Privacy Notice

Who we are

Bill Buddy AI is operated by Jemere Woods ("the Seller", "we"). We act as the data controller for personal data collected through the service. You can reach us at jemerewoods5@gmail.com.

What we collect and why

• Account data — email address, login credentials, and (if you use Google sign-in) your name and profile photo. Used to create and secure your account. Legal basis: performance of contract.
• Financial data you enter — bills, income, budgets and related notes. Used to provide the tracking and AI assistant features. Legal basis: performance of contract.
• Support messages — anything you send us by email or through in-app forms. Used to respond to you. Legal basis: legitimate interest in supporting our users.
• Usage and device data — IP address, browser type, pages viewed, error logs. Used for security, fraud prevention and product improvement. Legal basis: legitimate interest.
• Marketing — only if you opt in. Legal basis: consent, which you can withdraw at any time.

Who we share data with

• Paddle — our Merchant of Record. Paddle handles checkout, subscription management, payments, tax compliance and invoicing. See Paddle's privacy policy.
• Hosting and infrastructure providers that store the database and run the application on our behalf.
• AI model providers that process the questions you send to the AI assistant and the relevant context, so they can generate a reply.
• Professional advisers (legal, accounting) where needed.
• Authorities where we are required to by law.

How long we keep data

We keep your data for as long as your account is active. When you delete your account we delete or anonymise your personal data within 90 days, unless we are legally required to keep it longer (for example, tax records held by Paddle).

Your rights

Depending on where you live you may have the right to access, correct, delete, export or restrict our use of your personal data, to object to certain processing, and to withdraw consent. To exercise any of these rights, email jemerewoods5@gmail.com. You may also have the right to complain to your local data protection authority.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and audit logs. No system is perfectly secure, and we cannot guarantee absolute security.

Cookies

We use a small number of essential cookies to keep you signed in and to remember settings. We do not use advertising cookies. You can control cookies through your browser settings.

International transfers

Your data may be processed in countries other than your own, including by our service providers. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Changes

We'll update this notice when our practices change and post the new version here with an updated date.