Privacy Policy

1. Who we are

MADBU is a budgeting app operated by Saveure LLC, doing business as MADBU ("MADBU", "we", "us"), 1070 Montgomery Rd Unit 2101, Altamonte Springs, FL 32714, United States. This policy covers madbu.com and the MADBU app. Questions go to contact@madbu.com.

By using MADBU you agree to this policy and to our Terms of Service.

2. Information we collect

Information you give us

• Account details: your first name, email address and password. Passwords are stored only as a salted hash, never in readable form.
• Your money records: the entries you log (amount, date, type, category and any note), budgets, category limits, savings goals, accounts and balances, debts, recurring bills, and files you import.
• Two step sign in: if you turn it on, the secret key shared with your authenticator app, stored encrypted, and your backup codes, stored only as hashes.
• Messages: what you send us through support, the consultation request form or email.

Information from your bank, if you connect one

Bank connection is optional and available on the MADBUMAX plan. If you connect a bank we receive account and transaction information through Plaid. The details are in section 3.

Payment information

Paid plans are billed by Stripe. Your card number goes straight to Stripe and never reaches our servers. We receive a customer reference, your plan, its status and renewal date, and the outcome of each charge.

Information collected automatically

• Technical data: IP address, browser and device type, pages requested and the time of each request, kept in server logs for security and troubleshooting.
• Notification details: if you turn on push notifications, the push address your browser issues for your device.
• Activity inside the app: streaks, points, badges and challenge progress, which come from your own logging.

3. Bank connections and Plaid

MADBU uses Plaid Inc. ("Plaid") to gather your data from financial institutions. By using our service, you grant MADBU and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid in accordance with the Plaid End User Privacy Policy.

How connecting works

You choose your bank and sign in on a secure screen provided by Plaid or by your bank. MADBU never sees, receives or stores your online banking username or password. After you approve, Plaid gives us a secure token for that connection. The token allows reading only. MADBU cannot move money, make payments or change anything at your bank.

What we receive through Plaid

• The name of your bank and of each account you choose to share, the account type, and the last four digits of the account number.
• Current and available balances.
• Transactions: date, amount, merchant or description, and Plaid's category. On first connection this covers roughly the previous 90 days, then new activity as it posts.
• For credit cards, student loans and mortgages where your bank supports it: interest rate, minimum payment and due date.

We do not receive your full account number, your routing number or your bank login through this connection.

What we do with it

We use bank data for one purpose: to run MADBU for you. That means adding your transactions as entries, sorting them into categories, keeping balances and net worth current, spotting recurring bills and subscriptions, and feeding the forecast and debt payoff planner. We do not sell bank data, we do not use it for advertising, and we do not share it with anyone except the service providers listed in section 6 who help us run the app.

How it is protected

Connection tokens are encrypted before they are stored, are kept only on our server, and are never sent to your browser. All traffic between you, MADBU and Plaid is encrypted in transit.

Disconnecting

• You can disconnect a bank at any time in the app under Wealth, Bank connection. We then tell Plaid to delete the connection and we destroy our token. Entries already imported stay in your history until you delete them.
• Deleting your MADBU account removes every bank connection at Plaid and deletes the imported data with the rest of your account.
• You can also see and manage the connections Plaid holds for you at my.plaid.com.

4. How we use information

• To provide the app: show your dashboard, budgets, goals, forecasts and reports, and sync them across your devices.
• To run your subscription: start, renew, change or cancel a paid plan and unlock the features that come with it.
• To send what you ask for: bill reminders, streak and challenge alerts, the weekly summary and account emails such as password resets.
• To answer you when you write to us.
• To keep the service safe: detect abuse, limit automated attacks, investigate errors and meet legal obligations.
• To improve MADBU, using combined figures that do not identify you.

We do not sell your personal information and we do not use it to show you third party advertising.

5. AI features

The AI money coach, Ask MADBU and type-to-log are paid features that you choose to use. When you use one, we send the text you typed and a summary of your figures, such as monthly totals, category totals, balances and in some cases the notes on your entries, to our AI provider so it can produce an answer. The provider is currently Anthropic. We do not send your name, your email address or any bank login. AI answers are general information and can be wrong. They are not financial advice.

6. Who we share it with

We share information only with companies that help us run MADBU, and only what each one needs:

• Plaid, to connect your bank accounts when you ask us to (section 3).
• Stripe, to take payment for paid plans.
• Anthropic, to answer AI requests (section 5).
• Hostinger, which hosts our servers, database and email.
• Browser push services run by Apple, Google and Mozilla, which deliver notifications to your device if you turn them on.

We may also disclose information when the law requires it, to protect the rights and safety of our users or of MADBU, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

7. Cookies and local storage

MADBU uses a small number of cookies that are necessary for the service to work: they keep you signed in and protect your session. The app also keeps a few items in your browser's local storage, such as cached pages for offline use and your latest coach notes, so screens load quickly.

We do not use advertising cookies and we do not run third party advertising or tracking pixels. Stripe and Plaid may set their own cookies on the payment and bank sign in screens they provide, under their own policies. The full list is in the Cookie Policy.

8. How long we keep it

• We keep your account and records for as long as your account is open.
• When you delete your account, your login and every entry, goal, account, bank connection, point and badge are deleted from the live system. Copies in routine backups are overwritten as those backups cycle out.
• "Erase all my entries" clears your records and keeps the account.
• Stripe keeps payment records for as long as tax and financial law requires. Server logs are kept for a limited time and then removed.

9. How we protect it

MADBU is served only over HTTPS. You can add two step sign in under Profile, Security, so that signing in needs both your password and a code from an authenticator app on your phone. Passwords are hashed, bank connection tokens are encrypted at rest, your figures are visible only to you when signed in, and pages showing them are never stored in a shared cache. Access to the systems behind MADBU is limited to the people who need it. No online service can promise perfect security. If we learn of a breach that affects your information we will tell you as the law requires.

10. Your choices and rights

• See and export: the Tracker exports every entry as a CSV file.
• Correct: edit any entry, account or profile detail in the app.
• Delete: Profile, Danger zone, Delete my account removes your account and data. You can also email us and we will do it for you. The steps are on the Delete your data page.
• Disconnect a bank whenever you like (section 3).
• Emails: reminder emails are sent only if you turn them on in Profile, and you can turn them off there. The weekly email has a one click unsubscribe link. We still send essential account emails such as password resets and billing notices.
• Push notifications: turn them off in Profile or in your device settings.

Depending on where you live, including California and other US states with privacy laws, you may have the right to ask what personal information we hold about you, to receive a copy, to have it corrected or deleted, and to not be treated differently for asking. We do not sell or share personal information for advertising. To use any of these rights, email contact@madbu.com from the address on your account. We reply within 30 days.

11. Children

MADBU is for adults. You must be at least 18 to create an account, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

12. Where data is stored

MADBU is operated from the United States and your information is stored and processed in the United States. If you use MADBU from another country, you understand that your information will be transferred to and handled in the United States. Bank connection is offered for accounts at United States financial institutions.

13. Changes to this policy

If we change this policy we will update the date at the top. If a change is significant, for example a new kind of data or a new purpose, we will tell you in the app or by email before it takes effect.

14. Contact us

Saveure LLC, doing business as MADBU
1070 Montgomery Rd Unit 2101, Altamonte Springs, FL 32714
contact@madbu.com