Privacy Policy

Last updated: March 17, 2026

1. Introduction

This Privacy Policy describes how Bungus ("we," "us," "our") collects, uses, and protects your personal information when you use the Bungus application and website at bungus.money (the "Service"). By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

Account information. When you register, we collect your email address, name, and a hashed version of your password. We never store your password in plain text.

Financial data. You may enter account balances, transactions, recurring bills, income, and other financial information into the Service. This data is stored solely to provide the Service to you.

Imported files. You may upload bank statement files (such as OFX, QFX, or similar formats) to import transactions. Uploaded files are processed to extract transaction data, which is then stored in your account. The original uploaded files are not retained after processing is complete.

Payment information. Subscription payments are processed by Stripe. We store your Stripe customer ID to manage your subscription. We do not store your credit card number, expiration date, or CVC on our servers. Stripe's handling of your payment information is governed by Stripe's Privacy Policy.

Usage data. We may collect server logs that include your IP address, browser type, and pages visited. This data is used for security monitoring and service reliability.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process your subscription payments
  • Send transactional emails (account confirmation, password reset, billing receipts)
  • Notify you of material changes to our Terms of Service or this Privacy Policy
  • Monitor for and prevent fraud, abuse, and security threats

We do not use your financial data for advertising, profiling, or any purpose other than providing the Service to you.

Marketing communications. If you opt in during registration or in your account settings, we may send you product updates, tips, and promotional content via email. You may unsubscribe at any time by updating your preferences in account settings or by using the unsubscribe link included in every marketing email. Opting out of marketing communications does not affect transactional emails related to your account or subscription.

4. Information We Do Not Collect

We do not use tracking cookies, third-party analytics, or advertising pixels. We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Sharing

We share your information only in the following circumstances:

  • Payment processing. Your Stripe customer ID and subscription data are shared with Stripe to process payments.
  • Legal requirements. We may disclose your information if required by law, subpoena, court order, or governmental regulation.
  • Business transfer. In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

6. Data Storage and Security

Your data is stored on managed infrastructure hosted in the United States. We use encryption in transit (TLS) and at rest to protect your information. Database access is restricted to authenticated application connections only.

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal and financial data within 30 days, except where retention is required by law (such as billing records for tax compliance).

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate information in your account
  • Export your financial data from the Service
  • Delete your account and all associated data

To exercise any of these rights, contact us at [email protected].

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

To submit a CCPA request, contact us at [email protected].

10. European Residents (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, data portability, and the right to object to or restrict processing. Our legal basis for processing your data is the performance of our contract with you (the Terms of Service) and your consent where applicable.

To submit a GDPR request, contact us at [email protected].

11. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at [email protected] and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

Questions or concerns about this Privacy Policy? Contact us at [email protected].