Bsync

Privacy Policy

Last updated: 27 August 2026  ·  Effective: 27 August 2026  ·  Version 2.1

1. Who we are

Bsync ("Bsync", "the app", "we", "us", "our") is a mobile application published by Ahkeel Beckford, operating from Jamaica. For the purposes of the UK and EU General Data Protection Regulation, and Jamaica's Data Protection Act, 2020, Ahkeel Beckford is the data controller for the personal information described in this policy.

Our privacy point of contact is privacy@bappssupport.com. We aim to respond to every privacy enquiry within 30 days.

2. Scope of this policy

This policy covers the Bsync mobile application on iOS and Android, and the supporting cloud services that run behind it. It applies whether you use Bsync solo — tracking only your own money — or linked with a partner in a shared workspace.

It does not cover the practices of the third-party services listed in section 7, each of which operates under its own privacy policy, or of the app stores you download Bsync from.

3. Information we collect

3.1 Account and profile information

• Email address — from you when you register with an email and password, or from Google or Apple when you use those sign-in options.
• Display name and nickname — a name you choose in the app. If you sign in with Google, we pre-fill this from your Google display name; you can change it. If you sign in with Apple, Apple provides your name only on the first sign-in and never again.
• An accent colour you pick (or that we assign at random) to identify you in shared views.
• A Firebase account identifier — an opaque, random string that identifies your account across our systems.
• Account timestamps — when the account was created, and whether you have finished setup.

We never see or store your password. Authentication is handled entirely by Google Firebase Authentication, or by Google or Apple when you use those sign-in methods.

3.2 Financial information you enter

This is the substance of the app, and all of it is information you type in or scan yourself. We do not connect to your bank, and we have no access to your accounts, balances, card numbers or statements.

• Expenses and income — description or merchant name, amount, category, date, notes, payment method, and whether the item has been settled.
• Budgets — budget names, spending categories, category limits and line items.
• Income figures — the monthly income you record for yourself and, in a shared workspace, for your partner, plus any additional income sources.
• Recurring bill templates — the name, amount, category, frequency and due date of bills you ask the app to add automatically.
• Pay-cycle settings — the day of the month or fortnightly rhythm your budget runs on.
• Credit-card settings — whether the card tracker is on, the credit limit you enter, and the day of the month your statement falls due. We do not collect card numbers, expiry dates or CVVs, and the app has no field to enter them.
• Split arrangements — how a shared expense is divided between partners, and who has paid their share.

3.3 Partnership information

• Your linked partner's account identifier, nickname and email address.
• Whether the partnership is a solo workspace or a shared one, and whether it is active or ended.
• Invite codes you generate, which expire after 10 minutes.
• The dates a partnership was created and ended.
• A permanent snapshot of both partners' nicknames taken at the moment a partnership ends or a member deletes their account. This is kept indefinitely so that an ended partnership can still be named to you afterwards, even if the other person has since deleted their account. See section 9.
• A list of your previous partnership identifiers, so you can still find your own expenses from a partnership that has ended.

3.4 Receipt images

If you use receipt scanning, we access your camera and, if you choose to pick an existing photo, your photo library — only at the moment you tap to scan, and only for the image you select. We do not browse, index or upload your photo library.

What happens to the image is described in full in section 6.

3.5 Device and technical information

• Push notification tokens — an identifier for each device you have signed in on, used only to deliver notifications. Removed when you sign out on that device.
• Your device's time zone — so that reminders arrive at a sensible local hour rather than in the middle of your night.
• Platform and app version — whether you are on iOS or Android, and which release you are running.
• Crash and error diagnostics — technical reports when the app fails, collected through Google Crashlytics.
• IP address — when you request a password-reset code, your IP address is processed transiently and stored only as an irreversible cryptographic hash, purely to rate-limit abuse. We keep no readable IP logs of our own. Our service providers necessarily receive the IP address your device connects from, as any internet service does; we have disabled the location lookup that would otherwise derive your city or region from it (see 7.4).

3.6 What we do not collect

Bsync does not collect your location, your contacts, your microphone, your calendar, your health data, your browsing history, or any advertising identifier. We do not use advertising SDKs, and there are no ads in the app.

4. How and why we use it

Where our basis is legitimate interest, we have considered whether that interest is overridden by your rights, and limited the processing accordingly — for example, our analytics is structurally incapable of receiving a financial figure. You may object to legitimate-interest processing at any time (see section 11).

We do not use your financial information for advertising, profiling, credit scoring, lending decisions, resale, or any purpose other than operating the features you are using.

5. What your partner can see

Linking. One partner generates a six-digit invite code; the other enters it. Linking creates a new shared workspace. If you were previously using Bsync solo, your existing solo history stays saved but does not move into the new shared workspace.

