Skip to content

For now, only in El Salvador.

Buxy
ESSign in
Back to home

Privacy policy

In effect since October 30, 2026

Version 4

This is a translation; the Spanish version prevails.

This policy explains what data Buxy processes, why and how it is protected. It must be accepted, together with the Terms of Use, to create an account.

1. Controller and contact

The controller is Villasoftware, from El Salvador. For any data matter: soporte@buxy.app.

2. What data is processed and from where

  • Account: the email, the name for the greeting, the country and the confirmation of being of age.
  • Recorded by hand: expenses, income, accounts, goals, debts and notes.
  • From Gmail, with its own consent: what the Gmail pilot terms explain. Connecting Gmail is separate and optional.
  • From the phone, if the person enables it: bank notifications and SMS the person chooses to share.
  • Photos and files the person attaches: receipt photos, screenshots and PDF receipts. The file is deleted after 30 days; what was recorded with it stays, such as the products of a receipt.
  • Where a payment happened, if the person enables it: the Apple Wallet shortcut on iPhone can send the place and coordinates of the payment. They are stored encrypted, shown only to the person, and can be removed.
  • From the device: platform, app version, build, system version and a random identifier, never a hardware one.

3. Why it is used and on what basis

  • To provide the service: record, sort and show the person's finances.
  • For the security of accounts and of the service.
  • The basis is the person's consent and the performance of the service they requested.

4. What is never done

  • Data is not sold.
  • No ads are shown and data is not used for advertising.
  • Data is not used to assess credit or to decide anything about the person.
  • Data is not used to train artificial intelligence models.

5. Artificial intelligence

  • To sort purchases, only the merchant's name is sent to an AI provider, never amounts or people's names.
  • To read the credit card statements that arrive in Gmail, the statement's text is sent to the AI provider, with the person's name and address covered. It includes the period's amounts, dates and merchants.
  • In the chat, the provider receives the question and the Buxy data needed to answer it, only for that. Payment locations are never sent to it.
  • To read a photo or PDF attached in the chat, the provider receives the file, only to read it.
  • The providers are Anthropic (Claude) and Google (Gemini), through their paid APIs; they do not use that data to train.

6. Processors and transfer to the United States

Data is processed on processors' servers in the United States: Laravel Cloud, Google Cloud, Resend, Anthropic and Google Gemini, and RevenueCat when billing exists. Sentry receives technical errors from the app and the server, without amounts, merchants or bank texts. Expo delivers app updates and receives no financial data.

7. Per-person encryption and cryptographic deletion

  • Each person has their own encryption key, protected by a master key.
  • Deleting the account deletes that key, and what was encrypted becomes unreadable, in backups too.

8. How long data is kept

  • Gmail email bodies are deleted after 30 days.
  • Attached photos and files are deleted after 30 days.
  • Platform backups are kept for a limited time until they are renewed.
  • Pseudonymous receipts of the pilot place and of consent remain, which do not identify the person.

9. Rights over the data

  • A copy, a correction or deletion of the data can be requested, and consent withdrawn.
  • To exercise them, write to the contact in section 1. The account can also be deleted directly in the app.

10. Minors

Buxy is only for people 18 or older. Data about minors is not knowingly collected.

11. What is recorded on acceptance

On acceptance, Buxy stores the version, the hash of the text, the language, the server date and time, the IP encrypted with the person's key, an approximate location derived from the IP, and device data. The internal console never shows the IP or the browser identifier.

12. Changes to this policy

  • Each version has a number. A published version is never modified.
  • If the change is material, acceptance of the new version is required. If it is minor, it is published without asking again.

13. Google Limited Use

Buxy's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.