Privacy Policy

1 Who We Are

Holy Budget is a free, web-based personal budgeting tool available at holybudget.explorism.blog (“the Site,” “we,” “our,” or “us”). This Privacy Policy explains what personal information we collect, how we use it, how we store it, and what rights you have regarding your data.

By creating an account or using the Site, you agree to the practices described in this policy.

2 What Information We Collect

We collect the minimum amount of information needed to make the budgeting tool work for you.

a) Account information

• When you register directly: your username, email address, and password (password is stored as a secure hash, never in plain text).
• When you sign in with Google: your name, email address, and profile picture as provided by Google’s OAuth service. We do not receive or store your Google password.

b) Budget data

• All income, expense, and saving entries you add — including amounts, categories, dates, and notes.
• Your starting savings amount.
• Your currency preference (e.g., INR, USD, EUR).

c) Contact form submissions

• If you use the Contact Us form: your name, email address, subject, and message.
• Your IP address is temporarily logged with contact submissions for rate-limiting purposes only (to prevent spam).

d) Analytics data

• We use Google Analytics (tag ID: G-DH694K78Z3) to understand how visitors use the Site — such as which pages are visited, how long visits last, and what devices and browsers are used.
• Google Analytics collects data through cookies and may process your IP address, browser type, device information, and browsing behavior. This data is anonymized and aggregated — we cannot identify individual users from it.
• Google’s privacy policy applies to the data they collect: policies.google.com/privacy.

3 What We Do NOT Collect

We want to be clear about what we don’t do:

• We do not collect bank account details, credit/debit card numbers, or any financial credentials.
• We do not connect to any bank, payment gateway, or financial institution.
• We do not run advertising or ad-tracking scripts.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.
• We do not build user profiles for targeted advertising.

Every number in the tracker is one you’ve typed in yourself. We have no access to your actual bank balance or transactions.

4 How We Use Your Information

• Account information — to authenticate you, display your name in the app, and communicate with you if needed.
• Budget data — to store and display your entries, calculate totals, generate charts, and carry forward balances between months. Your budget data is used solely to power the tracker for you.
• Contact submissions — to respond to your questions, feedback, or requests.
• Analytics data — to understand usage patterns and improve the Site. We do not use analytics data to identify or target individuals.

5 How Your Data Is Stored

Your budget entries and account information are stored in the Site’s WordPress database, hosted on our web server. Budget data is linked to your user account via WordPress’s wp_usermeta table and is accessible only when you are logged in.

As an additional safety measure, a copy of your budget data is stored in your browser’s localStorage (key: btk_budget_data_v1). This local copy acts as a backup in case of connectivity issues and never leaves your device.

Contact form submissions are stored as a custom post type in the WordPress database, visible only to site administrators.

6 Cookies and Local Storage

The Site uses the following cookies and browser storage:

We do not use cookies for advertising, cross-site tracking, or profiling. All cookies are either functional (required for the site to work) or analytical (anonymized usage data).

7 Third-Party Services

The Site integrates with the following third-party services:

• Google OAuth — for “Sign in with Google” functionality. When you sign in with Google, we receive your name, email, and profile picture. We do not access your Gmail, Drive, or any other Google data. Google’s Privacy Policy.
• Google Analytics — for anonymized website usage statistics. Google’s Privacy Policy.
• Google Fonts — for loading the Fraunces and Plus Jakarta Sans typefaces. Font requests are made to Google’s servers. Google Fonts Privacy FAQ.
• Chart.js — for rendering charts in the budget tracker. Loaded from the cdnjs CDN. No user data is sent to Chart.js or cdnjs.

We do not use any other third-party tracking, advertising, or data-processing services.

8 Data Security

We take reasonable measures to protect your information:

• The Site is served over HTTPS (SSL/TLS encryption) so data transmitted between your browser and our server is encrypted.
• Passwords are stored as secure hashes, never in plain text.
• Budget data is accessible only through authenticated REST API endpoints that verify your login session.
• Contact form submissions include rate limiting (max 5 per IP per hour) to prevent abuse.

However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9 Your Rights and Choices

You have the following rights regarding your data:

• Access — you can view all your budget data anytime by logging in. The admin panel under “Budget Data” shows exactly what’s stored.
• Edit — you can edit or delete any individual entry directly in the tracker.
• Export — your data is visible in the tracker and summary page; you can copy or screenshot it at any time.
• Delete — you can request complete deletion of your account and all associated data by emailing us.
• Opt out of analytics — you can block Google Analytics by using a browser extension like Google’s opt-out add-on or by enabling “Do Not Track” in your browser.
• Clear local storage — you can clear the localStorage backup at any time through your browser’s developer tools or settings.

10 Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will permanently remove your account and all associated budget data, contact submissions, and metadata within 30 days of the request.

Anonymized analytics data collected by Google Analytics is retained according to Google’s retention policies and cannot be linked back to your account.

11 Children’s Privacy

Holy Budget is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12 International Users

Holy Budget is operated from India. If you access the Site from outside India, please be aware that your data may be transferred to, stored, and processed in India. By using the Site, you consent to the transfer of your information to India.

We aim to comply with applicable data protection laws, including the Information Technology Act, 2000 and India’s Digital Personal Data Protection Act, 2023 (DPDP Act), as well as the general principles of the GDPR for users in the European Economic Area.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will make reasonable efforts to notify you — such as displaying a notice on the Site.

Your continued use of the Site after changes are posted constitutes your acceptance of the revised policy.

14 Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, you can reach us at:

Maslandapur, West Bengal, India