1. Information we collect
1.1 Information you provide
- Account information: email address, display name (if you create an account)
- Financial data: income, expenses, budgets, savings goals, transaction details
- Receipt data: images and extracted text from scanned receipts
- Profile preferences: theme settings, notification preferences, companion selections
1.2 Information collected automatically
- Device information: device type, operating system, unique device identifiers
- Usage data: features used, time spent in app, interaction patterns
- Error logs: crash reports and performance data to improve the app
1.3 Information we do not collect
- Bank account credentials or login information
- Credit card numbers or payment card details
- Social Security numbers or government IDs
- Location data (unless explicitly enabled by you)
2. How we use your information
We use your information to:
- Provide and maintain the app's functionality
- Sync your data across devices (for registered users)
- Enable budget sharing with people you choose
- Process receipt scans and extract transaction data
- Improve and optimize the app
- Respond to your inquiries and support requests
- Send important service notifications
- Analyze usage patterns to enhance features
3. Data storage and security
3.1 Data storage
- Anonymous users: data is stored locally on your device only
- Registered users: data is stored securely in our cloud infrastructure (Supabase)
- Cloud data is encrypted in transit and at rest
3.2 Security measures
- Industry-standard encryption (TLS/SSL) in transit
- Passwords are hashed and never stored in plain text
- Biometric authentication data never leaves your device
- Regular security audits and updates
3.3 Data retention
- Active accounts: data retained while account is active
- Deleted accounts: data permanently removed upon deletion
- Anonymous users: data exists only on your device
5. Your rights and choices
5.1 Access and portability
- View all your data within the app
- Export your data in standard formats
- Request a copy of your data by contacting us
5.2 Correction and deletion
- Edit or delete any data within the app
- Delete your entire account through app settings
- Request data deletion by contacting us
5.3 Opt-out options
- Disable cloud sync to keep data local only
- Disable optional notifications
- Use anonymous mode without an account
6. Children's privacy
- BFF is not intended for children under 13.
- We do not knowingly collect data from children under 13.
- If we learn we have collected such data, we will delete it promptly.
- Parents may contact us to request deletion of a child's data.
7. International data transfers
- BFF is operated from the State of Wisconsin, USA, and our servers and infrastructure are located in the United States.
- By using the app, you consent to data transfer to the US.
- We ensure appropriate safeguards for international transfers.
8. California privacy rights (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt out of the sale of personal information (we do not sell data)
- Right to request deletion of personal information
- Right to non-discrimination for exercising privacy rights
9. European privacy rights (GDPR)
EU/EEA residents have additional rights:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making
10. Biometric data
10.1 Face ID / Touch ID
- Biometric authentication is processed entirely on your device.
- We never receive, store, or have access to your biometric data.
- Only a secure token is stored to enable quick sign-in.
11. Analytics and tracking
11.1 What we track
- App usage statistics (anonymous and aggregated)
- Feature engagement to improve the app
- Crash reports and performance metrics
11.2 What we don't track
- Individual financial transactions for advertising
- Browsing activity outside the app
- Personal information for third-party marketing
12. Changes to this policy
- We may update this Privacy Policy periodically.
- Changes will be posted in the app.
- Significant changes will be notified via email or in-app notice.
- Continued use after changes constitutes acceptance.
13. Data breach notification
In the event of a data breach affecting your personal information:
- We will notify affected users within 72 hours.
- We will notify relevant authorities as required by law.
- We will provide information about the breach and steps taken.
14. Contact us
For privacy-related questions or to exercise your rights:
Email: bffbefinanciallyfree@gmail.com
For EU residents, you may also contact your local data protection authority.
15. Consent
By using BFF, you consent to this Privacy Policy and agree to its terms.
Thank you for trusting BFF with your financial journey.