Privacy
Effective September 29, 2026. Budvo is made by NullDaily LLC ("we"). The short version: we never receive your financial data, and this website doesn't track you.
Your financial data stays on your server
Budvo is self-hosted. The server runs on hardware you choose, and your accounts, balances, transactions, bills, goals and plans are stored there, in an encrypted database that only you can unlock. We don't host, receive or see any of it. You never need an account with us to use Budvo; the optional marketplace account below holds no financial data.
If someone else hosts a Budvo server for you, they run that machine, and Budvo tells you before you join that they could technically see your data.
This website
- No tracking. No analytics, no advertising, no tracking cookies, no third-party scripts. Your light or dark theme choice is kept in local storage and never leaves your device. If you sign in to a marketplace account, one session cookie (
pcm_session) keeps you signed in; it's used for nothing else. - Server logs. The site runs on NullDaily's own server and reaches the internet through Cloudflare. Like any web host, Cloudflare processes your IP address and request details to deliver pages and stop abuse. The site keeps IP addresses in memory only briefly, to rate-limit sign-in and server linking, and uses aggregate request logs only to keep the site running.
- Update checks. Your Budvo server asks this site whether a newer version exists, sending the version it runs. We don't use these requests to identify you.
Optional services
These are optional, and described honestly so you know where data goes if you use them:
- Marketplace account. To install add-ons you can create an account on this site and link your Budvo servers to it. We store your email, your name, a salted hash of your password (never the password), each linked server's name, version and when it last checked in, and which add-ons you've installed or own. Your server's link is a random token we only store a hash of; unlink it from your account page or your dashboard at any time. None of this includes financial data.
- Marketplace downloads. When you browse or install an add-on, your server downloads the catalog and the package from this site. Those requests carry no financial data. Connectors themselves talk directly between your server and the provider you chose (for example Plaid, with your own Plaid keys). We never hold provider keys and never see what they sync.
- Push relay (coming, with the iOS app). Your server can't hold Apple's push credentials, so notifications will go through a small NullDaily relay. Your server encrypts each notification for your phone before sending it. The relay sees only a device token, your server's registration and ciphertext it can't read, and keeps them only as long as needed to deliver and rate-limit.
If you email us, we use your message and address only to reply.
Your choices
You can stop using any optional service at any time, and uninstalling Budvo removes everything, since everything lives on your server. For anything we might hold (your marketplace account, or an email you sent), write to [email protected] to ask for a copy or deletion.
Changes
If this policy changes, we'll update it here and change the date at the top.