial data: bank account names, types, and balances; transaction history including dates, amounts, merchants, and categories — all retrieved through your authorized Plaid connection.
• Budgets and preferences: budget amounts you set for each spending category.
• Net worth snapshots: daily aggregate calculations of your total assets and liabilities.
• Payment information: handled entirely by Stripe. We store your Stripe customer ID but never see or store your card number.

Your data is used solely to provide the BarryBudget service: displaying your accounts, tracking spending, calculating budgets, generating insights, and showing your net worth over time.

We do not use your data for any purpose beyond delivering the product you signed up for.

• We never sell your data to anyone.
• We never share your financial data with third parties for marketing or advertising.
• We never use your data to train AI or machine learning models.
• We never display ads.
• We never use your data to build profiles for targeting or scoring.

BarryBudget uses the following third-party services to operate. Each has its own privacy policy:

• Plaid — connects to your bank accounts and retrieves financial data on your behalf.
• Stripe — processes subscription payments. We never see or store your card details.
• Google — provides authentication via OAuth sign-in.
• Resend — sends transactional emails (sign-in links, account notifications).

Your data is retained for as long as your account is active. When you delete your account, all of your data is permanently removed immediately — including your profile, linked accounts, transactions, budgets, and net worth history. No backup copies of individual user data are retained after deletion.

For full details, see our Data Deletion & Retention Policy.

Whether you are in California (CCPA), the European Union (GDPR), or elsewhere, you have the following rights:

• Access: view all your data anytime through the BarryBudget dashboard.
• Deletion: permanently delete your account and all associated data through Settings, or by contacting us.
• Portability: request an export of your data by contacting us at the email below.
• Opt out of sale: we do not sell your data, so there is nothing to opt out of.

We protect your data with the following measures:

• Bank connection tokens are encrypted using AES-256-GCM before storage.
• All data is transmitted over HTTPS (TLS 1.2+).
• Authentication uses secure JWT sessions with industry-standard OAuth 2.0.
• Database access is isolated per user at the application level.

If we make material changes to this policy, we will update the effective date at the top of this page and notify you via email.