Information We Collect

What You Give Us Directly

When you create an account or use our budgeting services, you provide certain information voluntarily. This includes your name, email address, phone number, and the financial data you choose to track through our platform.

You're in control of how much financial detail you share. Some users track every coffee purchase, others just monitor major categories. We don't require bank account connections—manual entry works fine if that's your preference.

Technical Information We Gather

Like most websites, we automatically collect some technical data when you visit rumisesora.com. This includes your IP address, browser type, device information, and how you navigate through our site. We use this to fix bugs, improve performance, and understand which features people actually use.

Financial Data You Track

The core of our service involves the budget and expense information you input. This might include spending categories, income sources, savings goals, and transaction details. This data is encrypted both in transit and at rest on our Australian servers.

How We Use Your Information

Your data serves specific purposes, and we don't go fishing through it for unrelated reasons. Here's what we actually do with the information you provide:

We don't use your specific financial data to train AI models or for purposes beyond providing you the budget control service. Your spending habits are yours, not research material.

Data Protection and Security

Financial information requires serious security measures. We use industry-standard encryption (TLS 1.3) for all data transmission. Your information is stored on secure servers located in Sydney, Australia, with regular backups maintained in Melbourne.

Our Security Practices

• Encryption: All financial data is encrypted using AES-256 encryption both during transmission and storage.
• Access Controls: Only authorized rumisesora staff can access user data, and only when necessary for support or security purposes. All access is logged.
• Regular Audits: We conduct quarterly security audits and penetration testing to identify and fix vulnerabilities.
• Staff Training: Our team receives ongoing privacy and security training to ensure they handle your data appropriately.
• Incident Response: We maintain a documented breach response plan and will notify you within 72 hours if any incident affects your data, as required by Australian law.

That said, no system is completely impregnable. We take reasonable precautions, but you should use strong passwords and enable two-factor authentication (which we strongly recommend).

Your Rights and Choices

Under Australian privacy law, you have specific rights regarding your personal information. We've built tools to make exercising these rights straightforward rather than bureaucratic.

Access Your Data

You can download a complete copy of your data at any time through your account settings. This export includes all budget entries, transaction history, and account information in a readable format (CSV and JSON).

Correct Your Information

Found an error? You can edit your profile information and budget data directly through the platform. If you spot something you can't change yourself, contact us and we'll fix it promptly.

Delete Your Account

You can delete your account whenever you want. This removes your personal information and budget data from our active systems. We keep some records for 7 years to comply with Australian tax and financial regulations, but these are stored separately and not used for any operational purposes.

Opt Out of Marketing

Every marketing email includes an unsubscribe link. Click it once and you're done—no hoops to jump through. You'll still receive essential service emails (password resets, security alerts, billing confirmations) because those aren't marketing.

Data Sharing and Third Parties

We keep data sharing minimal. Here's the complete list of circumstances where your information leaves our direct control:

Service Providers

We work with a small number of third-party companies that help us run rumisesora. This includes our hosting provider (Australian servers), email service for notifications, and payment processor for subscriptions. These companies are contractually bound to protect your data and can only use it for providing services to us—not for their own purposes.

Legal Requirements

If we receive a valid legal request from Australian law enforcement or courts, we may need to disclose information. We carefully review every request and only provide what's legally required. Where permitted by law, we'll notify you if your data is requested.

Business Transfers

If rumisesora is acquired or merges with another company, your data would transfer to the new entity. We'd notify you beforehand and you'd have the option to delete your account if you're uncomfortable with the change.

We don't share data with advertising networks, data brokers, or analytics companies beyond basic website statistics (which don't include your personal budget information).

Data Retention

We keep your data for as long as you maintain an active account. If you stop using rumisesora but don't delete your account, we'll retain your information for 3 years before automatically removing it.

Deleted Account Data

When you delete your account, we remove your personal information and budget data within 30 days. Some information must be retained longer for legal compliance:

• Transaction records related to paid subscriptions (7 years for tax purposes)
• Support correspondence (2 years for quality assurance)
• Security logs showing access patterns (1 year for fraud prevention)

This retained data is moved to secure archive storage, separated from operational systems, and only accessed if legally required or for the specific compliance purpose it serves.

Cookies and Tracking

We use cookies to keep you logged in and remember your preferences. These are essential cookies that make the site function properly. We also use analytics cookies to understand how people use rumisesora, which helps us improve the platform.

You can disable cookies in your browser settings, though this will affect how well the site works. We don't use advertising cookies or cross-site tracking—your budget data isn't following you around the internet.

Types of Cookies We Use

• Essential Cookies: Keep you logged in and maintain your session. Required for the site to function.
• Preference Cookies: Remember your settings like currency display and notification preferences.
• Analytics Cookies: Help us understand usage patterns. These don't identify you individually.

International Data Transfers

Your data stays in Australia. We don't transfer information overseas or use international service providers that would move your data outside Australian jurisdiction. This ensures your information remains protected under Australian privacy laws.

If you're accessing rumisesora from outside Australia, your data will be transferred to and processed in Australia. By using our service, you consent to this transfer.

Children's Privacy

rumisesora is designed for adults managing their finances. We don't knowingly collect information from anyone under 18. If you're a parent and discover your child has created an account, please contact us and we'll delete it immediately.

Some families use rumisesora to teach teenagers about budgeting. That's fine—but the account should be in a parent or guardian's name, with the teen using it under supervision.

Changes to This Policy

We'll update this privacy policy occasionally as our practices evolve or regulations change. When we make significant changes, we'll notify you by email and display a notice on the platform. The "Effective Date" at the top tells you when this version took effect.

We maintain an archive of previous policy versions if you want to see what changed. Continued use of rumisesora after policy updates means you accept the changes. If you don't agree with modifications, you can delete your account before they take effect.