Your money stays on your phone

Bujji has no account system, sign-up, telemetry, analytics, advertising, attribution, or crash-reporting SDK. We do not collect your name, email, banking credentials, or money records. RevenueCat processes an anonymous app-user id and purchase information, only to manage Pro access, as described below.

Because nothing is transmitted to us, there is nothing for us to sell, share, lose, or hand over.

The following is written to your device's private app storage, which other apps cannot read:

• ·The places you keep money, their names, the currency each one holds, and the balances you type in
• ·Bills, paydays, and other reminders, including amounts and repeat schedules
• ·Savings goals, contributions, and money you have set aside
• ·Loans and the payments you record against them
• ·Expenses, income, and transfers you log, including notes and categories
• ·Your own categories, and the monthly plan you set for each
• ·Photos you choose or take for goals, reminders, and receipt attachments
• ·Grocery runs you finish: the items and prices in the basket, and the shop name and address you kept
• ·Money you lend and bills you split with other people: the names you give them, any photo of them you add, and what was paid back or settled. Nothing is ever sent to those people
• ·Settings: your language, which currency new things start in, and how the room is dressed

Deleting the app removes all of it. You can also erase everything from inside the app at any time — see What you control below.

Off by default. Turned on from Menu → Your data → iCloud sync, it keeps your records in your own private iCloud database (Apple CloudKit), so every iPhone and iPad signed in to your Apple ID shows the same thing. What syncs: places and their currencies, activity (expenses, income, transfers and balance updates), savings goals and contributions, loans and payments, reminders and repeat schedules, monthly plans, your categories, receipt and other attached photos, how the room is dressed, which currency new things start in, your language, your notification choices, and your display preferences. Whether notifications are allowed at all stays with each device's own settings.

The data is stored by Apple under your Apple ID, counts against your iCloud storage, and is governed by Apple's privacy policy. The developer has no access to your private iCloud database and receives nothing from it.

Turning sync off stops this device syncing and deletes nothing. With sync on, Delete everything erases your records on this device, in iCloud, and on every device syncing with it. You can also remove the app's iCloud data from your device's Settings → [your name] → iCloud → Manage Storage.

Bujji never connects to a bank, card, or financial institution. There is no Plaid, no Open Banking, and no aggregator. It never asks for banking credentials, card numbers, or account numbers, and it could not use them if you typed them in.

Every balance in the app is a number you entered yourself. That is the whole design: the app is a notebook, not a connection to your money.

Bujji asks for no contacts or microphone access.

Bujji is paid, and access is called Pro. Payment is taken by Apple or Google — we never see a card number — and the purchase is recorded through RevenueCat, which tells the app whether Pro is active.

What is sent to RevenueCat when you buy or restore Pro:

• ·An anonymous app-user id generated on your device, which is not linked to your name, email, or any account
• ·The store receipt for the purchase, and which product was bought
• ·Basic technical details the SDK includes, such as the app version, platform, and the country of your store account

What is never sent: your balances, bills, goals, loans, expenses, income, notes, photos, or any other record you keep in the app. RevenueCat has no access to your money data because the app never gives it any.

The app contacts RevenueCat when it launches or returns to the foreground, to ask whether this install has active Pro access. That check uses the anonymous id and purchase status, and never your money records.

Three things hand a file to your system share sheet: exporting your data, saving the room as a wallpaper, and the art you download from the lifetime challenge page. Each happens only when you tap the button.

At that point the file goes wherever you send it, and what happens next is governed by whichever app or service you chose. Nothing is sent anywhere on its own, and nothing is sent to us.

You can hold money in as many currencies as you like. The app holds no exchange rate, applies none, and fetches none. Nothing is ever converted and no two currencies are added together — every total it shows is the total of one currency.

Every amount stays exactly as you entered it.

Bujji contains no third-party analytics, advertising, attribution, or crash-reporting SDKs. It uses RevenueCat solely for Pro purchases and entitlement management, and communicates with Apple or Google through their store services.

Purchases are processed by the App Store or Google Play. We never see your card or payment-account details.

Bujji is meant for adults managing their own money, and is not directed at children under 13. Money records and receipt photos stay on the device — and in the user's own iCloud if they turn sync on — and are never received by the developer. Purchase information is processed by RevenueCat and Apple or Google as described above.

• ·Export your financial records to a file at any time, from Menu → Your data → Export my data. Receipt and other attached photos do not travel with that file
• ·Turn iCloud sync on or off from Menu → Your data → iCloud sync (iPhone and iPad). Turning it off deletes nothing
• ·Erase everything from Menu → Your data → Delete everything, which cannot be undone. With iCloud sync on, this also erases your records in iCloud and on every synced device
• ·Delete any single place, goal, loan, reminder, or logged item from inside the app
• ·Turn reminders off at any time in your device's notification settings
• ·Delete the app to remove all of it from the device. Records you synced stay in your iCloud until you delete them there or erase everything from the app

Because there is no account, there is no data request to file with us — you already hold everything, and we hold nothing. That also means we cannot recover anything for you. If losing your records would matter, export a copy.

If this policy changes, the updated version is posted on this page with a new effective date. A material change to how your data is handled is also noted in the app's release notes.

Questions about this policy: support@mybujji.com.

See also Terms & conditions and Support.