Last updated: August 1, 2026
The controller of your personal data is CreativeJet Bartłomiej Ewiak, registered at ul. Kołowa 5, 30-134 Kraków, Poland, tax ID (NIP) 6772527555, entered in the Polish Central Register of Business Activity (CEIDG), referred to below as "we" or "us".
For anything related to personal data, write to support@bluepiggy.net.
We have not appointed a Data Protection Officer, as we are not required to. For anything concerning your data, use the address above.
Account data. Your email address and the display name you choose. Sign-in works through Google or Apple. Those providers pass us your email address, your name, and your profile picture if you share one. We never receive or store your Google or Apple password. If you use Apple's hide-my-email option at sign-in, all we receive is the relay address Apple generates.
Data you enter yourself. Transactions with their amount, currency, date, category and description, budgets, savings goals, and photos of receipts if you add them. This is information about your financial situation, so we treat it with particular care.
Shared board data. Which boards you belong to, who you have invited, and which settlements involve you.
Technical data. Your device's push notification token, if you allow notifications. We need it to tell you about invitations to shared boards. Our infrastructure provider additionally records technical server request logs, including IP address and request time, for security and error diagnostics.
Subscription data. If you buy the Pro plan, we process your subscription status, the start and end dates of the billing period, and the transaction identifier passed to us by the App Store or Google Play. We never receive or store your card number or any other payment details. Those are handled solely by Apple and Google as the sellers of the subscription.
What we do not collect. We use no analytics tools, no advertising tools, and no third-party crash reporting. We do not track which screens you open, we do not profile you, and we do not pass data to advertising networks. The summaries and charts in the Analysis tab are built solely from data you entered yourself and are calculated on your device.
We do not collect your bank account data. Bank import is not available yet.
Special categories of data. We do not process the data referred to in Art. 9 GDPR, that is data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, nor genetic or biometric data, data concerning health, or data concerning sex life. If you type such information into a transaction description yourself, it goes to the shared board on the same terms as any other description, which is why we ask you not to.
All of the permissions below are optional and you can withdraw them at any time in your system settings. Refusing one means losing that specific feature, not access to the app.
| Permission | What for |
|---|---|
| Camera | taking a photo of a receipt or invoice and attaching it to a transaction |
| Photo access | attaching a receipt already saved in your photo library |
| Saving to photo library | downloading an attached receipt photo back onto your device |
| Notifications | telling you about an invitation to a shared board |
The app does not ask for access to your location, contacts, microphone, or to read notifications from other apps. We do not collect that data and have no plans to.
| Purpose | Legal basis |
|---|---|
| Running your account and providing the app's features | Performance of a contract (Art. 6(1)(b) GDPR) |
| Syncing data between your devices and board members | Performance of a contract (Art. 6(1)(b) GDPR) |
| Managing Pro subscriptions and verifying entitlement to paid features | Performance of a contract (Art. 6(1)(b) GDPR) |
| Handling support requests and complaints | Performance of a contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR) |
| Security, abuse detection and error diagnostics | Legitimate interest (Art. 6(1)(f) GDPR) |
| Tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) |
No profiling or automated decisions. We do not make decisions about you based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR. We do not assess your creditworthiness, we do not build a score, and we do not predict your spending behaviour. The forecasts and summaries you see in the app are arithmetic on your own data, computed on your device and meant only for you. No decision on our part follows from them.
A shared board means, by design, that other people can see what is entered on it. When you join a board or invite someone to one, the other members see the transactions you add, along with amounts, categories, descriptions, any attached receipt photos, and your settlement balance.
Only invite people you trust. After you leave a board, the entries you made before remain visible to the other members, because they form part of a shared settlement and removing them would distort other people's balances.
We do not sell your data. We use external providers who process data solely on our instructions:
| Provider | Role | Server location |
|---|---|---|
| Supabase Inc. | database, authentication, receipt photo storage and server functions | European Union |
| Journey Mobile, Inc. (PowerSync) | syncing data between your devices and the server | European Union |
| 650 Industries, Inc. (Expo) | sending push notifications about board invitations | United States |
All we send to the push notification service is your device's notification token and the contents of the notification, meaning the board name and the name of the person inviting you. We never send your transactions, amounts or receipt photos there.
Apple Distribution International Ltd. (Ireland) and Google Ireland Ltd. (Ireland) have a different role. As the sellers of the Pro subscription they act towards you as independent controllers of their own transaction data and process it under their own privacy policies. All they pass on to us is your subscription status.
We may also disclose data to public authorities where the law requires it.
Your transactions, budgets, savings goals, settlements and receipt photos are stored solely on servers located in the European Union and are not transferred outside the European Economic Area.
Push notifications are the exception. Your notification token and the contents of the notification go to the Expo Push service run by 650 Industries, Inc. in the United States. That transfer relies on Standard Contractual Clauses approved by the European Commission. If you do not allow notifications, none of your data leaves the EEA.
We keep your account and the data in it for as long as you use the app.
You delete your account yourself in the app's settings, and deletion happens immediately, with no grace period. It removes your ability to sign in, your receipt photos and your profile picture, and any board nobody else joined is deleted in full along with its contents.
What we do keep:
If you own a board that other people have joined, we will ask you to transfer ownership to another member or delete that board before your account can be deleted.
We do not keep backups that would let us restore deleted data, so deletion is irreversible. Once it is done we cannot bring your account or its contents back.
You have the right to:
To exercise these rights, write to support@bluepiggy.net. We respond within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
The connection between the app and our servers is encrypted with TLS. Access to production data is limited to people who need it for their work.
Access to data in the database is controlled by row-level security rules enforced on the server. This means a request sent from the app can only ever reach your own data and the data of boards you are an active member of. That is decided by the database, not by the app's code.
Receipt photos are held in private storage with no public access. The app fetches them through signed, expiring links, and your permission for a given file is checked against your board membership.
We store no passwords, because sign-in is handled by Google and Apple.
The app is not intended for people under 16 years of age. If we learn that an account was created by someone younger, we will delete it together with its data.
We will tell you about material changes in the app or by email before they take effect. The date of the last update is shown at the top of this page.
CreativeJet Bartłomiej Ewiak
ul. Kołowa 5
30-134 Kraków, Poland
NIP 6772527555
support@bluepiggy.net