Your money data stays yours.

Effective 7 September 2026 · Applies to the Good Envelope iOS app and this website.

1. What we collect

Account information

If you create an account, we store your email address and a securely hashed password. Authentication is handled by Supabase; we never see your password in readable form.

Budget data you enter

Everything you type into the app: envelope names and budgets, transactions and their amounts, dates, notes and categories, income entries, savings goals, and your currency preference. You create this data; we store it so we can show it back to you and sync it between your devices.

Optional profile photo

If you choose a profile picture, the app asks for permission to read the image you pick. That photo is saved on your device and is never uploaded to our servers — it stays on the phone you picked it on. We do not access the rest of your photo library.

Subscription status

If you subscribe to Good Envelope Pro, our payment partner RevenueCat tells us whether your subscription is active, when it renews, and the store it came from. Apple processes the payment. We never receive your card details.

Technical information

When the app syncs, our servers process the technical details needed to complete the request — device type, app version, and timestamps — along with error logs when a sync fails so we can fix it.

2. What we never collect

• Bank credentials, bank account numbers, routing numbers, or card numbers.
• Your location.
• Your contacts, calendar, or photo library beyond an image you explicitly pick.
• Advertising identifiers. There is no third-party advertising or analytics SDK in the app.

3. Where your data lives

Good Envelope is local first. Your budget is written to storage on your own device, which is why the app keeps working with no connection. If you sign in and enable sync, an encrypted copy is sent over HTTPS to our database at Supabase so your other devices can read it. If you never create an account, your data stays on your device and we hold nothing.

4. Who we share it with

We share data only with the service providers that make the app work, and only with what they need to do their job:

• Supabase — database hosting, account authentication, and sync.
• RevenueCat — subscription status and receipt validation.
• Apple — App Store payments and, if you enable it, iCloud device backups.

We do not sell, rent, or trade your personal information. We may disclose information if we are legally required to, and we will tell you unless the law forbids it.

5. Keeping and deleting your data

We keep your data for as long as your account exists. You can delete your account from inside the app at any time — this removes your budget data from our servers. Deleting the app from your phone removes the local copy. Residual copies may persist in encrypted backups for up to 30 days before they are overwritten.

6. Your rights

You can access and correct your data directly in the app, export it at any time, and delete your account and everything in it. If you are in a region with additional rights under laws such as the GDPR or CCPA — including the right to a copy of your data or to object to processing — email us and we will honour the request.

7. Children

Good Envelope is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.

8. Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. Material changes will also be announced in the app.

9. Who we are, and how to reach us

Good Envelope is built and operated by Mohammad Issa, an independent developer based in Jordan, and is the data controller for the information described above.

Questions, requests, or concerns: mohammad.issa.product@gmail.com. We answer every email.