Privacy policy

Last updated: 21 October 2026.

Who we are

The controller is Ingenium Software Engineering Limited. Registered office: Belmont Suite, Paragon Business Park Chorley New Road, Horwich, Bolton, England, BL6 6HG. Company number: 13334667. ICO registration number: ZB147122.

Privacy email: privacy@buckery.app. You can also use the contact form and say it is a privacy request.

The rules

We follow the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR). PECR is why analytics cookies stay off until you agree. The cookie policy explains that choice.

What we collect

• Your account email, when you create an account.
• Your social login profile — name, email, and avatar — when you sign in with Google, Microsoft, Apple, or Facebook.
• Budget data you save to an account, stored in Cloudflare D1. That is the buckets, amounts, timings, debts, and What-Ifs in the model.
• Your email, if you join the waitlist.
• Google Analytics 4 usage data, and only after you consent.

A copy of the model can also stay in the browser until you clear it. We do not sell personal data, and we do not ask for special category data.

Why we use it

• Account, profile, and budget data. To provide Buckery. Lawful basis: contract (UK GDPR Article 6(1)(b)).
• Waitlist. To write to you about Buckery. Lawful basis: consent (Article 6(1)(a)). You can withdraw that consent at any time. Withdrawing it does not affect an email we have already sent.
• Analytics. To see how the website is used. Lawful basis: consent (Article 6(1)(a)), and PECR. This stays off until you accept.
• Payments. To take payment for a plan, when Stripe is switched on. Lawful basis: contract. We do not take payment yet, and we will not store your full card number.
• Messages you send us. To reply. Lawful basis: legitimate interests (Article 6(1)(f)) in answering you.

Who we share it with

These organisations process personal data for us:

• Cloudflare — hosting, and Cloudflare D1 for budget data saved to an account.
• Resend — account emails, such as a sign-in link.
• Formspree — the waitlist and the contact form on this website.
• Google, Microsoft, Apple, and Facebook — sign-in, when you choose that provider. We receive the profile they return.
• Google Analytics 4 and Google Tag Manager — only after you consent.
• Stripe — payments, coming later. Not used yet.

How long we keep it

• Account, profile, and budget data: while the account exists. After you delete the account, we remove them from the live database. Backups are kept for 30 days after deletion.
• Waitlist email: deleted 12 months after launch, or when you unsubscribe.
• Analytics cookies: see the cookie policy. Google Analytics 4 data is kept for 14 months.
• Messages you send through the contact form: kept for 12 months.
• Sign-in session: 7 days, in the cookie __Secure-better-auth.session_token.
• Sign-in presence: 7 days, in the cookie buckery.session. The value is 1. It records that the sign-in cookie is present. It is not the session token.

Your rights

You can ask us for:

• access to the personal data we hold about you
• rectification, if it is wrong
• erasure
• restriction of processing
• portability of data you provided, where the basis is contract or consent
• objection, where the basis is legitimate interests
• withdrawal of consent, where we rely on consent

To delete an account, and the model stored with it, use the data deletion page. We aim to reply within one month. We do not usually charge a fee.

International transfers

Some of these processors are in the United States. Where personal data leaves the UK, we use the UK–US data bridge when the recipient is certified under the UK Extension to the EU–US Data Privacy Framework. Certified under that UK Extension: Cloudflare, Resend, Google, Microsoft, and Stripe.

Apple, Meta (Facebook sign-in), and Formspree are not certified under the UK Extension. Transfers to them use the UK International Data Transfer Agreement (IDTA), or the Addendum to the EU Standard Contractual Clauses.

Complaints

You can complain to the Information Commissioner’s Office at ico.org.uk. Our ICO registration number is ZB147122.

The other pages

The terms cover how Buckery may be used. The cookie policy lists the cookies.