# Privacy Policy for EmberPath

**Last updated: [21-07-2026]**

EmberPath ("the app", "we", "us") is an expense-tracking app for Android. This policy explains
what data the app collects, why, and how you can control or delete it.

## 1. Information we collect

### Account information
When you create an account (email/password or "Continue with Google"), we collect:
- Email address
- Full name (if provided)
- A profile avatar/initials (derived from your name)

### Financial data you enter
- Transactions (amount, category, date, note, payment method)
- Budgets and spending limits
- Recurring expense/income rules
- Your chosen currency

This data is what makes the app work — it is not used for anything beyond displaying it back to
you (dashboards, reports, exports).

### Shared/group expense data
If you create or join a group to split expenses, we store the group name, its members, shared
expense records, who paid, how costs were split, and settlement records — visible only to members
of that group.

### Receipt scanning
When you scan a receipt, the photo is processed **entirely on your device** using Google's ML Kit
text recognition. **The photo itself is never uploaded, stored, or transmitted anywhere** — only
the amount/date/note values you choose to keep are saved as a normal transaction.

### Device & notification data
- A push-notification token (to deliver reminders/alerts to your device), if you enable push
  notifications
- Basic device/session information needed to keep you signed in and sync data across app restarts

### Biometric app lock
If you enable biometric app lock, authentication is handled entirely by Android's own Biometric
API. **We never receive, see, or store your fingerprint, face, or any biometric data** — your
device tells the app only "yes" or "no."

### Subscription/purchase information
Subscriptions are purchased through Google Play Billing. We receive confirmation that you have an
active subscription and its expiry date — **we never see or store your payment card details**;
that is handled entirely by Google.

## 2. How we use your information

- To provide the app's core functionality (tracking, budgeting, syncing across your devices)
- To send you notifications you've opted into (budget alerts, recurring reminders, push
  notifications)
- To maintain your account and process subscription entitlements

We do not sell your data. We do not use your financial data for advertising.

## 3. Where your data is stored

Your data is stored using [Supabase](https://supabase.com) (our backend database/authentication
provider) and cached locally on your device so the app works offline. Push notifications are
delivered via Google's Firebase Cloud Messaging.

## 4. Third parties

| Service | Purpose | What it receives |
|---|---|---|
| Supabase | Database, authentication, backend | Account & financial data you enter |
| Google (Sign-In) | Optional sign-in method | Your Google account email/name, if you choose this sign-in method |
| Google Play Billing | Subscription payments | Handled entirely by Google; we never see payment details |
| Firebase Cloud Messaging | Push notification delivery | A device token, if push notifications are enabled |

We do not share your data with any other third party, and we do not use third-party advertising or
analytics SDKs.

## 5. Your rights: export and deletion

- **Export**: You can export your transaction data to CSV at any time from Settings → Export data.
- **Deletion**: You can permanently delete your account and all associated data at any time,
  directly in the app: **Settings → Delete account**. This immediately and permanently removes
  your transactions, budgets, categories, recurring rules, group data, subscription record, and
  profile — there is no waiting period, and no need to contact us. If you'd prefer to request
  deletion by email instead, contact us at **shashank999n@gmail.com**.
  Note: deleting your account does not cancel an active Google Play subscription — cancel that
  separately in the Play Store to stop future billing.

## 6. Data retention

We retain your data for as long as your account is active. If you delete your account, your data
is permanently removed from our systems (see Section 5).

## 7. Children's privacy

EmberPath is not directed at children under 13, and we do not knowingly collect data from
children under 13.

## 8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the
"Last updated" date above.

## 9. Contact us

Questions about this policy or your data: **shashank999n@gmail.com**