BujjiPrivacy policy
Your money stays on your phone
Bujji does not collect your personal data. There is no account, no analytics, and no server of ours for your money to travel to. Pro access is checked, and purchases are processed, through RevenueCat and Apple or Google.
Effective 14 September 2026 · Version 1.3
The short version
Everything you enter — balances, bills, savings goals, loans, expenses, and income — is stored on your device and nowhere else. None of it is ever transmitted. Every feature that touches your money works with the phone in airplane mode.
The app makes network requests for exactly one purpose: managing Pro access — checking it, loading store products, buying, syncing, and restoring purchases. Those requests go to RevenueCat and Apple or Google, and no financial record of yours is included.
The developer has no servers, no database, and no way to see any of your money data.
What we process
Bujji has no account system, sign-up, telemetry, analytics, advertising, attribution, or crash-reporting SDK. We do not collect your name, email, banking credentials, or money records. RevenueCat processes an anonymous app-user id and purchase information, only to manage Pro access, as described below.
Because nothing is transmitted to us, there is nothing for us to sell, share, lose, or hand over.
What is stored on your device
The following is written to your device's private app storage, which other apps cannot read:
- The places you keep money, their names, the currency each one holds, and the balances you type in
- Bills, paydays, and other reminders, including amounts and repeat schedules
- Savings goals, contributions, and money you have set aside
- Loans and the payments you record against them
- Expenses, income, and transfers you log, including notes and categories
- Your own categories, and the monthly plan you set for each
- Photos you choose or take for goals, reminders, and receipt attachments
- Settings: your language, which currency new things start in, and how the room is dressed
Deleting the app removes all of it. You can also erase everything from inside the app at any time — see What you control below.
No bank connections
Bujji never connects to a bank, card, or financial institution. There is no Plaid, no Open Banking, and no aggregator. It never asks for banking credentials, card numbers, or account numbers, and it could not use them if you typed them in.
Every balance in the app is a number you entered yourself. That is the whole design: the app is a notebook, not a connection to your money.
Permissions we ask for
Photo library
Optional. Only to import a picture you pick for a savings goal, reminder, or receipt attachment. Bujji does not scan, index, or upload your library, and the picture is copied into the app's own private storage.
Adding to your photos
Optional, and add-only. Asked for the moment you save a picture of your room as a wallpaper, so that one picture can be put in your photo library. It grants no ability to read, list, or open anything already there, and Bujji never does.
Camera
Optional. Only to take a receipt picture you choose to attach to something you logged. The photo is kept in the app's private storage and is never uploaded by Bujji.
Notifications
Optional. One local reminder at 6am on a day something is due, scheduled on your device by iOS or Android. No push server is involved, and no notification content leaves the device. Denying it changes nothing else about the app.
Bujji asks for no location, contacts, or microphone access.
Purchases
Bujji is paid, and access is called Pro. Payment is taken by Apple or Google — we never see a card number — and the purchase is recorded through RevenueCat, which tells the app whether Pro is active.
What is sent to RevenueCat when you buy or restore Pro:
- An anonymous app-user id generated on your device, which is not linked to your name, email, or any account
- The store receipt for the purchase, and which product was bought
- Basic technical details the SDK includes, such as the app version, platform, and the country of your store account
What is never sent: your balances, bills, goals, loans, expenses, income, notes, photos, or any other record you keep in the app. RevenueCat has no access to your money data because the app never gives it any.
The app contacts RevenueCat when it launches or returns to the foreground, to ask whether this install has active Pro access. That check uses the anonymous id and purchase status, and never your money records.
When you share something
Three things hand a file to your system share sheet: exporting your data, saving the room as a wallpaper, and the art you download from the lifetime challenge page. Each happens only when you tap the button.
At that point the file goes wherever you send it, and what happens next is governed by whichever app or service you chose. Nothing is sent anywhere on its own, and nothing is sent to us.
Currencies
You can hold money in as many currencies as you like. The app holds no exchange rate, applies none, and fetches none. Nothing is ever converted and no two currencies are added together — every total it shows is the total of one currency.
Every amount stays exactly as you entered it.
Third-party services
Bujji contains no third-party analytics, advertising, attribution, or crash-reporting SDKs. It uses RevenueCat solely for Pro purchases and entitlement management, and communicates with Apple or Google through their store services.
Purchases are processed by the App Store or Google Play. We never see your card or payment-account details.
Children
Bujji is meant for adults managing their own money, and is not directed at children under 13. Money records and receipt photos stay on the device and are never received by the developer. Purchase information is processed by RevenueCat and Apple or Google as described above.
What you control
- Export your financial records to a file at any time, from Menu → Your data → Export my data. Receipt and other attached photos do not travel with that file
- Erase everything from Menu → Your data → Delete everything, which cannot be undone
- Delete any single place, goal, loan, reminder, or logged item from inside the app
- Turn reminders off at any time in your device's notification settings
- Delete the app to remove all of it from the device
Because there is no account, there is no data request to file with us — you already hold everything, and we hold nothing. That also means we cannot recover anything for you. If losing your records would matter, export a copy.
Changes to this policy
If this policy changes, the updated version is posted on this page with a new effective date. A material change to how your data is handled is also noted in the app's release notes.
Contact
Questions about this policy: instabuildx@gmail.com.
See also Terms & conditions and Support.
