Privacy Policy

The data controller responsible for your personal data is:

We collect the following categories of personal data:

Where applicable (including for users in the European Economic Area), we process your personal data on the following legal bases:

• Contract performance: to provide the Services you signed up for, including account management and subscription billing;
• Legitimate interests: to improve and secure the Services, prevent fraud, and conduct product analytics;
• Consent: to send marketing emails, newsletters, and push notifications (you may withdraw consent at any time);
• Legal obligation: to comply with applicable laws and regulatory requirements.

• To create and maintain your account and provide core app functionality;
• To interpret your natural-language and voice expense entries into structured expenses using AI, which you review before saving;
• To process and manage your subscription payments;
• To send transactional communications (account confirmation, password resets, billing receipts);
• To send promotional and marketing emails where you have opted in (you may opt out at any time);
• To deliver personalised push notifications based on your spending habits and timezone;
• To analyse usage patterns and improve application features and performance;
• To detect, prevent, and respond to security incidents or fraudulent activity;
• To comply with applicable legal and regulatory requirements.

a) Product analytics (PostHog)

We use PostHog (posthog.com), an open-source product analytics platform, to understand how users interact with our website and application. PostHog may collect:

• Page views and navigation events on https://dollarbuddy.io;
• In-app feature interactions (e.g., pricing CTA clicks, newsletter and waitlist submissions);
• Session data, device type, browser, and approximate location;
• A unique pseudonymous user identifier.

PostHog is configured with person profiles disabled for anonymous visitors; we only create full profiles for identified users. PostHog data is processed on servers located in the United States.

You can opt out of PostHog tracking by enabling "Do Not Track" in your browser settings, or by contacting us at info@dollarbuddy.io.

PostHog's privacy policy: https://posthog.com/privacy

b) Advertising (Meta Pixel)

Our website (https://dollarbuddy.io) uses the Meta Pixel, a tracking technology provided by Meta Platforms, Inc. Unlike our product analytics, the Pixel exists for advertising: it lets us measure whether our advertising works and show follow-up ads to people who have already visited our website. It runs on our website only. The DollarBuddy mobile application does not contain the Pixel.

We do not run the Meta Pixel for visitors in the European Economic Area, the United Kingdom, or Switzerland. Advertising cookies require prior consent in those regions and we do not currently operate a consent banner, so rather than set them without a proper basis we switch the Pixel off entirely for those visitors. The decision is made from the country your connection resolves to, before anything is loaded from Meta, so no request reaches Meta at all.

For visitors elsewhere, the Meta Pixel may collect:

• The pages you visit on https://dollarbuddy.io and when you visited them;
• A small number of specific actions, namely requesting a trip cost estimate, clicking through to the App Store or Google Play, and submitting your email address to save a trip;
• Your IP address, browser and device type, and cookie identifiers set by Meta;
• Whether you are logged into a Meta service such as Facebook or Instagram, which allows Meta to link this activity to your Meta account.

We do not send Meta your name, your email address, your financial data, your expenses, your trips, or any other content you create in DollarBuddy.

In relation to the Pixel, Meta acts as an independent controller for its own advertising purposes, and in certain respects as a joint controller with us. We are jointly responsible with Meta for the collection and transfer of the data described above; Meta is solely responsible for what it does with that data afterwards. Meta processes this data in the United States and other countries.

How to opt out. If you are outside the regions listed above and do not want the Pixel to run, you can object directly to Meta in your Meta ad preferences, block it with your browser's tracking protection or a content blocker, or write to us at info@dollarbuddy.io and we will exclude you. Blocking the Pixel has no effect on your ability to use https://dollarbuddy.io or the DollarBuddy application.

Meta's privacy policy: https://www.facebook.com/privacy/policy

With your permission, we send daily expense reminders and other relevant push notifications to your device via Firebase Cloud Messaging (FCM), a service operated by Google. To deliver notifications accurately at 5:00 PM in your local time, we store:

• Your FCM device token;
• Your device's timezone;
• Your notification preferences (enabled/disabled, notification types).

You can disable push notifications at any time through your device settings or within the DollarBuddy app under Settings > Notifications. We do not use push notifications for third-party advertising.

Firebase Privacy Policy: https://firebase.google.com/support/privacy

Newsletter: If you subscribe to our newsletter, we collect your email address and use it to send you product updates, feature announcements, and budgeting tips. You can unsubscribe at any time using the link included in every email.

