Privacy Policy
By default, the financial figures you enter into Budget Vista stay on your own phone and are never sent to us. This notice sets out exactly what is collected when that changes — an account, sync, or a crash report — by whom, and why, in plain terms rather than a template.
Who is responsible for your information
Dolme SA (Pty) Ltd, trading as Dolme Innovations — a private company registered in the Republic of South Africa. Information Officer: Tebogo Mazibuko, privacy@dolme.co.za.
What is collected, and where it goes
These are separate categories, because they behave differently.
1. The figures you enter
Your income, expenses, debts, savings, goals and the decisions you model. By default this is stored by the app on your own phone only. It is not transmitted to us, we cannot see it, cannot recover it for you, and cannot produce it if someone else demands it — because we do not have it. This changes only if you switch on You → Backup and sync → "Sync across devices" — see category 3.
2. Your account
Creating an account, logging in, and resetting a password are handled by Supabase, our authentication provider, on our behalf. Supabase holds your email address, the name you gave at sign-up, and your password as a secure hash it authenticates against — we never see or store the password itself. The emails this generates are delivered by Resend, our email provider, on Supabase's instruction; Resend sees your email address and the content of that one email, nothing else.
3. A synced plan, if you turn syncing on
Off by default. If you switch it on, the figures in category 1 — your baseline and decisions — are uploaded to a database row tied to your account, hosted by Supabase, so a second device signed into the same account can find the plan. Turning sync back off stops this device from uploading further changes; it does not delete what was already uploaded. "Delete my synced copy" in the app removes it — see Data Retention below.
4. Crash and error diagnostics
If something in the app breaks, a stack trace, the app version, and basic device and operating-system information are sent to Sentry, our error-monitoring provider, so we can fix it. None of the figures you enter are ever included, and session replay (a recording of what was on screen) is not used — a recording of this app is a recording of somebody's finances, so it was never switched on.
5. Technical information needed to serve the app
To deliver the app to your device at all, our hosting provider necessarily processes your IP address, the time of the request, and basic technical information, in ordinary server logs — the same information any connected app receives by the nature of how the internet works.
6. Advertising, in the free version
The free version of Budget Vista shows a banner advertisement, and a short full-screen advertisement that you may choose to watch to try a Plus feature once, both served by Google AdMob. To show and measure an ad, Google receives technical information from your device — such as its advertising identifier, IP address, device model and operating-system version — and records whether the ad was shown or tapped. A general location can be estimated from the IP address; the app itself never asks for or reads your location. We ask Google for non-personalised ads, so ads are not tailored to your interests. None of the figures you enter, and nothing from your plan, is ever given to Google or used to choose an ad. Budget Vista Plus removes the advertisement, and no advertising information is collected from Plus subscribers. You can also reset or delete your advertising identifier in your Android settings.
7. Purchases (Budget Vista Plus)
Budget Vista Plus is a paid subscription bought through Google Play. Google handles the payment — we never see or store your card or payment details. To know whether Plus is active on your account, our subscription provider, RevenueCat, receives a random identifier for your account (not your email address), your purchase and subscription status, and basic device information. It does not receive the figures you enter.
8. Payday reminders (optional)
If you set a payday and switch on the reminder in the Android app, it is scheduled on your phone itself and shown by Android at the time you chose. It is not sent from a server, no push-notification token is created, and nothing about the reminder or your payday is sent to us or to anyone else.
Whether supplying information is voluntary
An account is needed to use Budget Vista, so we ask for your email address and name when you create one. Everything beyond that is voluntary: you choose whether to enter any figures of your own (the app starts with clearly-labelled example data you can use as it is), and turning on sync is a separate, further choice on top of that.
Children
Budget Vista is intended for people aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, contact the Information Officer and we will delete it.
Why it is collected
The figures you enter are used for one purpose only: to compute and display the projections you asked for. Your account exists so you can sign back in and, if you choose, sync a plan between devices. None of this is used for profiling, marketing, research, model training or any secondary purpose.
Who it is shared with
Nobody, while sync is off — the figures you enter are never sent anywhere. Your account, and a synced plan where enabled, are processed by Supabase, hosted in the European Union (Frankfurt, Germany). Account emails pass through Resend, which processes them in the United States under the EU-US Data Privacy Framework. Crash and error diagnostics are processed by Sentry, also in the European Union (Germany), regardless of sync. In the free version, Google AdMob (Google, United States and other countries) receives the technical information described in section 6 to serve the advertisement. Subscription status is processed by RevenueCat (United States), and payment by Google Play. We do not sell, rent or trade personal information.
| Provider | What it processes | Region |
|---|---|---|
| Supabase | Account (email, name), and a synced plan if enabled | EU — Frankfurt, Germany |
| Sentry | Crash/error diagnostics only — never your figures | EU — Germany |
| Resend | Delivery of account emails (confirmation, password reset) | United States (EU-US Data Privacy Framework) |
| Google AdMob | Serving and measuring the banner and optional full-screen advertisements in the free version — device identifiers and IP address, never your figures | United States and other countries where Google operates |
| RevenueCat | Whether Budget Vista Plus is active — account identifier, purchase status, basic device information | United States |
| Google Play | Taking payment for Budget Vista Plus — we never receive your payment details | Google's own terms apply |
How long it is kept
- The figures you enter: for as long as you keep them on your phone. While sync is off, we hold no copy at all.
- Your account: for as long as the account exists. "Delete account" in the app, or a request to our Information Officer, removes it.
- A synced plan: for as long as sync stays useful to you; deleted on request to the Information Officer, via "Delete my data", via "Delete my synced copy", or via "Delete account".
- Crash reports: under Sentry's retention schedule for our plan, then deleted.
- Advertising information: held by Google under its own retention schedule; we hold none of it.
- Subscription records: held by RevenueCat and Google Play for as long as your subscription exists and as long as the law requires for financial records.
- Account email delivery records: under Resend's own retention schedule, then deleted.
Security
The app is served over an encrypted connection, and traffic to Supabase is encrypted in transit. For figures that stay on your phone by default, the main safeguard is the security of the phone itself — a screen lock protects this data more than anything we could do at our end. Your account password is never visible to us at any point.
Your rights under POPIA
You may, at any time:
- Ask whether we hold personal information about you, and ask for a copy.
- Ask for information that is inaccurate, out of date or incomplete to be corrected.
- Ask for your account and any synced data to be deleted — see /account-deletion.html for exactly how, with or without the app.
- Object to processing, on reasonable grounds.
- Complain to us, or directly to the Information Regulator, at any time.
Most of these are self-service in the app: You → About Budget Vista has "Download my data" and the full POPIA Privacy Choices document; You → Danger zone has "Delete my data", "Delete my synced copy" and "Delete account".
Contact and complaints
Write to privacy@dolme.co.za first so we can try to resolve it. You may also complain directly to the Information Regulator (South Africa) — telephone 010 023 5200, email enquiries@inforegulator.org.za, or use the complaints portal at inforegulator.org.za/complaints.