Privacy policy

Last updated October 19, 2026

What Envelopia stores

Envelopia stores the budget you create: envelopes, accounts, entries, bills, paydays, notes, and your settings. You type this in or bring it in from a file you choose. We never connect to your bank and never see your bank password.

If you don't sign in

Your budget stays on your device only: in the app's storage on your phone, or in your browser's storage when you use the website. It isn't sent to us. Clearing your browser's site data, or uninstalling the app, deletes it, so save a backup file if you want to keep a copy.

If you sign in with Google

Your budget is also saved to our cloud database so it can sync between your devices and be restored if you lose a device. From your Google account we receive your name, email address and a Google account ID. We use them only to sign you in, keep your budget connected to you, and show your name and email to people you choose to share your budget with.

Our cloud database and sign-in run on Google Firebase. Google stores the data for us and handles it under its own privacy and security terms for cloud customers.

If you share a budget

Everyone you invite to a shared budget can see and change everything in it, and can see the name and email of each member. Invite codes expire after 7 days.

Receipt photos

Receipt photos are saved on the device that took them.

What Envelopia does not do

• No ads, and no advertising or tracking code in the app or on this website.
• No analytics services watching how you use the app.
• We don't sell, rent or trade your data, and we don't use it for anything except running Envelopia for you.
• We don't read your budget. We'd only look at it if you send it to us yourself and ask for help.

Other services Envelopia talks to

• Google Firebase: sign-in and the cloud copy of your budget, as described above. This website is also hosted on Firebase, which keeps standard server logs (such as IP addresses) to run and protect the service.
• ExchangeRate-API: if you keep an account in another currency, the app downloads that day's exchange rates. The request includes only your budget's currency code, nothing about you or your budget.
• Google Play: when Plus is available, purchases are handled by Google Play. We receive confirmation of your purchase, never your payment details.

Problem reports

If something goes wrong, the app can prepare an email to us with the app version, your device model and the last error message. Nothing is sent unless you send that email yourself, and you can read it first. It never includes your amounts or entries.

How long we keep your data

Your cloud copy is kept while you use Envelopia. You can delete it at any time (see below). If you delete it, it's removed from our database right away; backups held by our cloud provider expire on their own schedule.

Deleting your data

In Envelopia, open Backup & sync and choose “Delete my account”. This removes your account and the budget saved in it from our cloud. (If you share a budget, you leave it and the others keep it.) If you can't get into the app, email envelopiahelp@gmail.com from the Google address you signed in with and we'll delete it for you. More on the delete your data page.

Security

All data travels over encrypted connections. Our database rules allow only you, and people you've invited to a shared budget, to read or change your budget. On your phone you can also lock Envelopia with your fingerprint, face or a PIN.

Children

Envelopia isn't meant for children under 13, and we don't knowingly collect information from them.

Your rights

You can see everything Envelopia holds about you in the app, export it to a spreadsheet or backup file, correct it, and delete it, all without asking us. If you live somewhere that gives you additional privacy rights, such as California or the European Union, email us and we'll help with any request.

Changes

If we change this policy, we'll update the date at the top. If a change affects how your data is used, we'll tell you in the app before it takes effect.