Privacy Policy

Divyo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("Divyo" or the "App"). Please read this Privacy Policy carefully. By using Divyo, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect information provided through Google Sign-In or Apple Sign-In:

• Email address
• Display name
• Profile photo (if provided by your sign-in provider)

During account setup, you may also provide:

• First and last name
• Username (unique identifier)
• Payment handles (optional): Venmo, Cash App, or PayPal usernames for payment convenience
• Profile photo (if you choose to upload one)

1.2 Receipt and Financial Data

When you scan receipts, we collect and process:

• Receipt images you capture or upload
• OCR-extracted data including merchant name, line items, prices, taxes, tips, and totals
• Item assignments (who owes what on each receipt)
• Payment status tracking (paid/pending amounts)

1.3 Group Data

If you use our Groups feature, we store:

• Group names and descriptions
• Group membership information
• Group admin assignments

1.4 Usage and Analytics Data

We automatically collect:

• Screen views and feature usage via Firebase Analytics
• Crash reports and error logs via Firebase Crashlytics
• Device information (device model, operating system version)
• App version and performance metrics

1.5 Local Device Storage

We store certain data locally on your device for performance and offline access, including recent searches, user profile cache, theme preferences, and draft receipt data.

2. Device Permissions

Divyo requires the following permissions to function:

• Camera: Required to scan receipts. We only access the camera when you actively choose to scan a receipt.
• Photo Library: Required to select existing receipt images from your device. We only access photos you explicitly select.
• App Tracking Transparency (iOS): We request permission to use your device's advertising identifier to deliver personalized ads. You can deny this permission without affecting core app functionality.
• Location (approximate): Used only for ad personalization. You can deny this permission without affecting core app functionality.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Divyo application
• Process receipts and calculate expense splits
• Enable payment tracking and status updates
• Facilitate group expense management
• Send you service-related communications and payment reminders
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues
• Display advertisements (for free-tier users)
• Comply with legal obligations

4. Third-Party Services

Divyo integrates with the following third-party services:

4.1 Firebase (Google)

We use Firebase for:

• Authentication: Secure user sign-in via Google and Apple
• Cloud Firestore: Database storage for user data, receipts, and groups
• Cloud Storage: Storage for receipt images and profile photos
• Analytics: Usage tracking and product improvement (production environment only)
• Crashlytics: Crash reporting and stability monitoring

Firebase Privacy Policy: https://firebase.google.com/support/privacy

4.2 Google AdMob

For free-tier users, we display advertisements through Google AdMob. AdMob may collect device identifiers and usage data for ad targeting and attribution. Premium subscribers do not see advertisements.

Google Privacy Policy: https://policies.google.com/privacy

4.3 RevenueCat (Coming Soon)

We plan to use RevenueCat for subscription management and in-app purchase processing. RevenueCat processes purchase transactions and subscription status.

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

4.4 Authentication Providers

We offer sign-in through Google and Apple. When you sign in, we receive basic profile information as described above. We do not receive your password.

5. Data Retention

We retain your data based on your subscription tier:

Free Tier

• Receipt images: Retained for 30 days after upload
• Receipt history: Visible for 90 days (unsettled receipts remain visible until settled)

Premium Tier

• Receipt images: Retained indefinitely while your account is active
• Receipt history: Unlimited access

Account data (profile, username, email) is retained until you request account deletion.

6. Your Rights and Choices

6.1 Account Deletion

You can request deletion of your account at any time through the app settings. Upon request:

• Your account enters a 30-day grace period during which you can reactivate it
• After 30 days, your account and associated data are permanently deleted
• Certain anonymized data may be retained for analytics purposes

6.2 Data Export

Premium users can export their receipt data in CSV, PDF, or plain text format through the app.

6.3 Analytics Opt-Out

You can opt out of analytics collection in the app settings under Privacy preferences.

6.4 Ad Personalization

You can control ad personalization through your device settings (iOS App Tracking Transparency or Android ad settings) or by subscribing to Premium to remove ads entirely.

7. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption in transit (HTTPS) for all data transfers
• Firebase Security Rules to enforce access control
• Secure authentication via OAuth (Google/Apple)
• Secure storage for sensitive local data on your device

8. Children's Privacy

Divyo is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at ahmadgrahamdev@gmail.com and we will take steps to delete such information.

9. International Users

Divyo is operated from the United States. If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

For EU/EEA Users (GDPR): You have the right to access, rectify, erase, restrict processing, and port your personal data. We process your data based on your consent and our legitimate interests in providing the service. Our GDPR-compliant consent framework for advertising is implemented via Google's User Messaging Platform (UMP).

For California Users (CCPA): You have the right to know what personal information we collect, request deletion of your data, and opt-out of the sale of personal information. We do not sell personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: ahmadgrahamdev@gmail.com