Privacy Policy
Bujit ("the app", "we", "us") is a personal budgeting tool developed by Nishian3695. This policy explains what data the app handles, where it goes, and your rights over it.
1. Data Stored Locally on Your Device
All core app data (your expenses, income streams, balance, and settings) is stored exclusively on your device, in an encrypted database whose key is kept in your device's secure key storage. This data is never transmitted to any Bujit-controlled server and is only accessible from within the app. If you export a backup, it is a passphrase-encrypted file saved wherever you choose. You may, at any time, delete stored data from the settings; see Delete Your Data.
2. Bank Account Data (Plaid)
If you choose to link a bank account, Bujit uses Plaid, a third-party financial data provider, to fetch account balances. Your banking credentials are entered directly into Plaid's secure interface and are never seen or stored by Bujit. Plaid access tokens are stored locally on your device in the app's encrypted database. All balance fetches go through a Bujit-hosted backend that forwards the request to Plaid using your token. No account data is logged or retained on that backend. Disconnecting a bank in the app revokes its access token with Plaid.
Plaid's own privacy policy can be found at plaid.com/legal/privacy.
3. Task Sync (Google Tasks or Apple Reminders)
If you enable Google Tasks sync, the app uses Google Sign-In to obtain an OAuth token and creates a task list ("Bujit") in your Google Tasks account containing your expenses and income streams. Bujit stores only the signed-in account's email address (to show which account is connected) on your device, alongside the signed-in session managed by Google Sign-In. You can disconnect at any time from Settings, choosing whether to remove the Bujit-created tasks, and the app signs out.
Bujit requests only the Google Tasks permission. It reads the names of your task lists only to find its own "Bujit" list, and creates, updates and removes tasks only in that list; it never reads or changes your other lists' tasks. This data travels directly between your device and Google: it is never sent to a Bujit server, shared with third parties, or used for advertising.
Bujit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
On iPhone you can instead sync to Apple Reminders. With your permission, Bujit keeps a "Bujit" list in Reminders with the same items; Apple stores it on your device and, if you use iCloud, syncs it to your other Apple devices. Bujit only creates, updates and removes reminders in that list, and that data never reaches a Bujit server. You can turn this off in Settings, or remove Bujit's access in the iPhone Settings app.
4. Firebase Authentication and App Check
Bujit uses Firebase Anonymous Authentication solely to authenticate requests to the Bujit backend when fetching bank balances via Plaid. No personal information is associated with this anonymous session. To keep that backend from being used by anything but the genuine app, Bujit also uses Firebase App Check, which asks Google Play Integrity (on Android) or Apple App Attest (on iOS) to confirm the app is genuine. Firebase may collect diagnostic data per Google's Firebase privacy policy.
5. Purchases
Optional tips are processed entirely by Google Play or the App Store. Bujit never sees your payment details.
6. Data We Do Not Collect
Bujit does not collect, transmit, or sell any personally identifiable information. There are no analytics SDKs, advertising SDKs, or crash-reporting tools in the app.
7. Children's Privacy
Bujit is not directed at children under 13. We do not knowingly collect any data from children.
8. Deleting Your Data
Everything Bujit stores is on your device or in accounts you control, so you can delete it yourself at any time. Delete Your Data explains how, step by step.
9. Changes to This Policy
If this policy changes materially, the "Last updated" date above will be updated. Continued use of the app after changes are posted constitutes acceptance of the revised policy.
10. Contact
Questions or concerns? Use the contact form on the Support page.
The forms on the Support page (report a problem, suggest a feature, contact) are provided by Google Forms. They collect only what you type, including an email address if you choose to leave one for a reply, and do not require a Google account. Submissions go only to Bujit's developer, are used only to answer you and improve Bujit, are never sold or shared, and are deleted on request. Google's privacy policy applies to Google Forms.