Privacy notice

This notice explains what personal data MyBucks holds about you, why, who it's shared with, how long it's kept and your rights under the UK GDPR and the Data Protection Act 2018.

Who we are

The operator of this MyBucks service is the data controller for this service. Contact details for data protection requests are available from the administrator of this service.

What we hold

• Account details: the email address you sign in with, a one-way hash of your password, sign-in times and security events (for example failed sign-ins).
• Profile details you choose to add: name, date of birth, contact details, Unique Taxpayer Reference and National Insurance number. These are encrypted.
• Financial data you add, import or connect: bank and investment accounts, balances, transactions, trades, dividends, income and salary, pensions, debts and your debt plan.
• Household details you choose to add to the tax planner: where you live, whether you have a partner and their expected income, your children's months and years of birth (no names) and childcare costs, how you're paid and what your employer offers. If you tick the box, also whether a child gets disability benefits, which is health-related information that we keep only with your explicit consent (UK GDPR Article 9(2)(a)) and remove if you untick the box. Everything here is encrypted, included in your data download and removed when you delete your account. You can remove it at any time. The health-related detail is never sent to the assistant. If you ask the assistant about the planner it is sent a short summary (your adjusted net income, whole-year ages of children, whether a partner is over a limit), never birth dates, your partner's income or childcare costs. We use these details to provide the planner you ask for.
• Keys for services you connect (Trading 212, Monzo, Starling, Interactive Brokers). These are encrypted and only used to fetch your data.
• Questions you ask the assistant and its answers, if you use it.
• Help and support cases you raise, the messages on them and how they were handled.
• Your choices for email reminders before tax deadlines, if you turn them on, and a note of which reminders were sent.
• If you contact support without signing in: the name (optional) and email address you give, and your message. We reply to that address and use it for nothing else.

Transaction descriptions can reveal sensitive things about you (for example health, religion or political activity). We don't analyse them for that and only use them to show you your own spending.

Why we use it, and our lawful basis

• To provide the service you signed up for: tracking your finances, working out tax figures and showing reports. Lawful basis: contract (UK GDPR Art. 6(1)(b)).
• To keep the service and your account secure, prevent misuse and investigate problems (security logs, rate limits). Lawful basis: legitimate interests (Art. 6(1)(f)).
• The AI assistant, only if you switch it on. Lawful basis: your consent (Art. 6(1)(a)), which you can withdraw in Settings at any time.
• Email reminders before tax deadlines, only if you turn them on. Lawful basis: your consent (Art. 6(1)(a)), which you can withdraw in Settings at any time.
• Letting an administrator read your assistant conversations to improve answers, only if you agree. Lawful basis: consent, withdrawable in Settings.
• Answering help cases, complaints and data protection requests, and reporting on how quickly we do (counts and timings, not what you wrote). Lawful basis: contract for account holders, legitimate interests for people writing in without an account, and legal obligation for data protection requests (Art. 6(1)(c)).

We don't sell your data, use it for advertising, or make automated decisions that have legal or similarly significant effects on you.

Who we share it with

• Our hosting provider (application and database), as a processor under contract.
• Anthropic, which provides the AI model behind the assistant, if you use it. Your question and the data the assistant looks up to answer it are sent to Anthropic in the United States under its commercial terms and data processing addendum, with appropriate transfer safeguards (such as the UK International Data Transfer Addendum, or the UK Extension to the EU-US Data Privacy Framework where the provider participates). Under those terms, data sent through the API isn't used to train Anthropic's models.
• The providers you connect (for example Trading 212 or Starling): we send them your key to fetch your data, and nothing else.
• Our email provider, as a processor, to send replies to support requests made without an account, and email reminders to people who turned them on (the email address you sign in with, and a message with a date and what it is for, never your figures).
• Law enforcement or regulators, only where the law requires it.

How long we keep it

• Your account and financial data: while your account is open. Deleting your account deletes it straight away.
• Original files you upload and raw data fetched from providers: 90 days.
• Sync logs: 180 days.
• Assistant conversations: 365 days after the last message, or until you delete them.
• Security logs: 730 days, kept after an account is deleted (without a link to it) to investigate misuse.
• Help cases: with your account, deleted when it is. Without an account: 730 days after the case is finished (1095 days for complaints), or sooner if you ask.
• Backups made by our hosting provider are overwritten on their own schedule.

Cookies

We use one cookie to keep you signed in (strictly necessary) and one to remember light or dark mode, which you choose. There are no analytics, advertising or tracking cookies, so we don't ask for cookie consent.

Your rights

• Access and portability: download everything we hold about you from Settings → Your data.
• Rectification: correct your details and data in the app.
• Erasure: delete your account and all its data from Settings → Your data.
• Withdraw consent for the assistant or administrator review at any time in Settings.
• Object to or restrict processing, or anything else about your data: raise a case under “Privacy and my data” in Help & support, or through the support form if you can't sign in. We reply within one month.
• Complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Security

Passwords are hashed with scrypt; keys and profile details are encrypted with AES-256-GCM and tied to your account; sessions time out after inactivity; sign-ins are rate limited and accounts lock after repeated failures; security events are logged. If a breach is likely to put you at risk we'll tell you without undue delay, and report it to the ICO within 72 hours where required.

Age

MyBucks is for adults. You must be 18 or over to create an account.