Hazybits
Privacy notice
Last updated: 2 October 2026
This notice covers the private, non-commercial Actual Budget application operated under the Hazybits domain (the “Application”). It is used only by its operator to access and organise information from the operator’s own financial accounts. It is not offered as a service to the public.
Who controls the information
The individual operator of the Application is responsible for its use of personal information. Questions or requests can be sent to privacy@hazybits.uk.
Information processed
The Application may process:
- bank account identifiers and account details;
- balances, transaction details, dates, references and merchant information;
- bank-authorisation and connection identifiers;
- access tokens and technical information needed to maintain the connection; and
- limited operational logs used for security and troubleshooting.
Why it is processed
The information is used solely to retrieve the operator’s authorised account information, maintain a personal budget, reconcile transactions, and operate and secure the Application. The connection is created only after the account holder gives explicit authorisation through the relevant bank and Enable Banking.
Where information comes from and who receives it
Account information comes from the operator’s bank through Enable Banking. It is stored in the operator’s self-hosted Actual Budget system. Information is shared only as needed with the bank, Enable Banking, and the software and infrastructure used to operate the private installation. It is not sold, used for advertising, or shared with unrelated third parties.
Cloudflare serves this legal-information website, but the public site does not receive bank account or budget data and uses no analytics or advertising trackers.
Storage and security
Budget and imported account information are held on a privately operated, access-controlled server. Connections use HTTPS. Bank-sync credentials and tokens are stored separately from Actual Budget’s optional end-to-end encryption and are protected through server access controls.
Retention and deletion
Imported transactions remain in the personal budget until the operator deletes them. Connection credentials are kept while the bank link is active or until they are reset or revoked. A bank connection can also be withdrawn through the bank or through Enable Banking’s consent management service.
Your choices
The account holder can review or correct information in Actual Budget, unlink an account, revoke bank access, or request deletion by emailing privacy@hazybits.uk. If data protection law applies, applicable rights may also include access, rectification, erasure, restriction, portability, objection, and the right to complain to the UK Information Commissioner’s Office.
Changes
This notice may be updated if the Application’s data handling changes. The date at the top identifies the latest version.