PRIVACY POLICY

1. INFORMATION WE COLLECT

Account Information

When you create an account, we collect:

• Email address
• Password (encrypted and never stored in plain text)
• Account creation date

Financial Data

You voluntarily provide financial information including:

• Expense amounts and descriptions
• Budget categories (needs, wants, save)
• Income and paycheck information
• Budget settings and preferences
• Recurring expense details

Payment Information

When you subscribe to Pro:

• Payment information is processed directly by Stripe
• We store only your Stripe customer ID and subscription status
• We never see or store your credit card details

Usage Data

We automatically collect:

• Device type and operating system
• App version and usage patterns
• Error logs and crash reports (via Expo/Sentry)
• Last login date and session information

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Provide and maintain the Service
• Calculate burn rate, budget analytics, and financial summaries
• Process subscription payments and manage billing
• Send important service updates and security alerts
• Improve and optimize the Service
• Prevent fraud and ensure security
• Comply with legal obligations

We will NEVER:

• Sell your personal or financial data to third parties
• Use your data for advertising purposes
• Share your expense data with anyone without your explicit consent

3. DATA STORAGE AND SECURITY

Where Your Data Is Stored

Your data is stored securely using Supabase (PostgreSQL database) hosted on Amazon Web Services (AWS) infrastructure in the United States.

Security Measures

We implement industry-standard security measures:

• End-to-end encryption for data in transit (TLS/SSL)
• Encrypted storage for data at rest
• Row-level security policies to ensure data isolation
• Regular security audits and updates
• Secure authentication via Supabase Auth

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. DATA SHARING AND DISCLOSURE

Third-Party Service Providers

We share data only with trusted service providers who help us operate the Service:

• Supabase: Database and authentication (covered by their privacy policy)
• Stripe: Payment processing (covered by their privacy policy)
• Expo/Sentry: Error tracking and crash reporting

These providers are contractually obligated to protect your data and use it only for providing services to us.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or to protect our rights, property, or safety.

Business Transfers

If PaperRight is acquired or merged with another company, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. YOUR PRIVACY RIGHTS

Access and Portability

You have the right to access and export all your data at any time through the app.

Correction and Deletion

You can edit or delete your expenses, income, and budget data directly in the app. You can delete your entire account through Settings → Delete Account.

Data Retention

We retain your data for as long as your account is active. When you delete your account:

• All your financial data is permanently deleted within 30 days
• Account records may be retained for legal/tax purposes (up to 7 years)
• Anonymized usage data may be retained for analytics

Do Not Track

We do not track users across third-party websites or apps. We respect Do Not Track (DNT) browser settings.

6. COOKIES AND TRACKING

As a native mobile app, we do not use cookies. We use local storage on your device to:

• Remember your login session
• Cache app preferences and settings
• Remember your last visited tab

This data is stored locally on your device and is not transmitted to our servers unless you're logged in.

7. CHILDREN'S PRIVACY

PaperRight is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. INTERNATIONAL USERS

PaperRight is operated in the United States. If you access the Service from outside the US, your data will be transferred to and stored in the US, which may have different data protection laws than your country.

GDPR Rights (EU Users): If you are in the European Economic Area, you have additional rights including data portability, right to be forgotten, and right to restrict processing. Contact us to exercise these rights.

CCPA Rights (California Users): California residents have the right to know what personal information is collected, request deletion, and opt-out of sale of personal information. We do not sell personal information.

9. EMAIL COMMUNICATIONS

We may send you:

• Account verification and password reset emails (required)
• Subscription receipts and billing notifications (required)
• Important security and service updates (required)
• Product updates and feature announcements (optional - you can opt out)

You can opt out of promotional emails but will continue to receive transactional emails necessary for the Service.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date
• Sending an email notification
• Posting a notice in the app

Your continued use after changes constitutes acceptance of the updated policy.

11. YOUR CONSENT

By using PaperRight, you consent to this Privacy Policy and our collection, use, and disclosure of your information as described.

12. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: privacy@paperright.xyz

We will respond to all requests within 30 days.