Privacy Notice

Last updated: October 4, 2026

1. Who we are

Piggly is operated by Andrea J Brown ("we", "us"), who acts as the data controller for the personal data described in this notice.

2. Data we collect and why

• Account data (email address, login credentials) — to create and secure your account. Legal basis: contract performance.
• Subscription status (plan, status, renewal date) — to provide the Pro features you paid for. Legal basis: contract performance.
• Support messages — to respond to your requests. Legal basis: legitimate interests.
• Usage and device data (IP address, browser type) — for security, fraud prevention, and product improvement. Legal basis: legitimate interests.

Your budgets, goals, and transactions are stored locally in your own browser, not on our servers. Payment card details are collected and processed by Paddle, our Merchant of Record; we never see or store them.

3. Who we share data with

• Service providers that host and operate the app (cloud hosting, authentication);
• Paddle, as Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, and invoicing;
• Professional advisers (legal, accounting) where needed;
• Authorities where required by law.

4. Retention

We keep your data only as long as needed for the purposes above, then delete or anonymise it. Account data is deleted when you delete your account, subject to legal retention obligations.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. If you are in the UK or EEA, you also have the right to complain to your supervisory authority, and we respond to requests within one month. To exercise any right, contact us at andreajamette@gmail.com.

6. International transfers

Some service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

8. Cookies

We use only essential cookies and local storage needed to run the app and keep you signed in. We do not use advertising or marketing cookies.