Privacy Policy

BACIVO is currently operated by an individual provider:

Adrijus Bacys
Vilnius, Lithuania
support@bacivo.app

For the purposes of the EU General Data Protection Regulation (GDPR), Adrijus Bacys is the data controller for personal data processed in BACIVO.

Account and authentication data. Your email address, your user ID, and the authentication information needed to sign you in. If you choose to sign in with Google, BACIVO receives the basic account information Google shares for that sign-in.

Emails we send you are limited to account emails (confirmation, password reset) and, only if you turn them on, push notifications.

Financial planning data you enter. BACIVO only holds what you type in:

• account names and balances
• salary or income amount and your payday
• expenses, transaction dates, merchant names and categories
• recurring bills and expenses
• planned savings, savings goals and your safety buffer
• payday cycle information and recovery plan information
• values BACIVO derives from the above, such as your financial calculations

Notifications (optional). Only if you turn on notifications, your browser registers a service worker and BACIVO stores a push subscription for that device (the delivery address your browser provides, its keys and your device's browser name), plus your time zone. Turning notifications off removes the subscription for that device.

Technical and security data. Session and authentication information, plus the basic security and diagnostic information needed to run and protect the service.

BACIVO does not connect to your bank and does not import transactions automatically. It does not ask for card numbers, account numbers or national identifiers.

Providing BACIVO and its calculations. Legal basis: performance of the service agreement with you.

Creating your account and signing you in. Legal basis: performance of the service agreement with you.

Security, prevention of abuse or fraud, and technical diagnostics. Legal basis: our legitimate interests in operating and protecting the service.

Meeting legal obligations where they apply. Legal basis: legal obligation.

Any optional analytics, advertising or marketing in the future. Legal basis: your consent, requested before such technologies are switched on.

BACIVO currently uses no advertising and no behavioural marketing tracking, and runs no third-party analytics or marketing scripts.

From the information you enter, BACIVO generates estimates such as:

• Available to Spend
• Daily Spending Room
• your spending status percentage and status
• Money Runway
• Savings Outlook
• Can I Afford It? results
• Recovery plans
• your BACIVO Score, where shown

These are informational estimates to help you understand your own plan. They are not automated decisions that produce legal effects or similarly significant effects on you. BACIVO makes no lending, credit, insurance or employment decisions, and gives no regulated financial advice.

BACIVO relies on a small number of providers to run the service:

• Supabase — authentication and database infrastructure.
• Lovable — the hosting and deployment environment for the current application.
• Lovable — also used to deliver account emails (sign-up confirmation and password reset) from bacivo.app.
• Google — only when you choose to sign in with Google.

These providers process data on our behalf so BACIVO can function. BACIVO does not sell your personal data and does not share it with advertising networks.

Where personal data may be transferred outside the European Economic Area by a provider, appropriate safeguards are relied upon where legally required.

Your information is kept while your BACIVO account is active, or for as long as reasonably necessary to provide the service to you.

Some information may be kept for a limited further period where that is necessary for security, to meet a legal obligation, to prevent or handle disputes, or for other legitimate operational reasons.

You can delete your account yourself in Profile > Privacy & data. Deletion is permanent and immediate: your account and all of its data are removed and cannot be recovered. You can download a copy of your data there first.

Subject to the conditions and exceptions in data protection law, you can ask to: access your personal data; correct inaccurate data; have data deleted; have processing restricted; receive your data in a portable form where that right applies; object to processing based on legitimate interests; and withdraw consent where processing is based on consent. Withdrawing consent does not affect processing already carried out.

You can download a copy of your data (as a JSON file) and delete your account at any time in Profile > Privacy & data. For questions about privacy, write to support@bacivo.app. We may need to confirm your identity before acting on a request.

You also have the right to complain to a data protection authority. In Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI).

BACIVO uses account authentication and database-level access controls so that your financial planning data is reachable only through your own signed-in account.

No online service can promise absolute security. Please use a strong, unique password and tell us if you think your account has been accessed by someone else.

This policy may be updated as BACIVO develops. When it changes, the “Last updated” date at the top of this page is revised.