Privacy Policy
Baqi is a personal finance tracker. It holds some of the most sensitive information you have, and it is built so that as little of it as possible leaves your phone. This page says exactly what does.
Baqi is operated by Budget Tracker ("we"). If anything here is unclear, write to mousa.alwaraki@gmail.com.
What we hold
- Your email address, because that is how you sign in.
- A display name, if you give one, so the people in your household can tell whose spending is whose.
- The financial records you create or import: accounts and balances, transactions with their amounts, dates and merchant names, categories, budgets, savings pots, and any investments you enter.
- Your Baqi Pro subscription, if you have one: the Apple-signed record of the purchase (product, dates, renewal state and price), checked on our server so the subscription is tied to your account. We never see your card or Apple Account details.
- How the app is used: which screens are opened and which features are used, with the app version, iOS version, device model and language. These events never contain amounts, balances, merchants, notes, or the names of your accounts or categories. They are linked to your account when you are signed in, kept in full for 90 days and as daily totals after that, and used only to decide what to improve. Turn them off at any time in Settings → Share usage analytics.
That is the whole list. We do not collect your location, your contacts, advertising identifiers or your browsing. Usage events are our own and go only to our own server: there is no third-party analytics or crash-reporting SDK in the app, no advertising, and no tracking across other companies' apps or websites.
We never connect to your bank
Baqi has no banking integration and never asks for banking credentials. Transactions reach the app in one of three ways, all of which you start yourself: you type them in, you set up an Apple Shortcuts automation that hands the app a notification your bank already sent to your phone, or you import a screenshot. Nobody — including us — can use Baqi to reach your bank account.
Where it is kept
Everything lives on your device first, so the app works with no signal. When you are signed in, it is also stored on servers operated by Supabase so your phones stay in step. Access is enforced per household at the database level: a request carrying someone else's account can read none of your rows.
Who else processes it
These are the only third parties involved, and what each one receives:
| Who | What they get | When |
|---|---|---|
| Supabase | Your email address and all of your financial records | Whenever you are signed in and syncing |
| Google (Gemini API) | The screenshot you chose, and nothing else | Only when you use screenshot import |
| Apple / Google | Confirmation of who you are | Only if you sign in with Apple or Google |
| Apple | Sends us the signed record of your Baqi Pro purchase and its renewals, refunds and cancellations | Only if you subscribe |
| Yahoo Finance | The ticker symbol you are tracking | When investment prices refresh |
| gold-api.com | Nothing about you — just a price request | When gold prices refresh |
| open.er-api.com | Nothing about you — just a rate request | When exchange rates refresh |
Your transaction history is never sent to any of them except Supabase. Screenshot import is the one feature that sends an image off the device, it only runs when you pick an image, and the image is passed through for text extraction rather than stored by us.
Sharing with a household
A household is the unit of access. Anyone you invite into yours can see and change all of its accounts, balances, transactions and budgets, including entries made before they joined. Only invite someone you would show your bank statement to. You can turn on separate personal spending to keep some categories to yourself, but treat that as tidiness rather than secrecy.
Deleting your data
Settings → Account → Delete account removes your account immediately. If you are the last member of your household, the household and everything in it — accounts, transactions, budgets, pots — is deleted with it and cannot be recovered. If others remain, their copy of the household data stays, since it is theirs too. The copy held on your own phone is removed when you delete the app.
Keeping it
We keep your records for as long as your account exists, because the app is useless without your history. We do not keep backups of deleted households beyond what the hosting provider retains for disaster recovery.
Legal basis and your rights
We process this information to provide the service you asked for. Depending on where you live you may have the right to access, correct, export or erase it, and to object to its processing. The app gives you all of this directly: everything we hold is on your screen, you can edit any of it, and account deletion is one tap. For anything the app does not cover, write to mousa.alwaraki@gmail.com.
Children
Baqi is not intended for children under 13, and we do not knowingly create accounts for them.
Changes
If this policy changes in a way that affects what we collect or who receives it, we will update the date at the top and say so in the app before the change takes effect.