Privacy Policy

1. Introduction

Welcome to EazySave ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service (collectively, the "Service").

By using EazySave, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you create an account:

• Email address (used for authentication and communication)
• Password (encrypted and hashed using industry-standard security)
• First name (for personalization)
• Account creation and confirmation timestamps

2.2 Financial Information

To provide our expense tracking and savings goal features, we collect:

• Savings goal name and target amount
• Goal deadline date
• Monthly income and fixed expenses
• Amount already saved
• Currency preference
• Purchase and expense records (amount, description, timestamp)
• Daily savings confirmations and logs
• AI-generated feedback on your spending habits

Important: We do not collect or store your bank account numbers, credit card numbers, or any direct access to your financial accounts. All financial data you provide is entered manually by you.

2.3 Subscription and Payment Information

When you subscribe to our premium plans:

• Payment processing is handled securely by Stripe, our third-party payment processor
• We store a Stripe customer ID to manage your subscription
• Subscription plan type (free, premium monthly, or premium annual)
• Subscription status and billing period dates
• Monthly usage tracking data (number of logs created)

We do not store your credit card details. All payment information is handled directly by Stripe in compliance with PCI-DSS standards.

2.4 Usage Information

• Login and logout activity
• Feature usage patterns
• Device type and browser information
• IP address (for security purposes)

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: To create and manage your account, track your expenses, calculate savings progress, and provide AI-powered insights
• Process Payments: To handle subscription billing through Stripe
• Send Communications: To send transactional emails (welcome emails, premium confirmations, password resets) via our email service provider
• Improve Our Service: To analyze usage patterns and enhance user experience
• Provide Support: To respond to your inquiries and provide customer assistance
• Ensure Security: To detect and prevent fraud, abuse, and security incidents
• Comply with Legal Obligations: To meet legal and regulatory requirements

4. Third-Party Services

We use the following trusted third-party services to operate EazySave:

4.1 Supabase (Database and Authentication)

• Hosts our database and provides authentication services
• Stores your profile, purchases, subscriptions, and usage data
• Implements row-level security policies to protect your data
• Privacy Policy: https://supabase.com/privacy

4.2 Stripe (Payment Processing)

• Processes all subscription payments securely
• PCI-DSS compliant payment gateway
• We receive only a customer ID, not your payment details
• Privacy Policy: https://stripe.com/privacy

4.3 Resend (Email Delivery)

• Delivers transactional emails (welcome emails, notifications)
• Receives your email address and first name for email personalization
• Privacy Policy: https://resend.com/privacy

4.4 OpenAI (AI-Powered Features)

• Provides AI assistance for expense logging and insights
• Processes your spending descriptions to generate helpful feedback
• No personal identifiers are sent, only transaction descriptions
• Privacy Policy: https://openai.com/privacy

5. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Passwords are hashed using bcrypt encryption
• Database access is protected with row-level security policies
• Regular security audits and updates
• Limited employee access to user data on a need-to-know basis

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. If you wish to delete your account, please contact us at hi@eazysave.app.

Upon account deletion:

• Your profile, purchases, and savings logs will be permanently deleted
• Subscription records may be retained for legal and accounting purposes
• Anonymized usage data may be retained for analytics

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Data Portability: Request an export of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails (transactional emails cannot be disabled)
• Withdraw Consent: Cancel your account at any time

To exercise any of these rights, please contact us at hi@eazysave.app.

8. Children's Privacy

EazySave is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using EazySave, you consent to the transfer of your information to our facilities and to third-party service providers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective immediately upon posting.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Additional Information for EU Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and usage
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

Our legal basis for processing your data includes:

• Contract Performance: To provide our Service as agreed
• Legitimate Interests: To improve our Service and prevent fraud
• Consent: For marketing communications (where required)
• Legal Obligations: To comply with applicable laws

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

Important: We do not sell your personal information to third parties.