Privacy Policy: Pixi Budget

Last updated: 1 October 2026

Pixi Budget ("the app") is made by DiaLuna. This policy explains what the app does with your information. The short version: without an account, your data stays on your phone and we can't see it. With an optional account, your budget is stored on our server so your phones stay in sync, and you can delete it any time.

Without an account

Everything you enter (your nickname, accounts, entries, budgets, categories, settings) is stored only on your device, in the app's private storage. Nothing is sent to us.

With an account (optional)

You can create an account in Settings → Sync & account, with an email and password or with Google. It's only for keeping your budget the same on several phones.

• What we store: your email address and name (and, with Google, the link to your Google account), and the budget data you sync: your nickname, main currency, salary day and week start, accounts, entries (amounts, dates, notes), budgets, categories, cycles and exchange rates you typed or fetched. Your theme, language, sounds and other settings stay on the phone.
• Your @handle: with an account you pick a unique @handle (like @mia_budget). It's stored with your account. Nobody can look you up by it yet; the only thing anyone can learn is whether a handle is already taken, when they try to pick it.
• Why: only to sign you in and to sync your budget between your phones. We don't read it, analyse it, or use it for anything else.
• Where: the database and sign-in service are run by Neon (neon.tech), in the EU-West-2 region (London), with data encrypted at rest. The sync server runs on Cloudflare Workers (cloudflare.com). Both act only on our behalf. If you choose Google, Google handles that sign-in under its own policy.
• In transit: always over HTTPS.
• How long: as long as you keep the account. When you delete it, it's gone from the server right away; the provider's short database history (kept a few days for disaster recovery) expires on its own.
• Signing out stops syncing; the data on that phone stays there.

What else leaves your device

• Exchange rates. To convert between currencies, the app asks the free service at open.er-api.com (ExchangeRate-API) for today's rates. The request contains only your main currency code (for example "TND"). It happens when you tap "Refresh online", right after setup, when a currency you use has no rate yet, and once a day if you turn on the daily refresh. The service may see your IP address, as with any internet request; its own policy applies: https://www.exchangerate-api.com/terms
• Backups you export. When you export a backup, the app saves a file in a folder you pick on your phone, or hands it to the share sheet. Where it goes (Drive, email, your files) is your choice. The file isn't encrypted, so keep it somewhere private.

What the app does not do

• No analytics, tracking, or advertising
• No selling or sharing of data with anyone
• No access to your contacts, location, camera, or microphone

Your choices

• Delete your account: Settings → Sync & account → Delete account. This deletes your sign-in and everything synced to it, including your @handle, which becomes free again. Without access to the app, see https://pixibudgetapi.dia.tn/account/delete
• Delete what's on a phone: Settings → Reset everything, or uninstall the app.
• Limit online rates: type rates by hand in Settings → Exchange rates and leave the daily refresh off. (The app still fetches rates once after setup and when a currency without a rate appears, falling back to built-in estimates when offline.)

Children

The app isn't aimed at children and doesn't knowingly collect personal information from them. Accounts are optional.

Changes

If this policy changes, the new version will be published at https://pixibudgetapi.dia.tn/privacy with a new date.

Contact

DiaLuna · dhiaa.kahri@gmail.com