piggyme is provided by WalnutWorks, registered in Belgium under company number 1040.077.154. We are the controller of the personal data described below. Questions? Contact info@piggy-me.com.

• Account data — your e-mail address, a password hash (we never see your actual password) and the cryptographic keys needed to encrypt your data.
• Your financial data — the transactions, balances, categories, budgets and goals you import or enter. On the free plan this stays on your device and is never sent to us; on Plus it is stored as an encrypted snapshot on our servers so it can sync across your devices.
• Technical data — your IP address is used briefly to rate-limit sign-in and prevent abuse. For usage statistics we use Cloudflare Web Analytics, which is cookieless and aggregated and never profiles you — so we use no tracking or advertising cookies.

Your original bank files are read inside your browser and are never uploaded.

We process your data only to provide the service: creating and securing your account, signing you in, syncing your overview across devices, sharing one household view with your partner, sending verification and password-reset e-mails, and generating the insights (overviews, budgets, forecasts, alerts) that are the product itself. We never use your data for advertising or profiling, and we never sell it.

• Performance of a contract — account and sync data, to deliver the service you signed up for.
• Legitimate interest — limited technical data (e.g. IP for rate-limiting) to keep the service secure.
• Consent — where you explicitly opt in, e.g. accepting these terms at sign-up.

We rely on a small number of processors, bound by data-processing agreements:

• Cloudflare — hosting, application logic and the database that stores your encrypted snapshot and account records.
• Resend — sending transactional e-mails (verification, password reset).
• Sentry — crash reports from the mobile app, so we can fix errors; no financial data or personal identifiers are included.

On Plus (standard mode) we hold a key that lets us restore access to your encrypted data for e-mail password reset. Switch to private mode for zero-knowledge, where not even we can read it.

We keep your account and (on Plus) your encrypted snapshot for as long as your account exists. When you delete your account in the app, this data is removed from our servers; if you were the last member of a household, the shared snapshot is deleted too. Rate-limiting records are short-lived and backup copies (database point-in-time recovery) are purged within about 30 days.

Under the GDPR you can access, correct, delete (Account → delete my account), export (JSON export in the app), restrict or object to the processing of your data, and withdraw consent. To exercise these rights, contact info@piggy-me.com. You may also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, gegevensbeschermingsautoriteit.be).

WalnutWorks · company number 1040.077.154 · info@piggy-me.com (Belgium).