Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: email address and password (stored securely and hashed) when you register or log in.
• Business data: business names, legal names, Employer Identification Numbers (EIN), addresses, and accounting preferences you enter.
• Financial data: transactions, categories, vendors, business units, assets, receipts, invoices, and notes you create or import.
• Personal finance data: age, retirement targets, income, expenses, debts, and investment information you enter in the Personal Planner.
• Team information: email addresses and roles of members you invite to your business.

1.2 Information Collected Automatically

• Usage data: device identifiers, app version, and interaction logs used for analytics and service improvement.
• Authentication tokens: session tokens stored on your device to keep you signed in.
• Two-factor authentication data: TOTP secrets and verification timestamps when you enable 2FA.

1.3 Third-Party Sign-In

If you sign in with Google, we receive your email address and basic profile information from that provider to create and manage your account.

2. How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To store, organize, and display your business and personal financial data within the Service.
• To generate reports, projections, and insights from the data you enter.
• To process payments for paid plans and transaction packs through our payment provider, Wix Payments (branded as "Base44 Payments").
• To send service-related notifications such as receipt reminders and document retention alerts.
• To provide customer support and respond to your inquiries.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

• Within your business: data you add to a business is visible to other members of that business according to their assigned role (Owner, Accountant, or Viewer).
• Service providers: trusted third parties that help us operate, including cloud hosting, database storage, payment processing (Wix Payments), email delivery, and analytics. These providers process data on our behalf under confidentiality obligations.
• Legal compliance: when required by law, court order, or government regulation, or to protect our rights, property, or safety.
• Business transfer: in connection with a merger, acquisition, or sale of assets, subject to the same confidentiality protections.

4. Data Security

We use administrative, technical, and physical safeguards designed to protect your information. These include encrypted data storage, row-level access controls that isolate each business's data, hashed passwords, and optional two-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. Financial documents (receipts, invoices, and attachments) are subject to a 7-year retention period to support tax and compliance record-keeping, after which they may be automatically removed unless retention is extended. You may request deletion of your account and associated data at any time from the app's Settings page.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data and account.
• Object to or restrict certain processing of your data.
• Withdraw consent for data processing based on consent.
• Export a copy of your data in a portable format.

To exercise any of these rights, contact us using the information in Section 10. We will respond within the timeframes required by applicable law.

7. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Permissions and Device Data

The app may request the following device permissions, each used only for its stated purpose:

• Camera and photo library: to capture and upload receipts, invoices, and asset documents.
• Storage: to save and access imported CSV files and exported reports.
• Notifications: to deliver receipt reminders and document retention alerts.
• Network access: to sync your data with your account.

We do not access your contacts, call logs, SMS, location, microphone (outside of document capture), or other sensitive device data.

9. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (such as Google Sign-In and Wix Payments). We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us through the support options available in the app's Settings page. We are committed to resolving your privacy concerns promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice (such as within the app). We encourage you to review this policy periodically to stay informed.