Privacy Policy and Terms of Service

Privacy Policy — Cloud Synchronization

1. Data controller

The data controller is 2cLab. Privacy and data-deletion requests can be sent to chri.c79@gmail.com .

2. Services covered by this policy

My Budget uses Cloud services provided by Google to offer optional synchronization.

• Cloud manages account access using an email address and password.
• Cloud stores the records and synchronization metadata needed to synchronize data between the user’s devices.

My Budget does not store the account password in its local database or in Cloud. Authentication is handled by the Cloud service.

3. Personal data processed

The Cloud synchronization service may process:

• email address, Cloud account identifier and technical authentication information;
• financial and organizational records entered by the user, including accounts, cards, categories, budgets, savings plans, templates, transactions, debts, credits and notes;
• synchronization metadata, including record identifiers, database version, creation and modification dates, deletion markers, synchronization status and device identifiers;
• the date and version of the Privacy Policy acknowledged and the Terms of Service accepted by the user.

Images attached to transactions are not stored in Cloud. When the user connects Dropbox, those files are handled separately through the user’s own Dropbox account.

4. Purposes and legal bases

The data is processed to:

• create and authenticate the synchronization account;
• store the user’s synchronized records online;
• synchronize and restore data across devices;
• manage record conflicts, integrity and service security;
• respond to support, privacy and deletion requests.

Processing required to provide the cloud synchronization service requested by the user is based on the performance of the service agreement and steps taken at the user’s request.

Processing strictly necessary to protect the service, prevent abuse and maintain data integrity may also be based on the controller’s legitimate interests. Processing required by law is based on the applicable legal obligation.

The acknowledgement shown in the app is not consent for advertising, profiling or unrelated marketing.

5. Retention

Cloud account data and synchronized records are retained while the account remains active and until the user submits a valid deletion request, unless limited retention is required for security, fraud prevention or compliance with a legal obligation.

Valid deletion requests are handled without undue delay and within the deadlines required by applicable law. Limited technical backup copies or security logs controlled by the service provider may remain temporarily according to the provider’s retention policies.

6. Service providers and international transfers

Google entities providing the Cloud service process data as technical service providers and, where applicable, as data processors under the relevant Google data-processing terms.

Depending on the Cloud infrastructure and project location, personal data may be processed inside or outside the European Economic Area. Where required, transfers are protected using applicable legal safeguards.

More information is available in Cloud Privacy and Security and the Cloud Data Processing and Security Terms .

Personal data is not sold and is not used by 2cLab for advertising profiling.

7. Security

Google states that Cloud services use protections including encryption in transit and, for applicable services, encryption at rest. My Budget also relies on Cloud authentication and security rules to restrict access to authenticated users.

Cloud-synchronized data is not end-to-end encrypted by My Budget. Users should therefore avoid entering information that is not needed for use of the app.

8. User rights

Subject to applicable law, users may request access, correction, deletion, restriction, portability or objection regarding their personal data.

Users may also lodge a complaint with the competent data protection authority. In Italy, the supervisory authority is the Garante per la protezione dei dati personali .

The Cloud synchronization service does not use automated decision-making or advertising profiling.

9. Changes and contact

This policy may be updated when the synchronization service, applicable law or service providers change. Material changes may require a new acknowledgement inside the app.

Contact: chri.c79@gmail.com .

Dropbox Image Synchronization

1. Authorization and permissions

When the user connects Dropbox, My Budget opens the Dropbox OAuth authorization screen. Dropbox displays the access requested by the app and asks the user to authorize it.

My Budget requests the Dropbox permissions required to:

• read basic Dropbox account information, including the account identifier and email address;
• read and write file metadata used by image synchronization;
• upload, download and update image files used by My Budget.

The Dropbox integration must be configured with the minimum content access needed by the app. My Budget uses Dropbox only for files managed by its image-synchronization feature and does not use Dropbox to browse unrelated personal files.

2. Dropbox data processed

The Dropbox integration may process:

• Dropbox account identifier and email address, used to identify and display the connected account;
• OAuth access and refresh credentials required to maintain the authorized connection;
• images attached to My Budget transactions;
• file paths, file names, modification dates and other technical metadata required to compare local and remote image versions.

My Budget does not receive or store the user’s Dropbox password. Authentication is handled directly by Dropbox.

3. Purpose of processing

Dropbox data is used only to:

• upload transaction images selected or created by the user;
• download those images on another device connected to the same My Budget dataset and Dropbox account;
• compare local and remote versions and keep images synchronized;
• show the email address of the currently connected Dropbox account;
• maintain and secure the connection authorized by the user.

Dropbox account data and files are not used for advertising, profiling, credit assessment or unrelated analytics.

