Privacy Policy

Introduction

DoshMngr (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application (the “App”).

Information We Collect

Personal Information You Provide

When you use DoshMngr, you provide the following information:

• Account Information: Email address, name, and password for authentication
• Financial Data: Transaction amounts, categories, descriptions, budgets, financial goals, debt information, and recurring transaction details
• Preferences: Currency selection, notification preferences, and app settings

Automatically Collected Information

• Usage Data: App features accessed, interaction patterns, and time spent in the app
• Device Information: Device type, operating system, and app version
• Authentication Data: Session tokens and authentication state

How We Use Your Information

We use your information solely to:

• Provide Service: Enable core functionality including transaction tracking, budget management, goal tracking, and debt management
• Sync Data: Synchronize your financial data across your devices
• Send Notifications: Deliver important alerts about recurring transactions and financial milestones
• Improve Experience: Enhance app performance and user experience
• Authenticate: Verify your identity and secure your account

Data Storage and Security

Where Your Data is Stored

• Your financial data is stored securely in Supabase's PostgreSQL database with industry-standard encryption
• Data is encrypted both in transit (using HTTPS/TLS) and at rest
• We use row-level security policies to ensure you can only access your own data

Security Measures

• Authentication: Secure email/password authentication with optional Google and Apple Sign-In
• Encryption: All data transmission uses SSL/TLS encryption
• Database Security: Row-level security policies prevent unauthorized data access
• Session Management: Secure token-based authentication with automatic expiration

Data Sharing and Third Parties

Third-Party Services

We use the following trusted third-party services:

1. Supabase (Data Storage & Authentication)
   • Purpose: Database hosting and user authentication
   • Data Shared: Account information and all financial data
   • Privacy Policy: https://supabase.com/privacy
2. RevenueCat (Subscription Management)
   • Purpose: Managing premium subscriptions
   • Data Shared: User ID and subscription status
   • Privacy Policy: https://www.revenuecat.com/privacy
3. Google OAuth (Optional Sign-In)
   • Purpose: Alternative sign-in method
   • Data Shared: Email address and name
   • Privacy Policy: https://policies.google.com/privacy
4. Apple Sign-In (Optional Sign-In)
   • Purpose: Alternative sign-in method
   • Data Shared: Email address (optional) and name
   • Privacy Policy: https://www.apple.com/legal/privacy/

We Do NOT:

• Sell your personal or financial information to third parties
• Share your data with advertisers or marketing companies
• Use your financial data for purposes other than providing the service
• Access your bank accounts or financial institutions directly

Your Rights and Choices

Access and Control

You have the right to:

• Access: View all your financial data within the app
• Edit: Modify or update any information you've entered
• Delete: Remove individual transactions, goals, budgets, or debts
• Export: Request a copy of your data (contact support)
• Account Deletion: Permanently delete your account and all associated data

Data Retention

• Active accounts: Data is retained as long as your account is active
• Deleted accounts: All personal data is permanently deleted within 30 days of account deletion
• Backup retention: Encrypted backups are retained for 90 days for disaster recovery

Children's Privacy

DoshMngr is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

Push Notifications

With your permission, we send push notifications for:

• Recurring transaction reminders
• Pending transaction approvals
• Goal milestone achievements
• Debt payment reminders

You can disable notifications at any time through your device settings or within the app.

Analytics and Tracking

• We do not use third-party analytics or tracking services
• We do not use cookies or similar tracking technologies
• We do not track your activity outside the app

Changes to Financial Data

You have complete control over your financial data:

• All data entry is manual and under your control
• We do not automatically import data from external sources
• You can edit or delete any entry at any time
• No data is shared with financial institutions

International Data Transfers

Your data may be transferred to and stored on servers located in different countries where Supabase operates. We ensure that all such transfers comply with applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date at the top of this policy
• Sending an in-app notification for significant changes

Continued use of the app after changes constitutes acceptance of the updated policy.

Your California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (Note: We do not sell personal information)

European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing

Consent

By using DoshMngr, you consent to this Privacy Policy and agree to its terms.