Ending (unlinking). Either partner can end the partnership at any time, and doing so is permanent and destructive. The shared workspace is disbanded: the budgets, recurring bills, shared categories, pay cycle, income split and shared credit-card settings are deleted. Both of you are returned to the workspace you used before you linked, or given a new one. The other partner is notified.

What you keep. Your own expenses. Anything recorded as a shared expense is divided into each partner's share first, so you keep your half and they keep theirs. From that point neither of you can see the other's entries — this is enforced by our server-side security rules, not only by the app. Yours are in the app under Settings → Past households, where you can also delete them.

There is no resuming. An ended partnership cannot be reopened. Linking with the same person again creates a new, empty shared workspace.

If your partner deletes their account. Their profile and sign-in credentials are permanently deleted, and the shared workspace is disbanded exactly as if they had unlinked — so you keep your own expenses, including your share of anything the two of you split, and are returned to your own space. You no longer have access to entries that were theirs. See section 9.

6. Receipt scanning and AI processing

Two features in Bsync use Google's Gemini generative AI models, accessed through the Google AI API. Both are optional and neither runs unless you invoke it.

6.1 Receipt scanning

When you photograph a receipt:

1. Text is first read on your device using on-device optical character recognition. This step involves no network transmission.
2. The image is resized and compressed on your device, then sent over an encrypted connection to our cloud service, together with the text recognised in step 1.
3. Our service forwards the image and text to the Google Gemini API, which returns structured details: merchant name, total, tax, line items, date, currency and receipt number.
4. The image is not stored. It exists only in memory for the duration of the request and is discarded once extraction completes. We do not keep a copy, and neither our database nor any file storage ever receives it.
5. The extracted details — not the image — are cached for up to 400 days, so that re-scanning the same receipt does not incur a second AI call. This cache is scoped to your account and your workspace and is unreadable by any other user.

6.2 Ask Syd

When you ask the in-app assistant a question about your spending, we send the Google Gemini API:

• Your question, capped at 300 characters.
• A summary of your workspace's spending covering up to the last 24 pay cycles — category totals, cycle totals, budget figures, and a list of your most-used merchants by name and amount.

We do not send your name, your email, your partner's identity, your notes, or any account identifier. Answers are cached so that a repeated question costs nothing.

7. Third-party services

We use the following processors and services. We have no other data-sharing arrangements, and we do not sell or rent your information to anyone.

7.1 Where your data is stored

All app data — your account, your transactions, your budgets and your partnership — is stored in Google Firebase, in Google Cloud data centres located primarily in the United States. Our cloud functions run in the us-central1 region. The limited analytics events described in 7.4 are additionally held by PostHog, also in the United States; no financial data is included in them.

7.2 Payments

Subscriptions are purchased and billed entirely through the Apple App Store or Google Play. We never receive, see or store your card number, bank details or billing address. We receive only a confirmation from RevenueCat that a subscription is active, tied to your account identifier.

7.3 Notification content

7.4 What our analytics can and cannot see

We use two analytics services — Google Analytics for Firebase and PostHog — and both receive exactly the same, deliberately narrow set of information. We use two because they answer different questions; neither one gets more than the other.

Our analytics is deliberately built so that financial information cannot reach it. Only a fixed, predefined list of events may be recorded — such as "an onboarding step was completed" or "the paywall was viewed" — and each event may carry only a short, restricted set of non-personal labels. Free text of any kind, including merchant names, descriptions, nicknames, email addresses and currency amounts, is rejected before transmission rather than trusted not to appear.

Alongside those events we record two facts about your account, used only to compare groups: whether you are using Bsync solo or with a partner, and whether you are on the free or paid tier.

Your Firebase account identifier is set as the analytics user identifier, so that one person using two devices is counted once. That identifier is random and specific to Bsync; it does not reveal your name or email. When you sign out, the analytics session is reset, so a second person signing in on the same device is not joined to your account.

Three capabilities that analytics tools of this kind commonly offer are switched off in Bsync:

• Session recording — we do not record or replay your screen. On a budget app those frames would contain your amounts, merchant names and receipts.
• Automatic screen tracking — we do not log which screens you visit, because our screen addresses contain the identifiers of individual budgets and lists.
• Location lookup — we have disabled the feature that would estimate your city or region from your connection.

PostHog is operated by PostHog, Inc. and the data is held in the United States. As with any internet service, PostHog receives the IP address your device connects from; we have turned off the geographic lookup described above, and we do not use IP addresses for any purpose ourselves.

