Privacy Policy

Last updated: September 9, 2026

This privacy policy applies to Actualbudget, a personal, self-hosted instance of the open-source budgeting application Actual Budget, operated by Vittorio Zuccalà ("the Owner") for his own personal finance management.

1. Data Controller

Vittorio Zuccalà (personal, non-commercial use). Contact: the Owner can be reached through the contact details associated with the personal infrastructure hosting this application.

2. Data Processed

The application processes the Owner's own personal financial data, including:

• Bank account information and transaction history of the Owner's bank account at FinecoBank, accessed through the Owner's explicit authorization via the PSD2 API provided by Enable Banking (enablebanking.com).
• Budget data (accounts, categories, transactions) entered by the Owner into the application.

No data of third parties is processed. The application is not offered to the public and is used exclusively by the Owner.

3. Purposes of Processing

Data is processed solely for the Owner's personal budgeting and expense tracking.

4. Legal Basis

Processing is based on the Owner's own explicit consent and legitimate personal use. Bank data access occurs only after the Owner authenticates with his bank and grants access through the Enable Banking PSD2 flow.

5. Data Storage and Security

Data is stored on the Owner's private self-hosted server. Access to the server is protected by authentication and private network controls. Bank sync credentials are stored on the server and are used exclusively to retrieve the Owner's own transaction data.

6. Data Sharing

Data is not sold, rented, or shared with any third party. The only external party involved in data processing is Enable Banking, acting as a technical intermediary (PSD2 Account Information Service Provider) strictly to deliver the Owner's own bank transaction data to the Owner upon his request.

7. Data Retention

Data is retained for as long as the Owner uses the application and may be deleted at any time by the Owner, who has full control over the server and the data stored on it.

8. Your Rights

Since all data belongs to the Owner and resides on his own infrastructure, the Owner exercises full control over access, rectification, and deletion of the data at any time.

9. Changes to This Policy

This policy may be updated by the Owner as needed. The "last updated" date at the top of this page reflects the most recent revision.