Privacy Notice
Last updated July 11, 2026
This Privacy Notice explains how Abigail O'Rourke ("we", "us", or "our") collects, uses, and protects your personal data when you use FundLoot (the "Service"). Abigail O'Rourke is the data controller responsible for your personal data in connection with the Service.
Personal data we collect
- Account data — your email address, login credentials, display name, and username.
- Budget and app content — the financial plans, budget items, earnings, goals, community posts, and images you choose to add.
- Support communications — messages you send us or our reseller.
- Usage and device data — app activity, log data, device identifiers, and IP address, collected to operate and secure the Service.
Payment and card details are collected and processed directly by our reseller, Paddle — we do not store your full payment card information.
How we use your data
- to create and manage your account and provide the Service;
- to store and display your budgets, goals, and progress;
- to operate community and leaderboard features you opt into;
- to provide customer support and respond to your requests;
- to secure the Service and prevent fraud and abuse;
- to improve and develop the Service; and
- to comply with our legal obligations.
Legal bases
Where applicable law requires a legal basis, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent fraud); your consent (for optional features such as the public leaderboard, which you can withdraw at any time); and compliance with legal obligations.
How we share your data
We share personal data only as needed, with the following categories of recipients:
- Service providers / subprocessors — hosting, database, storage, and analytics providers that help us run the Service.
- Paddle (Merchant of Record) — for the sale of the product, subscription management, payments, tax compliance, and invoicing.
- Professional advisers — such as legal and accounting advisers, where necessary.
- Authorities — where required by law or to protect legal rights.
Community posts, comments, and (if you opt in) your leaderboard username and level are visible to other signed-in users of the Service.
International transfers
Your data may be processed in countries outside your own, including outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your data.
Data retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When it is no longer needed, or after you delete your account, we will delete or anonymize it, unless we are required to retain it to meet legal obligations.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. If you are in the UK/EEA, you also have the right to lodge a complaint with your supervisory authority, and we aim to respond to requests within one month. To exercise your rights, contact Abigail O'Rourke using the contact details on your purchase receipt.
Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and row-level security so that you can only access your own data. No system is completely secure, but we work to protect your information.
Cookies
We use essential cookies and similar technologies required to sign you in and keep the Service working. Where we use non-essential analytics cookies, we do so in accordance with applicable law, and you can manage your preferences through your browser settings.
Contact
If you have questions about this Privacy Notice or how we handle your data, please contact Abigail O'Rourke. For billing-related privacy questions, our reseller Paddle can also assist as Merchant of Record.