Privacy policy

How we collect, use, and protect your data.

Effective date: February 21, 2026

Borderless Budget ("we," "us," "our") is a multi-currency budgeting app built for people who live in more than one currency. This privacy policy explains what data we collect, why we collect it, how we use it, and what rights you have over it.

We believe in plain language. No legal fog. If something is unclear, email us at privacy@borderlessbudget.com and we'll explain it.


What we collect

Account information

When you create an account, we collect your name, email address, and a password (stored as a secure hash, we never see your actual password).

Financial data

When you connect a bank account, we receive your account balances, transaction history, and account metadata (account name, type, and currency) through our banking providers. We don't receive or store your banking credentials, those go directly to your bank through our banking providers.

Usage data

We collect basic usage data to keep the service running: pages visited, features used, and error logs. We don't track you across other websites.

Consent records

When you agree to our terms or authorize a bank connection, we store a record of that consent along with a timestamp and IP address. This is required for legal compliance.


Why we collect it

We use your data to:

  • Provide the budgeting service, display your accounts, track spending, and manage budgets across currencies
  • Convert transactions between currencies using daily exchange rates
  • Categorize your transactions and generate budget recommendations using AI
  • Send you service-related emails (account alerts, bank connection issues)
  • Fix bugs and improve the product

We don't sell your data. We don't show you ads.


AI data processing

We use AI to automatically categorize your transactions and generate budget recommendations. Here's exactly how that works:

  • What we send: merchant name, transaction description, amount, and account type. We don't send your name, email, account numbers, or bank credentials.
  • Where it's processed: AI models running within our own cloud infrastructure.
  • Data storage: Our AI provider does not store your transaction data after processing. Your data is not used to train AI models.

You can opt out of AI categorization before connecting your bank accounts. If you opt out, you can still categorize transactions manually.


Who we share data with

We share data only with the services needed to run Borderless Budget:

ServicePurposeData shared
Banking provider (US & Canada)US and Canadian bank connectionsOur banking provider connects directly to your bank. We receive transactions and balances.
EU banking providerEuropean and UK bank connectionsOur EU banking provider connects directly to your bank. We receive transactions and balances.
Cloud infrastructure providerCloud hosting and infrastructureAll data is stored and processed on our cloud servers (database, compute, storage).
AI providerAI categorization and budget generationMerchant name, description, amount, account type. No personal identifiers.
Payment processorPayment processingEmail and payment details for subscription billing. We don't store your card number.

We don't share your data with advertisers, data brokers, or anyone else.


How we protect your data

  • All data is encrypted in transit (TLS) and at rest (AES-256)
  • Your database runs in a private network, it's not accessible from the public internet
  • Banking credentials are never stored by us, they go directly to your bank through our banking providers
  • We use phishing-resistant authentication (passkeys/WebAuthn)
  • Access to production systems requires multi-factor authentication

How long we keep your data

While your account is active

We keep your transaction data, budgets, and account information for as long as your account is active. You can export or delete your data at any time.

When you delete your account

  • Within 30 days, we delete all your personal data, transaction data, budgets, and bank connections.
  • We revoke all access tokens with our banking providers.
  • We retain a minimal compliance record (hashed user ID, account creation date, deletion date) for 7 years, as required for financial record-keeping.

Your rights

Wherever you live, you can exercise the following rights by emailing privacy@borderlessbudget.com or through your account settings:

  • Access: Request a copy of all data we hold about you.
  • Portability: Export your data in a standard format (JSON or CSV).
  • Correction: Update or correct inaccurate data.
  • Deletion: Delete your account and all associated data.
  • Withdraw consent: Withdraw consent for data processing at any time. Withdrawing consent for bank data access will disconnect your bank accounts.

For EU/EEA residents (GDPR)

Our legal basis for processing your data is your consent (for bank connections and AI processing) and legitimate interest (for providing the budgeting service you signed up for). You have the right to lodge a complaint with your local data protection authority.

For California residents (CCPA)

You have the right to know what personal information we collect, to delete your personal information, and to opt out of the sale of your personal information. We don't sell your personal information.


Cookies

We use essential cookies to keep you logged in and remember your preferences. We don't use tracking cookies or third-party advertising cookies.


Children

Borderless Budget is not intended for anyone under 18. We don't knowingly collect data from minors.


Changes to this policy

If we make significant changes, we'll notify you by email and update the effective date at the top of this page. Continued use of Borderless Budget after changes means you accept the updated policy.


Contact us

Questions about your privacy? Email us at privacy@borderlessbudget.com.