What we collect
Account data: your name, email, and an encrypted password (or your social login identifier).
Budget data: the budgets, accounts, transactions, and recurring rules you create. We never read your real bank accounts — Tandilo does not connect to financial institutions.
Technical data: minimal server logs (IP address, browser, timestamp) for security and debugging, kept for up to 30 days.
How we use your data
To run the service: authenticate you, store your budgets, and project your balances.
To communicate with you: transactional emails (verification, password reset, invitation notices) and the occasional product announcement you can opt out of.
We do not sell your data. We do not use it to train AI models. We do not show ads.
Cookies and similar technologies
We use a small number of strictly necessary cookies to keep you signed in and to remember your preferences (theme, language). These cannot be turned off because the app would not work without them.
We do not use third-party advertising or tracking cookies. If we add privacy-friendly analytics in the future, you will be able to opt out from the cookie banner.
Sharing with third parties
We share data only with the infrastructure providers we need to run the app — for example our hosting provider, our database, and our transactional email vendor. They process data on our behalf under data-processing agreements.
We will disclose data if compelled by a valid legal request, and will tell you when we are legally allowed to.
Data retention
We keep your data for as long as your account is active. If you delete your account, your budgets, transactions, recurring rules, and memberships are deleted within 30 days. There is no soft-delete that hangs around.
Your rights
Under GDPR and similar laws you can: access the data we hold about you, correct it, export it, restrict its processing, and delete it. Most of these are one click in your settings — for anything else, email hello@tandilo.com and we will respond within 30 days.
Children
Tandilo Budget is not directed to children under 16 and we do not knowingly collect data from them.
Changes to this policy
If we change this policy in a meaningful way, we will email you and update the date at the top of this page.
Contact
Questions, concerns, or GDPR requests: hello@tandilo.com.