1 Who is responsible
Cenulinq is responsible for processing personal data in My Budget Control (MBC). It is registered with the Dutch Chamber of Commerce under number 42186920. Its VAT identification number is NL005565745B41. Our correspondence address is Omroepweg 11, postvak 8562, 1324 KT Almere, Netherlands.
Send privacy questions and requests to support@cenulinq.com and general enquiries to info@cenulinq.com. Our business WhatsApp channel is https://wa.me/31644550770, Monday to Friday, 10:00–17:00 Netherlands time. You can request a callback by email or contact us through our official social channels. This notice covers our website and the versions of MBC we offer.
2 The information we use
For your account, we use your email address, internal account identifier, the name you provide, and sign-in and session information. Your budget records include the descriptions, amounts, categories, dates, recurring items and adjustments you enter. Language, currency and display preferences help the app follow your choices.
For purchases, we process the necessary order and payment references, amount, currency, selected period and payment or subscription status. The payment provider or app store handles the payment method. When you contact us, we process your message and the information you send with it.
Hosting and security involve technical data such as IP addresses, browser and device details, timestamps and error reports. A backup file you download contains budget data, so keep it somewhere secure.
3 Registration and information you enter
You register with an email address and confirm it. When you subsequently start the free trial, we retain a protected recognition code derived from that address to prevent repeated free trials. The code remains personal data. We keep it for twelve months from the original trial start, even if you delete the account earlier, and remove it afterwards.
MBC is intended for people aged 18 or over. Use neutral descriptions for budget items where possible. Avoid identity numbers, passwords, full payment-card details and unnecessary information about health, beliefs or other people. Contact support@cenulinq.com if you entered such information by mistake and need help removing it.
4 Why we use data and our legal grounds
We use account and budget data to perform our agreement with you: operating your account, saving your budget, synchronising changes and handling purchases and related support. Without the necessary information, we cannot provide those parts of the service.
We have legitimate interests in securing the service, investigating errors and preventing repeated free trials. We limit processing to what is needed for those purposes. You can ask us to review an incorrect trial restriction. We process the information required by law for tax records and other legal obligations. For a specific legal claim, we retain only relevant information for as long as necessary.
We ask for separate consent for optional AI app help, as explained in section 13. Any other processing that requires consent will have its own choice. You can withdraw consent for future processing.
5 Who receives information
We use suppliers for parts of MBC and arrange processing on our behalf. Supabase provides account management, the budget database and synchronisation. The primary database is in Frankfurt, in region eu-central-1. Resend (Plus Five Five, Inc.) delivers account emails and processes your email address, language, message content, temporary confirmation link and delivery information.
Netlify provides website hosting, the online withdrawal form and the gateway for AI app-help questions. The withdrawal form processes the name, email address, optional order reference, statement, and receipt and security information you submit. Cloudflare Turnstile checks technical signals during registration and sign-in to reduce abuse. Microsoft Exchange Online processes business and support email. Where a version loads an external web library, its CDN provider receives technical request data; the web version serves PDF libraries from our own domain.
Stripe processes web payments. Apple and Google process purchases and subscriptions through their stores, including their own payment, security and legal purposes. We receive the references and status needed to link a purchase to your MBC account and provide access and support. Their privacy notices are at https://stripe.com/privacy, https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy.
If you choose WhatsApp or social media to contact us, that platform also processes data under its own privacy rules. Share only what your enquiry requires. We do not sell your personal budget data. Authorities receive information where there is a legal basis for disclosure.
6 Processing outside Europe
Our budget database location does not mean all processing stays within the European Economic Area. Suppliers may process data or provide support from countries including the United States and Singapore. Resend stores email content and delivery logs in the United States even when messages are sent from a European region.
Where the GDPR requires safeguards, transfers rely on an applicable adequacy decision or European standard contractual clauses with the necessary additional protections. You can request information and, where applicable, a copy from support@cenulinq.com. Further details are at https://supabase.com/legal/privacy-resources/data-residency-and-transfers-faq and https://resend.com/security/gdpr.
7 Storage on your device
MBC uses local storage for your session, preferences, budget and changes awaiting synchronisation. Blocking or clearing that storage may require you to sign in again or cause unsynchronised changes to be lost. You manage downloaded files yourself.
