Back

Privacy Policy

Last updated: 27 June 2026

This policy explains what bdgtplnr collects, why we collect it, and the choices you have. bdgtplnr is a personal double-entry ledger. We try to collect only what the product needs, and to keep what you enter yours.

What we collect

  • Your email address, used to sign you in and to deliver one-time sign-in codes.
  • The ledger data you choose to enter: accounts, entries, payments, investments, balances, and currency information.
  • If you use social sign-in, the basic profile details Google or Facebook share with us, such as your name and email address.

How you sign in

Sign-in is passwordless. When you sign in, we email you a one-time code. We do not store passwords, so there is no password to lose or leak. You may also choose to sign in with Google or Facebook; if you do, that step is handled by the provider and is subject to their terms.

How your data is protected

Personal fields are encrypted at rest using AES-256-GCM, with key rotation. Data travels over encrypted connections (HTTPS). The service is hosted in the European Union, in Germany (Hetzner).

Service providers we rely on

We use a small number of providers to run the service:

  • Email delivery (Zoho), used to send your one-time sign-in codes.
  • A third-party model provider, used only if you use the optional advisor or voice-to-text features. The relevant text or audio is sent to that provider to generate a response.
  • A vector store, which holds embeddings of your ledger so the advisor can ground its answers in your own data.

Each provider processes your data only to perform the function described above.

What we do not do

  • We do not show advertising.
  • We do not sell your data.
  • We do not use third-party analytics or tracking cookies.

What we store on your device

To run the session you asked for, we keep a small amount of data in your browser:

  • A sign-in token and your email address in localStorage, so you stay signed in.
  • Draft and chat state in sessionStorage, so a form or conversation in progress is not lost.

All of this is strictly necessary for the session you requested, which is why there is no cookie-consent banner.

Your rights

You can ask to access, export, correct, or delete your data. These rights are recognized under the GDPR and the CCPA. To exercise them today, email hello@bdgtplnr.com and we will help. Self-service export and account deletion are being added.

Contact

For any question about this policy or your data, write to hello@bdgtplnr.com.