Back to legalBucko legal document

Privacy Policy

How Bucko collects, uses, stores, and shares personal data.

Privacy Policy

Last updated: 2026-05-12

1. Identity and Contact Details

This Privacy Policy explains how Bucko collects, uses, stores, and shares personal data when you use the Bucko mobile app, related services, and any Bucko website pages that link to this policy.

Bucko is currently operated by an individual operator.

For the purposes of applicable data protection law, including the GDPR where applicable, the operator above is the data controller for Bucko unless this policy states otherwise.

2. Scope of This Policy

This policy applies to:

This policy does not govern third-party services that have their own privacy notices, including app stores, authentication providers, subscription platforms, payment processors, and external websites linked from Bucko.

3. Categories of Personal Data We Collect

Depending on how you use Bucko, we may collect the following categories of personal data:

Account and identity data

Financial and budgeting data

Shared wallet and collaboration data

AI and chat data

Receipt and image data

Subscription and purchase data

Bucko does not directly process or store your full payment card details for in-app subscriptions.

Device, app, and usage data

Notifications data

Support and feedback data

Local device data

4. How We Collect Data

We collect personal data in the following ways:

5. Purposes of Processing

We process personal data to:

6. Legal Bases Under GDPR

If the GDPR or a similar data protection law applies, we generally rely on the following legal bases:

Examples:

7. AI-Related Processing

Bucko includes AI-assisted features such as:

To provide these features, Bucko may send relevant inputs and related context to third-party AI providers currently used by the product, including OpenAI and Google Gemini. That may include text you enter, receipt image data, wallet and category context needed for classification, and related prompts or outputs.

We use AI features to help interpret and organize information, not to provide regulated financial, tax, accounting, investment, or legal advice. AI outputs may be inaccurate, incomplete, or contextually wrong. You are responsible for reviewing AI-generated outputs before relying on them or accepting suggested actions.

8. Receipt and Photo Processing

If you use receipt scanning features, Bucko may:

Bucko is designed to use receipt images as temporary processing inputs rather than permanent storage. Based on the current implementation:

Bucko also displays a product-level privacy note indicating that budgeting-safe receipt fields are intended to be shown and that sensitive receipt details such as VAT numbers, card details, or bank details are not intended to be kept in Bucko as budgeting records.

9. Analytics, Diagnostics, and Notifications

Bucko uses PostHog for analytics and diagnostics. Based on the current implementation, PostHog may receive:

Bucko currently has PostHog session replay disabled.

Bucko also uses OneSignal for push notifications. OneSignal may process device and notification identifiers and may associate your notification identity with your Bucko user ID in order to send relevant app notifications.

Bucko may request device permissions such as camera access for receipt scanning. The codebase also includes certain platform permissions, including Android advertising ID and audio-related permissions, but this policy does not represent that Bucko uses those permissions for advertising or microphone-based product features unless and until such uses are clearly enabled and disclosed.

Bucko does not use your location for app features. The iOS app configuration explicitly states that location is not collected or used for Bucko features.

10. Subscriptions and Payment Processing

Bucko uses RevenueCat to manage subscription status and premium access. Apple and Google, through their app store billing systems, may process subscription purchases and payment information under their own terms and privacy notices.

Bucko may receive subscription-related information such as:

Bucko does not directly process or store full credit card or debit card details for in-app subscription purchases.

11. Sharing and Disclosure

We may share personal data with service providers and infrastructure partners that help us operate Bucko, including:

We may also disclose personal data:

We do not state here that every provider acts exclusively as a processor in every context. Some third parties may act as independent controllers or under mixed roles depending on the service.

12. International Transfers

Some service providers used by Bucko may process data outside your home jurisdiction, including outside the EEA, UK, or Switzerland. Where required, we will rely on appropriate safeguards for such transfers, such as contractual safeguards or another lawful transfer mechanism recognized under applicable law.

Because Bucko uses third-party infrastructure providers, you should expect that some data may be processed internationally.

13. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including to provide the service, maintain account functionality, resolve disputes, enforce agreements, and comply with legal obligations.

Retention examples based on current implementation:

14. Shared Wallet Visibility Model

Bucko allows users to share wallets with other users through invite-based membership features. If you share a wallet or join a shared wallet, other wallet participants may be able to see information associated with that wallet, including relevant transactions, balances, recurring items, and related wallet data.

You are responsible for deciding who you invite into a shared wallet and whether you join a wallet shared by someone else. Please do not place information in a shared wallet if you do not want other wallet participants to view it.

15. Your Rights Under GDPR, EEA, UK, and Similar Laws

Depending on your location and applicable law, you may have rights to:

These rights are not absolute and may be limited by law. To exercise privacy rights, contact us at szabogergo.ev@gmail.com.

16. Account Deletion and Data Requests

Bucko includes an internal deletion path intended to remove major categories of app data stored in Convex when account deletion is run. Based on the current implementation, that process is designed to delete items such as:

Deletion of Bucko-held app data may not automatically delete data independently retained by third parties under their own systems, legal obligations, or roles, including app stores, authentication providers, analytics providers, notification providers, or subscription systems.

For more detail, see Bucko's data deletion page or contact szabogergo.ev@gmail.com.

17. Children's Privacy

Bucko is not intended for children below the minimum age required to use the service under applicable law. We do not knowingly design Bucko as a child-directed service. If you believe that a child has provided personal data in violation of applicable law, contact us so we can review and respond appropriately.

18. Security

We use reasonable technical and organizational measures intended to protect personal data. However, no method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your device access, account credentials, and any shared-wallet participation choices.

19. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, website, or other reasonable means. The "Last updated" date above reflects the effective revision date of this version.

20. Contact Details

Privacy questions, rights requests, and support requests should be sent to:

Bucko's Terms and Conditions, Data Deletion Policy, and AI Feature Disclaimer should be read together with this Privacy Policy.