Privacy Policy

Effective Date: April 5, 2026

1. Introduction

The operators of easyfamilybudget.net ("we", "us", or "our") operate Easy Family Budget, a family budget tracking application (the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service. By accessing or using the Service, you agree to the practices described in this policy.

This policy should be read alongside our Terms of Service.

2. Information We Collect

We collect the following categories of information when you use the Service:

Account Information

Your name and email address, provided at registration;
Your account preferences, including your default display currency and timezone.

Financial Data

Spending entries you create, including amounts, currencies, dates, and notes;
Category assignments for spending entries;
Cost-splitting ratios configured for your household;
Settlement records between family members.

Technical Data

Your IP address and browser type, collected automatically when you access the Service;
Session data maintained through cookies necessary for authentication and security (see Section 5);
Log data related to your interactions with the Service, used for debugging and service improvement.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service;
Authenticate your identity and manage your account;
Calculate and display spending summaries, balances, and reports;
Convert amounts between currencies using exchange rate data;
Respond to your support requests and communications;
Comply with applicable legal obligations.

We do not use your financial data for advertising, profiling, or any purpose unrelated to providing the Service.

4. Data Sharing & Third Parties

We do not sell your personal information to any third party.

We share data with third parties only in the following limited circumstances:

Exchange Rate Provider: To perform currency conversions, the Service makes requests to the open.er-api.com exchange rate API. These requests include only currency codes (e.g., "CAD", "TWD") and do not include any personal information or financial entry data.
Infrastructure Providers: We use hosting and infrastructure services to operate the Service. These providers process data on our behalf and are bound by data processing agreements.
Legal Requirements: We may disclose your information if required to do so by law or in response to a valid legal process (such as a court order or government request).

5. Cookies & Session Data

The Service uses cookies strictly for functional purposes. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

The cookies used by the Service are:

Session Cookie: A session cookie is set when you log in to maintain your authenticated session. This cookie expires when you close your browser or log out. It is required for the Service to function.
CSRF Token Cookie: A cookie is used to store a CSRF (Cross-Site Request Forgery) protection token. This is a security measure that prevents malicious third-party sites from submitting requests on your behalf. It is required for the Service to function.
Cookie Consent Cookie: A cookie is used to store your cookie consent preference. This cookie persists across sessions so that you are not asked to consent repeatedly. It is required for the Service to remember your preference.

Because these cookies are strictly necessary for the operation of the Service, they are used without requiring separate consent beyond the initial acknowledgement. No analytics or behavioural profiling is performed through cookies at this time.

6. Data Security

We implement technical and organizational measures designed to protect your personal information against unauthorized access, loss, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and secure credential storage.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot and do not guarantee the absolute security of your data. You acknowledge that you provide your personal information and financial data at your own risk. We shall not be liable for any unauthorized access to, or loss, corruption, or breach of, your data resulting from factors beyond our reasonable control, including but not limited to cyberattacks, vulnerabilities in third-party software, or failures of hosting and infrastructure providers.

7. Data Breach Notification

In the event of a confidentiality incident involving your personal information that poses a risk of serious injury, we will:

Notify the Commission d'accès à l'information du Québec (CAI) as required by applicable Quebec privacy law;
Notify affected individuals in a timely manner, providing a description of the incident, the types of information involved, and recommended steps to mitigate potential harm;
Take reasonable measures to reduce the risk of injury and prevent future incidents.

We maintain an internal incident log as required by applicable law.

8. Data Retention

We retain your account information and financial data for as long as your account remains active, or as necessary to provide the Service. If you request deletion of your account, we will delete your personal data within a reasonable timeframe, subject to any legal obligations that require us to retain certain records.

Aggregated or anonymized data that cannot reasonably be used to identify you may be retained indefinitely.

9. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

Access: You may request a copy of the personal information we hold about you;
Correction: You may request that we correct inaccurate or incomplete information;
Deletion: You may request that we delete your account and associated personal data;
Portability: You may request your data in a portable format where technically feasible.

To exercise any of these rights, please contact us at the email address listed in Section 13. We will respond to your request within the timeframe required by applicable law.

10. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in jurisdictions where a higher age threshold applies under applicable law). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will take prompt steps to delete that information.

11. International Data Transfers

Easy Family Budget is operated from Canada. Your data may be stored and processed in Canada or in other countries where our infrastructure providers operate. By using the Service, you acknowledge that your data may be transferred to and processed in Canada or other jurisdictions that may have different data protection laws than those in your country of residence.

Where required by applicable law, we take appropriate steps to ensure that any international transfers of personal data are subject to adequate safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: contact@easyfamilybudget.net