Waitlist: If you join our early-access waitlist, we collect your email address and, optionally, your name. This data is used solely to notify you when early access or new features become available. Waitlist registrations are tagged separately from general newsletter subscriptions.

We do not share waitlist or newsletter subscriber data with third parties for marketing purposes. Data is stored securely on our servers and will be deleted upon your request.

We do not sell, rent, or trade your personal data. We may share data with the following categories of recipients only as necessary:

• Infrastructure & Cloud Providers: Cloud hosting and database services used to operate DollarBuddy;
• Firebase / Google: Push notification delivery;
• PostHog: Product analytics (pseudonymised data);
• Meta Platforms: Website advertising measurement and retargeting via the Meta Pixel, which is not used for visitors in the EEA, the UK or Switzerland. This covers website activity only and never your expenses, trips, or other DollarBuddy content (see Section 5);
• RevenueCat: Subscription and in-app purchase management;
• AI Provider (Anthropic): Processing the text of your AI expense entries to return a structured expense. Inputs are not used to train their models and are not retained beyond what is needed to provide the response;
• Apple / Google Speech Recognition: Converting your voice dictation to text when you use the microphone, subject to their respective privacy policies;
• Apple / Google: App distribution and payment processing;
• Legal & Regulatory Authorities: Where required by law, court order, or to protect the rights and safety of users or third parties.

All third-party processors are subject to contractual data processing agreements that require them to protect your data in line with applicable law. Meta is not a processor for these purposes: as described in Section 5, it acts as an independent controller for its own advertising purposes, and our relationship with it is governed by Meta's controller terms rather than a processing agreement.

Inicrea Technologies Pvt. Ltd. is incorporated in Nepal. Some of our service providers (including Firebase and PostHog) process data in the United States and other jurisdictions. When data is transferred outside Nepal or your country of residence, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms where required.

We implement industry-standard technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS);
• Encrypted storage of passwords using bcrypt hashing;
• Role-based access controls limiting staff access to personal data;
• Regular security reviews of our infrastructure and codebase.

Despite these measures, no system is perfectly secure. We cannot guarantee absolute security of your data and encourage you to use a strong, unique password for your account.

We retain your personal data for as long as your account is active or as necessary to provide the Services. Specifically:

• Account data is retained for the life of your account and deleted within 30 days of account deletion;
• Financial data (expenses, budgets) is retained for the life of the account and deleted upon request;
• FCM tokens inactive for 30 or more consecutive days are automatically removed;
• Newsletter/waitlist email addresses are retained until you unsubscribe or request deletion;
• Analytics data is retained in pseudonymised form per PostHog's data retention settings.

You may request deletion of your account and associated data at any time by contacting info@dollarbuddy.io.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you;
• Rectification: Correct inaccurate or incomplete data;
• Erasure: Request deletion of your personal data ("right to be forgotten");
• Restriction: Request that we limit the processing of your data in certain circumstances;
• Portability: Receive your data in a machine-readable format;
• Objection: Object to processing based on legitimate interests;
• Withdraw Consent: Revoke consent for marketing communications or push notifications at any time;
• Complaint: Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at info@dollarbuddy.io. We will respond within 30 days.

DollarBuddy is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data without verifiable parental consent, we will delete such data promptly. If you believe a child has provided us with their data, please contact us at info@dollarbuddy.io.

Our website (https://dollarbuddy.io) uses cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for the website to function correctly (e.g., session management);
• Analytics cookies (PostHog): Used to analyse website traffic and user behaviour in pseudonymised form;
• Advertising cookies (Meta Pixel): Used to measure the effectiveness of our advertising and to show follow-up ads to people who have visited our website. These are not set for visitors in the EEA, the UK or Switzerland, and are not used in the DollarBuddy mobile application at all. See Section 5 for what the Meta Pixel collects and how to opt out.
• A functional cookie recording whether advertising cookies are permitted for your region. It stores only that yes or no answer and no personal data, and it is what allows us to switch the Pixel off for the regions above.

You can control cookies through your browser settings. Blocking analytics or advertising cookies will not affect your ability to use the website or the DollarBuddy application.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice at least 14 days before the changes take effect. The updated policy will always be available at https://dollarbuddy.io/privacy-policy. Your continued use of the Services after the effective date constitutes your acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, please contact: