Privacy Policy

Last updated 6 October 2026

What we collect

• Your name and email address, so you can sign in and so the people you share a budget with can see who you are.
• The payments and income you, or people you share a budget with, enter, including amounts, payees and notes.
• Your profile photo, if you add one. It's cropped and re-saved when you upload it, which removes hidden details such as where a photo was taken, and only you and people in your budgets can see it.
• Your notification, appearance and default view preferences.
• Basic security records, such as how many sign-in attempts came from an address, to stop people guessing passwords.
• A record of activity on your account: when you sign up, sign in and use the app, and when payments, budgets, members and invites are added, changed or removed. It never includes a payment's name or amount, and it's kept for 400 days.

We don't connect to your bank and we don't collect card or account numbers.

Who can see it

Your finance entries belong to a budget. Everyone you invite to that budget can see its entries; owners and editors can change them. Other Verdisium users can't see your data. We don't sell your data or show you ads.

To run the service, the people who operate Verdisium can see account details (your name, email address, when you joined and were last active, and whether two-factor is on), the activity record above, and the names of your budgets with how many members and payments each has. They can't see what your payments are or how much they are.

We may suspend or remove an account that misuses the service. We'll email you if we do. Removing an account deletes it and the budgets only you were in; budgets you share stay with the other members.

Where it's stored and how it's protected

• Your data is stored in a database hosted by Supabase, our infrastructure provider.
• Passwords are stored as one-way hashes. We never see them.
• When you choose a password, we check it against known data breaches using Have I Been Pwned. Only the first five characters of a hash of your password are sent, never the password itself.
• Access is enforced by the database itself, and you can turn on two-factor authentication.

Emails

We email you to confirm your address, reset your password, tell you about security changes on your account, and deliver budget invites. You can change optional notifications under Account, Notifications.

Cookies

We only use the cookies needed to keep you signed in, plus one that remembers the last day you used the app so it's counted once a day. Your theme choice and last-viewed budget are kept in your browser's local storage. There are no tracking or advertising cookies.

Your choices

• Download a copy of your data at any time from Account, Security.
• Delete your account from Account, Security. This permanently removes your account and any budget only you belong to.
• Correct your name and email from Account, Profile.

Contact

Questions or requests about your data: support@verdisium.com.