About your data
Last updated: September 8, 2026
This page says what Buhata actually does with your information. It is written to be read, not to be survived. If anything here is unclear, ask us at info@buhata.com and we will fix the wording.
What stays on your device
Buhata asks you to create an account before you start, so that your entries belong to you rather than to one phone. After that, everything you write is saved to your device first and syncs afterwards. That is why the app keeps working on a plane, in a basement, or on a phone with no data left, and why nothing you write is lost while there is no connection to send it over.
What reaches our servers
When you sign in, your app data is copied to Buhata Cloud so your devices agree with each other. That copy includes what you put into the tools you use: money entries and balances, tasks and reminders, meals and shopping lists, notes, water, weight and workouts, habits, household members, and your settings.
Your account row holds your email address, your name, when you registered, and whether you asked for product email.
If you buy Buhata Money and connect a bank, the account name, the balance and the list of transactions come back to us and sit in the same copy as everything else. Your bank username and password never reach us at all. You type them on Plaid’s own screen, and what we hold is a token that reads the accounts you picked. That token stays on our server, is stored encrypted, and never goes to your phone or your browser.
How that copy is stored
Everything travels over an encrypted connection. Buhata only accepts HTTPS, so what leaves your device is protected in transit, and our hosting provider encrypts its storage volumes at rest. Your password is never stored: we keep a scrypt hash of it, which cannot be reversed back into the password you chose. Your app data itself is stored as a single block of text that our server does not read or interpret. What we do not do is encrypt that block with a key only you hold. It is protected by the transport, the storage and the account controls described here, and we could technically read it if we chose to. We would rather say that plainly than use a word that sounds stronger than the truth.
Who can see your data
Members of your household see what you share with the household. Nobody outside it does.
Buhata staff can see your account details for support: your email, your plan, which devices are signed in, when your data last synced, and how large it is. That is enough to answer almost every support question.
Staff cannot open the contents of your apps. Your notes, money entries, weight and water logs and the photos attached to chores are not shown in any support tool we operate. There is no location history to browse: Buhata no longer stores any.
What you can do about it
- See where you are signed in. Privacy and data lists every device with an active session, and you can sign any of them out, including all of them at once.
- Take your data. Settings has Email me my data, which sends a copy of your account data to the address you sign in with: what you put into the tools, your account row, your devices, and the trail of what happened to the account. A few things are deliberately held back, each for a stated reason, and the file says which and why when you open it. For those, or for an account of everything held, write to support@buhata.com and we answer within 30 days.
- Go back to an earlier copy. Restore Points keep dated copies of your account and you pick one yourself, in Settings under Sync and backup. Free keeps a daily copy for three days, Plus keeps one an hour for a day and then daily for seven days, and Premium keeps one every half hour for a day and then daily for thirty days. Restoring replaces what is on the device with that copy, and the app holds on to what was there in case you picked the wrong one.
- Delete everything. Deleting your account removes you from every household and erases your cloud data. It goes at once, and the dated copies above go with it in the same breath rather than outliving it. Nothing is kept back on purpose, which also means there is nothing to restore from afterwards: take a copy first if you want one.
- Stop the email. Product email is off unless you ticked the box, and one tap turns it off again. Messages about your own account still send.
We send two kinds of email. Messages about your account, such as billing, security and policy changes, send to everyone because they are part of running the service. Product news and offers only send if you asked for them, and every one of those carries a one click unsubscribe.
What we do not do
We do not sell your data. We do not use it for advertising. We do not send your location to any analytics service. We do not read your notes.