The current website uses no advertising cookies or our own marketing tracking. Hosting and security still process data for their operation. We will request a separate choice before introducing non-essential tracking that requires consent. An online withdrawal submission remains in its browser page while you complete it and view the receipt; it is not added to your budget.
8 How long we keep information
We keep account and budget data while you maintain the account and the information is needed for the service. Expiry of paid access does not delete your account. Ordinary support correspondence is kept for no more than two years after resolution. Privacy requests, payments, withdrawals and disputes are retained as necessary for handling and specific legal claims. Under our procedure, limited technical audit records of completed privacy requests are kept for two years; they contain handling information and account references, not budget content.
The trial recognition code has the twelve-month period described in section 3. Technical logs follow the retention and rotation of the relevant service and may be needed longer for a specific incident. Resend normally keeps email and log data for thirty days on our current plan. Daily database backups under our Supabase Pro plan rotate over seven days. Deleted data can therefore remain temporarily in a recovery copy. Earlier deletions must be reapplied after restoration.
We normally keep tax records for seven years; relevant OSS records may require ten years. This concerns our business records, not your entire budget. AI app help also has the periods in section 13. Files you download remain under your control.
9 Your privacy rights
You can request access, a copy, correction, deletion or restriction of personal data. Where the legal conditions apply, you can receive or transfer data in a commonly used, machine-readable format. You can object to processing based on legitimate interests and withdraw consent for future processing. You do not need to purchase a backup feature to exercise those rights.
Send requests to support@cenulinq.com. We normally respond within one month of receipt. Complex or numerous requests may allow a legal extension of up to two further months; we will explain that within the first month. We also explain refusals. Where needed, we use proportionate checks to establish that a request comes from you. Do not send a full identity document without being asked.
You can complain to the Dutch Data Protection Authority at https://autoriteitpersoonsgegevens.nl or the competent authority in your country.
10 Deleting your account and keeping copies
Request deletion through the available app or website route or at support@cenulinq.com. We complete a confirmed deletion request within one month unless a legal exception applies. We explain what has been done and any information that must still be kept.
Deleting an account, cancelling a subscription and uninstalling an app are separate actions. We help with ongoing store subscriptions. Files you downloaded are not deleted remotely. Paid access provides backup download and restoration; PDF export is available on the web. These features are restricted during the trial. You can always contact us for a copy under your legal rights.
11 Security
We use appropriate technical and organisational safeguards and limit staff access to what their work requires. Outages and security incidents remain possible. Server backups and synchronisation do not guarantee complete recovery within a fixed time.
Report suspected misuse or security problems to support@cenulinq.com, including only necessary information. If a personal data breach occurs, we follow legal notification duties to regulators and affected people.
12 Calculations and changes
MBC calculates overviews from the information you enter. Those calculations do not decide your creditworthiness or eligibility for a loan, allowance or benefit. The app does not thereby make automated decisions with legal or similarly significant effects on you.
We update this notice when processing changes. The date appears at the top. We inform you appropriately about important changes. A new notice does not replace consent required for new processing.
13 Optional AI app help
AI app help explains how to use MBC. It cannot view or change your budget. Your current question, language and app platform are sent with fixed app information to OpenAI through Netlify. We do not add budget records, previous questions, sign-in credentials or your internal account identifier to the model input. Information you put in a question is sent, so avoid personal and financial details.
We ask for separate consent before sending. The choice is off whenever you open the help. You can use the ordinary app without it. Clearing the choice or closing the window stops future sending; it cannot recall an already submitted question. Closing, signing out or changing accounts clears the visible conversation. We keep no separate question-and-answer archive and do not log the content.
Netlify processes technical request data and, with current settings, does not store question-and-answer content. OpenAI may normally retain content for abuse monitoring for up to thirty days, and longer for legal or safety exceptions. API content is not used for model training by default. Processing may take place outside Europe under the safeguards in section 6. Supplier information is at https://docs.netlify.com/build/build-with-ai/security-and-privacy-for-ai-features/ and https://developers.openai.com/api/docs/guides/your-data.
For security and cost control, we separately retain your internal account identifier, UTC day and usage counter. Our legal basis is the legitimate interest in preventing abuse and unmanageable costs. The counter is traceable to your account. Normal cleanup retains today and yesterday, approximately 48 hours; faults can extend this. Logs and backups have their own periods. The current limit is twenty requests per user per UTC day; a failed request that was already reserved may count. Contact support@cenulinq.com to object or exercise other privacy rights.