Privacy Policy

1. Who We Are

This Privacy Policy applies to the mobile and web applications operated by UrbanPX, LLC ("Company," "we," "our," or "us"), including Almighty Budget and Almighty Split (collectively, the "Services" or "Apps"). Our registered address is in the United States.

For questions about this policy, contact us at support@urbanpx.com.

2. Information We Collect

We collect information you provide directly and information collected automatically when you use our Services.

2a. Information You Provide

2b. Information Collected Automatically

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and improve the Services — operate core features, fix bugs, and build new functionality.
• Account management — create and authenticate your account, process subscriptions.
• Personalization — tailor the experience to your preferences and usage patterns.
• Cross-app sync — if you use both Almighty Budget and Almighty Split, share relevant data between the two apps with your consent.
• Communications — send transactional emails (receipts, password resets), and optional product updates if you opt in.
• Security — detect fraud, unauthorized access, and abuse.
• Legal compliance — fulfill legal obligations and enforce our Terms of Service.
• Analytics — understand aggregate usage trends to improve the product (anonymized or pseudonymized where possible).

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Financial Disclaimer

Financial data you enter or sync is used exclusively to power the Services' features and is not used to make automated decisions about your creditworthiness or financial eligibility.

5. Data Storage and Protection

Your data is stored on secure servers hosted by Google Firebase (Firestore, Authentication, and Cloud Storage) in the United States. We apply the following security measures:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access control — employees access data only on a need-to-know basis
• Firebase Security Rules enforce per-user data isolation
• Regular security reviews and dependency audits
• Two-factor authentication for administrative access

No method of transmission over the internet is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security.

6. Cross-App Data Flows

When you use both Almighty Budget and Almighty Split with the same account, we may share data between these apps to provide a seamless experience. Specifically:

• Expenses settled in Almighty Split can be pushed to Almighty Budget as transactions.
• Budget categories can be referenced when categorizing split expenses.
• Account balance context may be surfaced across apps for informational purposes.

Cross-app data sharing is opt-in and can be disabled in your account settings at any time. Disabling cross-app sync does not delete existing synced data; you must delete those records separately.

7. Plaid Integration and Bank Data

Almighty Budget uses Plaid Technologies, Inc. to connect to your bank accounts. When you link a bank account:

• You authenticate directly with Plaid — we never receive or store your bank username or password.
• Plaid provides us with read-only access to transaction history, account balances, and institution metadata.
• We store the Plaid access token (encrypted) to refresh your transaction data on your behalf.
• Bank account numbers are masked (only the last 4 digits are retained).

Plaid's use of your data is governed by Plaid's Privacy Policy. You may revoke Plaid access at any time in Settings → Connected Accounts, or through the Plaid Portal.

8. Data Retention

After the applicable retention period, data is securely deleted or anonymized.

9. Third-Party Services

These third-party services have their own privacy policies and practices. We encourage you to review them.

10. Cookies and Tracking

Our web properties use cookies and similar technologies for authentication, preferences, and analytics. Our mobile apps use on-device storage (AsyncStorage, IndexedDB, LocalStorage) for functionality and offline support.

For full details, see our Cookie Policy.

11. Your Privacy Rights

Depending on your location, you may have the following rights with respect to your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request erasure of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — request that we limit processing of your data.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw previously given consent at any time.

To exercise any of these rights, email support@urbanpx.com. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing requests.

You may also delete your account directly in the app (Settings → Account → Delete Account), which will initiate deletion of your personal data subject to the retention periods above.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights.

Categories of Personal Information Collected

Your CCPA Rights

• Right to Know — categories and specific pieces of personal information collected.
• Right to Delete — request deletion of your personal information.
• Right to Correct — request correction of inaccurate data.
• Right to Opt-Out of Sale/Sharing — we do not sell or share personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information — financial data is used only to provide the Services.
• Right to Non-Discrimination — we will not discriminate against you for exercising CCPA rights.

To submit a CCPA request, email support@urbanpx.com with "CCPA Request" in the subject line. We do not respond to requests submitted through third-party opt-out services unless legally required.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent laws apply.

Legal Basis for Processing

International Data Transfers

Your data is stored and processed in the United States. Transfers from the EEA to the US are made under appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable with our service providers.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not processed your data in accordance with applicable law.

14. Children's Privacy

The Services are not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected information from a child, please contact us at support@urbanpx.com and we will promptly delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you via email (if you have an account) or via an in-app notice.
• For significant changes, ask for your re-consent where required by law.

Continued use of the Services after the effective date of any changes constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related questions, requests, or concerns:

• Email: support@urbanpx.com
• Subject line: "Privacy Request"
• Entity: UrbanPX, LLC

We aim to respond to all privacy inquiries within 30 calendar days.