4. Storage and security

• Dropbox OAuth credentials are stored locally using Android encrypted preferences.
• Images are transferred between the device and Dropbox through the Dropbox API over encrypted network connections.
• Transaction images are stored in the user’s own Dropbox account.
• 2cLab does not maintain a separate server-side copy of the Dropbox image files.
• Dropbox-hosted files are subject to Dropbox’s own security, retention and account policies.

5. Sharing and disclosure

• 2cLab does not sell Dropbox account data or transaction images.
• Dropbox processes the data required to provide account authorization, storage and file synchronization.
• Data is not transferred to advertising platforms, data brokers or unrelated third parties.
• Data may be disclosed where required by applicable law.

6. Logout, revocation and remote files

The user may disconnect Dropbox from within My Budget. Logout revokes or clears the app’s active authorization credentials and prevents further synchronization until the user connects an account again.

Users can review and revoke third-party application access from the connected-apps section of their Dropbox account: Dropbox connected apps .

Images stored in Dropbox must be managed or deleted through the user’s Dropbox account or through the image-management functions provided by My Budget. A Cloud account deletion request does not delete Dropbox files.

7. Dropbox privacy information

Dropbox processes account and file data according to its own privacy documentation. Users can review the Dropbox Privacy Policy .

Terms of Service — Cloud Synchronization

These Terms govern the optional Cloud synchronization feature of My Budget. By creating or signing in to a Cloud account, the user confirms that they have read the Privacy Policy and accept these Terms.

1. Service description

The service allows users to store and synchronize My Budget records online across supported devices.

My Budget is a personal organization tool and does not provide financial, banking, investment, accounting, tax or legal advice.

2. Account and security

Users must provide a valid email address, protect their password and prevent unauthorized access to their account.

Users must promptly contact 2cLab if they reasonably believe that their Cloud account has been compromised.

3. Permitted use

The synchronization service must be used lawfully and in accordance with the rights of third parties and the applicable Cloud service terms.

Users must not:

• attempt unauthorized access to another user’s records;
• interfere with or bypass service security;
• use the service to store unlawful content;
• use automated methods that overload or abuse the service.

4. Availability and backups

The synchronization service is provided on an “as available” basis and may experience delays, interruptions, maintenance, network failures or errors involving third-party services.

Users are responsible for maintaining a local or exported copy of important records. Cloud synchronization is not a replacement for an independent backup strategy.

5. Third-party services

Cloud synchronization services are provided by Google and are subject to the applicable Google terms.

Dropbox image synchronization is provided through the Dropbox API, uses the user’s own Dropbox account and is subject to Dropbox’s terms and privacy practices. Dropbox synchronization covers transaction images and related file metadata; it is separate from Cloud synchronization.

6. Account deletion

Users may initiate deletion from the Cloud synchronization screen in My Budget. The app opens the account-deletion section of this web page, where the user can submit a request.

A valid request covers the Cloud account and the associated Cloud records controlled by 2cLab.

Account deletion does not automatically delete the local database stored on the device, files stored in the user’s Dropbox account, or cancel a Google Play subscription or purchase.

7. Suspension or termination

Access may be restricted or terminated where reasonably necessary to address unlawful use, security threats, service abuse or legal requirements.

8. Changes to the service or Terms

The synchronization feature may be updated, limited or discontinued for technical, security, operational or legal reasons.

Material changes to these Terms may require the user to accept a new version before continuing to use synchronization.

9. Liability

To the extent permitted by law, 2cLab is not responsible for losses caused by misuse, failure to maintain backups, unavailable networks, third-party service outages or events outside its reasonable control.

Nothing in these Terms limits mandatory consumer rights or liability that cannot legally be excluded.

10. Governing law and contact

Italian law applies, without prejudice to mandatory consumer protections available under the law of the user’s country of residence.

Support: chri.c79@gmail.com .

Delete your My Budget Cloud account

To request deletion of the Cloud account and all associated My Budget data stored in Cloud, send the request from the email address associated with the Cloud account.

1. Use the email address associated with your My Budget Cloud account.
2. State that you want to delete your Cloud account and all associated My Budget Cloud data.
3. Wait for any identity-verification instructions required to prevent unauthorized deletion.

2cLab will never ask you to send your Cloud password.

Request account deletion

Data covered by the request

• the Cloud account;
• the associated email address and Cloud account identifier;
• My Budget records stored in Cloud;
• technical synchronization metadata associated with the account.

Data not deleted automatically

• the local My Budget database stored on the device;
• files stored in the user’s Dropbox account;
• Google Play purchases or subscriptions;
• limited records that must be retained for security, fraud prevention or legal compliance, where applicable.

Local data must be deleted from the device. Dropbox images must be managed through Dropbox or the relevant My Budget image functions. Google Play subscriptions must be managed separately through Google Play.

Valid requests are processed within the time limits required by applicable law. The requester will be informed when the deletion has been completed or if additional verification is required.