Operated by Buddy Labs Inc. · privacy@buddylabs.ca
Last updated · May 19, 2026
If you use Finance Buddy without signing in, all financial data you enter — including income, account balances, debt amounts, expense figures, and pay logs — is stored exclusively on your device using browser local storage.
This data is never transmitted to Finance Buddy's servers, never accessible to us, and never shared with any third party for any purpose.
When you sign in with email or Google, we sync your app state to Supabase (Canada region) so you can access it across devices. The synced state includes the same financial data you would have stored locally: profile, income, accounts, debts, holdings, expenses, AI-conversation history, alerts, and Pro entitlement.
We never sell, rent, or share this data with advertisers or marketers.
We support two passwordless sign-in methods: email magic-link OTP via Supabase Auth, and Google OAuth. We never see or store your password. From Google we receive only your email address, which is used as your Finance Buddy account identifier.
The AI portfolio builder, AI coach, and AI moderation pipeline are powered by Anthropic's Claude API. The portion of your prompt and relevant portfolio context required for each request is sent to Anthropic. Anthropic's privacy policy applies; per their terms, Claude API inputs are not used to train models.
If you opt in to anonymous analytics in Settings, we use PostHog to record event-level interactions (e.g. "opened budget tab", "completed onboarding step 3"). Events are tied to your Supabase user ID (UUID) but not to your email or any financial figures. You can opt out at any time.
Finance Buddy uses browser local storage to persist your app state on the device, and session storage to coordinate auth-flow intent across the OAuth round-trip. We do not use third-party cookies for tracking.
If you connect a brokerage account via SnapTrade, you authenticate directly with your broker; SnapTrade brokers the read-only handshake. Finance Buddy receives only the holdings + balance data SnapTrade returns. We never see, store, or transmit your broker credentials.
Pro users can create a Family Plan. While on a Family Plan, member emails are visible to all members of the plan. Aggregate net worth (a single rounded total) is shared only if you explicitly opt in via the per-user "share net worth" toggle. No other financial data (holdings, transactions, debts, income, expenses, AI history, alerts) is shared. Each member retains a fully independent profile.
Cross-border transfer notice: Several processors above operate in the United States. By using Finance Buddy, you consent to the transfer of your data to those jurisdictions for the purposes described, as required under PIPEDA s.4.1.3 and Quebec Law 25 art. 17.
The Android and iOS apps request the following device permissions only when you use the corresponding feature. None of these are used for tracking or advertising.
You can revoke each of these at any time via your device's system Settings → Apps → Finance Buddy → Permissions. Revoking CAMERA or Photos disables Receipt Scanner; the rest of the app continues to work normally.
Local data remains on your device until you uninstall the app or use Reset App Data in Settings. Cloud account data may be permanently deleted instantly via Settings → Account → Delete My Account & Data, or by emailing privacy@buddylabs.ca with "Data Deletion Request" in the subject line.
All data in transit is encrypted using TLS 1.2 or higher. Cloud data is encrypted at rest in Supabase. We use Row Level Security so users can only access their own data. No passwords are stored — authentication is passwordless. Data breach notifications, where applicable, follow PIPEDA's 72-hour rule.
Authorised Buddy Labs personnel may access account-level metadata (email, signup date, last activity, country, Pro status, item counts) only for support, abuse investigation, or technical issue resolution. Dollar amounts are never viewed through the operator interface. Every state-changing operator action is recorded in an internal audit log.
Finance Buddy is not directed at children under 13 and we do not knowingly collect personal information from children under 13 without verifiable parental consent.
Finance Buddy may include affiliate or referral links to third-party brokers such as Questrade and Wealthsimple. If you open an account or transact through these links, we may receive compensation. Your financial data is never shared with these brokers via this app.
We may update this Privacy Policy as the app evolves. Material changes will be communicated in-app before they take effect. Continued use after the effective date constitutes acceptance.
Buddy Labs Inc.
privacy@buddylabs.ca
For privacy inquiries, data access, or correction requests under PIPEDA and Quebec Law 25, contact our Privacy Officer at privacy@buddylabs.ca. We respond within 30 days.