Draft — pending legal review. This text isn't final yet.

Privacy policy

Version 0.8 · Last updated 15 October 2026

Your budget stays on your device. We never receive your amounts, categories, notes or balances, and we don’t use tracking cookies.

Who we are

Olvo is a budgeting app. Its maker is the “controller” of the little personal data described here. Contact: buildstream@protonmail.com.

Your budget stays on your device

Everything you enter — income, categories, amounts, notes and dates — is saved only in your browser’s storage on this device. There is no account and no server copy. We cannot see it, and nobody else can through us.

The app also keeps up to seven daily copies of your budget on the same device, so you can go back a day. Export and Import in Settings let you make and restore a backup file; that file is yours and goes wherever you save it.

Because the data is only on your device, clearing your browser’s data, uninstalling the app or losing the device deletes it. Export a backup now and then.

What the app and website use today

Your budget is never sent anywhere. Outside the device, the app and its website use the host that delivers their files, anonymous usage counts, crash reports, and Tally for the feedback and beta signup forms if you open them:

Cloudflare · Cloudflare, Inc. (USA)

Hosts the app and the website and delivers their files to your browser.

What it receives: Technical request data any website receives: IP address, browser type, the address of the file requested and the time. Never your budget: it is not sent to Cloudflare or to anyone.
Where: Global network; transfers outside the EU covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
How long: Olvo has no request logs turned on. Cloudflare keeps security data for a short time under its own policy.

Umami · Umami Software, Inc. (Umami Cloud)

Counts how the app is used, so we know what to improve.

What it receives: The name of what happened — setup started, setup finished, expense added, income added, plan edited, export done, data erased, install accepted, feedback opened, app opened — with the app’s name, browser language, screen size, and the browser type, device type and country Umami works out from the request. Never amounts, categories, notes, balances or dates; the app removes anything else before sending. No cookies. Only if you allow it: a random anonymous ID, so visits on different days can be counted as the same person. On the website: page views and two clicks (“demo opened”, “signup opened”), each with which of two headlines the page showed (“a” or “b”). On your first visit the page picks one at random and keeps that letter in your browser’s storage, so you see the same headline next time; with Do Not Track or Global Privacy Control on, nothing is stored and nothing is counted.
Where: [Umami Cloud region — choose EU when opening the account]
How long: [24 months]

Sentry · Functional Software, Inc. (Sentry)

Reports when the app crashes, so we can fix it.

What it receives: The kind of error, where in Olvo’s code it happened, the app version, and the page address without anything after it. For errors the browser itself raises, its message with any quoted text and numbers removed; any other message is dropped. Sentry also sees the browser type and the technical request data any website does. The app removes everything else before sending: never amounts, categories, notes, balances, what you typed, or a trail of what you did.
Where: [Sentry EU region (Frankfurt) — choose when opening the account]
How long: [90 days]

Tally · Tally BV (Belgium)

The feedback form in the app (“Send feedback”), and the beta signup form on the website.

What it receives: Feedback: only what you choose to write — what’s confusing, what you would pay, a testimonial and whether we may quote it — your e-mail address if you give it so we can reply, and the app’s version number (filled in by the app). Beta signup: your e-mail address, your agreement to hear from us about the beta, and which of the website’s two headlines you saw (“a” or “b”, not sent with Do Not Track or Global Privacy Control). Never your budget. Tally also receives the technical request data any website does.
Where: [EU — check in the Tally account]
How long: Feedback: [12 months], or sooner if you ask; a testimonial you allowed us to quote stays published until you ask us to remove it. Beta list: until you leave it (reply or write to us) or [6 months] after the beta ends.

Usage counts are on unless your browser sends Do Not Track or Global Privacy Control, in which case nothing is sent. You can turn them off in Settings › Usage statistics; then the counting script isn’t even loaded. They rely on our legitimate interest in improving the app (GDPR Article 6(1)(f)) and don’t identify you.

Crash reports follow the same choice: the same Settings switch and Do Not Track turn them off, and then the reporting code isn’t loaded. They rely on our legitimate interest in keeping the app working (GDPR Article 6(1)(f)).

The anonymous ID is off unless you allow it when the app asks, or in Settings. It is a random number made on your device, never linked to your name or your budget, and deleted when you turn it off or erase all data. Because it is stored on your device for this purpose, we ask your consent first (GDPR Article 6(1)(a) and the ePrivacy rules); withdrawing it is as easy as giving it.

Sending feedback and joining the beta list are up to you and based on your consent (GDPR Article 6(1)(a)); we quote a testimonial only if you tick the box allowing it, the signup form asks you to tick a box before it takes your address, and you can withdraw either at any time.

The app uses no cookies. It stores a few settings on your device (for example, whether you dismissed a hint, your usage-count choices, or the date of your last visit, so the app can tell you if your browser cleared your budget); apart from the anonymous ID you allowed, these never leave the device. The website stores one thing: the letter of the headline it showed you (see Umami above).

Coming during the beta

We plan to add the services below. None of them is in the app yet. When one is added we will update this policy, its date and version, before the release that adds it. None of them will ever receive your amounts, categories, notes or balances.

Resend · Resend, Inc. (USA)

Will send e-mail to the beta list (the addresses given through the signup form) and, later, onboarding e-mails.

What it receives: Your e-mail address, and when you signed up.
Where: USA; transfers covered by the EU Standard Contractual Clauses.
How long: Until you unsubscribe (every e-mail has a link) or ask us to delete it.

What we don’t do

We don’t sell or share personal data.
We don’t use advertising or tracking cookies, or follow you across other websites.
We don’t connect to your bank.
We don’t make automated decisions about you.

Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, to restrict or object to its use, and to withdraw consent. For your budget you can do all of this yourself: Settings › Export gives you a copy, and Settings › Erase all data deletes it from the device.

For anything we hold (feedback, the e-mail list), write to buildstream@protonmail.com. We answer within one month.

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), or to the authority where you live.

Children

Olvo is not meant for children under 16.

Changes

This page has a version and a date at the top. When we change it, we update both; if a change affects what is collected, the app will tell you before it happens.