Privacy notice

Effective 24 October 2026

Who is responsible

LD Budget is operated by Samer Mahamid, Bulgaria. For privacy requests, contact [email protected].

What we process and why

We process your name, email address, password hash, email verification status and acceptance of the service terms to create and protect your account. We process the accounts, categories, plans, payments, balances, transfers and notes you enter to provide your private budget. These operations are necessary to perform our service agreement with you (GDPR Article 6(1)(b)). Please do not enter card numbers, bank login details or sensitive personal information in notes.

For security and reliability we process limited technical information, such as request time, IP address and failed authentication attempts, on the basis of our legitimate interest in preventing abuse and maintaining the service (Article 6(1)(f)). You may object to this processing. We do not use your budget for advertising, sell your personal data or make automated financial decisions about you.

Storage and service providers

Budget data is stored on our server, separated by user account. Hosting, email delivery and network/security providers process the data needed to operate the service. Cloudflare handles network traffic and may process technical connection data internationally under its data protection terms and applicable transfer safeguards. Verification and recovery emails contain account links, not your budget. Access is limited to you and authorised technical administration when needed for support or security; this service is not end-to-end encrypted.

Retention and deletion

Your budget stays while your account exists. Settings lets you export it or delete the account and budget from the active database immediately. Up to five recovery copies are kept after imports and are deleted with your account. Unverified registrations expire within eight days. Authentication throttling records expire within two days. Operational backups are retained for up to 30 days; deleted data may remain in those restricted copies until rotation and is not used for ordinary operations. Where a legal obligation or a specific security incident requires longer retention, only the necessary records are retained for that purpose.

Your rights

You can access, correct and export your budget in the app. You may also request access, correction, erasure, restriction, portability, or object where applicable by emailing [email protected]. We normally respond within one month and may need to verify your identity. You can complain to the Bulgarian Commission for Personal Data Protection or your local supervisory authority. cpdp.bg.

Providing an email and password is required for an account; without them we cannot offer the private budgeting service. The service is intended for adults. Essential cookies and device storage are explained separately.