8. How we protect your information

• Encryption. All data is encrypted in transit using TLS, and encrypted at rest by Google Cloud using AES-256.
• Database access rules. Server-side security rules enforce that you can only read and write data belonging to your own workspace. Membership is verified against the partnership record itself, which you cannot modify, rather than against any claim your device makes.
• Passwords. Never stored by us. Authentication is delegated to Firebase, Google or Apple.
• One-time codes. Email verification and password-reset codes are stored only as salted cryptographic hashes, expire after 10 minutes, and are limited in the number of attempts allowed.
• Sensitive collections are sealed. Verification codes, reset codes, AI caches, usage counters and spending summaries are readable and writable only by our server code — no app build, modified or otherwise, can reach them.
• Subscription integrity. Paid status can only be set by our server after confirmation from the store; it cannot be granted by a device.
• Rate limiting. AI features are capped per account and globally to prevent abuse.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password, keep your device locked, and sign out of any device you do not control.

Breach notification. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you directly, without undue delay.

9. How long we keep it

10. Deleting your account

You can delete your account in two ways, and neither requires you to contact us:

• In the app: Settings → Profile → Delete Account.
• On the web: bsync.bappssupport.com/DeleteAccount

Deletion is immediate and irreversible. We cannot recover a deleted account. When you delete:

• Your profile, nickname, email and account settings are permanently deleted.
• Your Firebase authentication account is permanently deleted — you can no longer sign in.
• Your notification inbox, push tokens and AI usage counters are permanently deleted.
• Any shared partnership is ended and its shared budgets, bills and settings are deleted. Your partner keeps their own expenses, is returned to their own space, and is notified.
• Your own entries in that shared workspace are retained but inaccessible, as described in section 9.

If you have an active subscription, deleting your Bsync account does not cancel it. Subscriptions are managed by the app store and must be cancelled there — see your Apple or Google account's subscription settings.

11. Your rights and choices

Depending on where you live, you may have some or all of the following rights:

• Access — obtain a copy of the personal information we hold about you.
• Correction — have inaccurate information corrected. Your nickname, colour and financial entries are all editable in the app.
• Deletion — have your personal information erased, subject to section 9.
• Portability — receive your data in a structured, machine-readable format. Pro subscribers can export expenses and budgets as a spreadsheet or PDF from within the app; anyone can request an export by email.
• Restriction — ask us to limit how we process your information.
• Objection — object to processing carried out on the basis of legitimate interests.
• Withdraw consent — turn off notifications in Settings, revoke camera access in your device settings, or end a partnership to stop sharing with your partner. Withdrawing consent does not affect processing already carried out.
• Complain — lodge a complaint with your local data protection authority.

To exercise any of these, email privacy@bappssupport.com. We will not discriminate against you for exercising a privacy right. We may need to verify your identity — normally by asking you to write from the email address on the account.

12. International data transfers

We operate from Jamaica, and your information is stored and processed in the United States and other countries where our service providers operate. These countries may not offer the same level of data protection as your own.

Where information is transferred out of the UK, EEA or Switzerland, we rely on our providers' Standard Contractual Clauses and equivalent safeguards — Google, Apple, Expo, Resend, RevenueCat and PostHog each maintain these as part of their data processing terms. Where information is transferred out of Jamaica, we rely on the transfer conditions permitted by the Data Protection Act, 2020.

13. Regional privacy rights

13.1 Jamaica (Data Protection Act, 2020)

If you are in Jamaica, you have the right to be informed about our processing, to access your personal data, to have inaccurate data rectified, to prevent processing likely to cause damage or distress, to prevent processing for direct marketing (we do not carry out direct marketing), and to complain to the Office of the Information Commissioner. Contact us first at privacy@bappssupport.com and we will try to resolve the matter directly.

13.2 United Kingdom and European Economic Area (UK GDPR / GDPR)

Our legal bases are set out in the table in section 4. You have the rights listed in section 11, and the right to lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office. We do not carry out automated decision-making that produces legal or similarly significant effects about you.

13.3 California (CCPA / CPRA)

In the last 12 months we have collected the categories of personal information described in section 3, for the purposes in section 4, from the sources described in section 3, and disclosed them to the service providers listed in section 7.

We have not sold or shared personal information as those terms are defined by the CCPA, and we do not sell or share the personal information of any consumer, including minors under 16. We do not use or disclose sensitive personal information beyond the purposes permitted under the CPRA. You have the rights to know, delete, correct, opt out of sale or sharing, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising them.

13.4 Other jurisdictions

If your local law grants you privacy rights not listed here, contact us and we will honour any right we are legally required to provide.

14. Children's privacy

Bsync is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe someone under 18 has created an account, email privacy@bappssupport.com and we will delete it promptly.

15. Changes to this policy

We may update this policy as the app changes or the law does. When we do, we will revise the "Last updated" date at the top and increment the version number. If the change is significant — for example, a new category of data or a new third party — we will tell you inside the app before it takes effect. Continuing to use Bsync after a change takes effect means you accept the updated policy.

16. Contact us

You can also delete your account at any time, without contacting us, from Settings → Profile → Delete Account in the app or at bsync.bappssupport.com/DeleteAccount.