Privacy Policy
Last updated: July 25, 2026
This Privacy Policy explains how bucks.ai ("we", "us", or "our") collects, uses, and protects your information when you use the bucks.ai mobile application ("the App").
1. Information We Collect
Information you provide directly
- Phone number — used to verify your identity via one-time passcode (OTP) during sign-in.
- Email address — collected at sign-up for account recovery and service communications.
- Expense data — amounts, descriptions, categories, and dates you enter manually or via voice.
- Contact names — names you assign to friends or group members within the App.
Information collected automatically
- Voice input — when you use voice logging, your speech is transcribed to text. The audio is processed in real time and is not stored.
- Push notification token — a device token used to deliver push notifications through Firebase Cloud Messaging (FCM). We do not use this token to identify you outside the App.
2. How We Use Your Information
| Purpose | Data used |
|---|---|
| Account creation and authentication | Phone number, email |
| Expense tracking and splitting | Expense data, contact names |
| AI-powered voice logging | Voice input (transcribed, not retained as audio) |
| Push notifications | FCM device token |
| Customer support | Email, account details |
We do not sell your personal information. We do not use your data for advertising.
3. How We Store Your Information
- On-device: Expense data, groups, and contacts are stored locally in a SQLite database on your device, protected by your device's built-in storage security.
- Our servers: Your account information and synced data are stored on our backend servers. Servers are located in the United States.
- Retention: We retain your data for as long as your account is active. When you delete your account, your data is permanently deleted within 30 days.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy.
| Service | Purpose | Privacy policy |
|---|---|---|
| Google Gemini API | Powers AI expense parsing on our backend | Google Privacy Policy |
| Firebase (Google) | Push notifications via FCM | Firebase Privacy Policy |
Your Gemini API key is managed entirely on our backend — we do not collect or store an API key from you.
5. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and all associated data.
To exercise any of these rights, contact us at support@mybucks.ai.
6. Additional Rights for EEA and UK Residents (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, the following applies in addition to section 5.
Lawful basis for processing
| Processing activity | Lawful basis |
|---|---|
| Account creation and authentication | Performance of a contract |
| Expense tracking and splitting | Performance of a contract |
| AI-powered voice logging | Performance of a contract |
| Push notifications | Legitimate interest (delivering notifications you have opted into) |
| Customer support | Legitimate interest |
Your rights under GDPR
In addition to the rights in section 5, you have the right to:
- Restrict processing — ask us to pause processing your data in certain circumstances.
- Object to processing — object to processing based on legitimate interest.
- Data portability — receive your personal data in a structured, machine-readable format and transfer it to another controller.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
International data transfers
Our servers are located in the United States. When your data is transferred from the EEA or UK to the US, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the transfer mechanism to ensure your data receives an adequate level of protection.
Supervisory authority
You have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at edpb.europa.eu.
To exercise any GDPR rights, contact us at support@mybucks.ai. We will respond within 30 days.
7. Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, the following applies in addition to section 5.
Categories of personal information we collect
| CCPA category | Examples |
|---|---|
| Identifiers | Phone number, email address, FCM device token |
| Commercial information | Expense records, group and contact data |
| Audio/electronic data | Voice input (transcribed in real time, not retained as audio) |
We do not sell or share your personal information
We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioural advertising purposes.
Your rights under CCPA/CPRA
- Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to delete — request deletion of your personal information, subject to certain exceptions.
- Right to correct — request correction of inaccurate personal information.
- Right to opt out of sale or sharing — we do not sell or share personal information, so no opt-out is required.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
To exercise any CCPA/CPRA rights, contact us at support@mybucks.ai. We will respond within 45 days as required by law.
8. Children
The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@mybucks.ai and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you via the App or email if the changes are material.
10. Contact
If you have questions about this Privacy Policy, contact us at: