Privacy Policy for iMoolerFlow

1. Information we collect

iMoneyFlowFlow is designed to help you manage income, expenses, receipts, and team projects. We only collect information that is necessary to provide and improve our services.

Account information

• Name, email address, and phone number – when you create an account, we collect your name, email, and (if you choose to provide it) your phone number. This is used for authentication, account recovery, and essential communication.
• Profile details – any optional profile picture or preferences you set.

Income & expense data

• Income and expense entries – amounts, dates, descriptions, and recurring status.
• Categories, shops, and vendors – the labels you assign to transactions, including merchant names and custom categories you create.
• Receipt photos – images you upload or capture of receipts. These are stored to help you track and verify expenses.

Project & team information

• Project/team data – if you use collaborative features, we store project names, member roles, and any shared financial records or notes within a team.
• Team member email addresses – to invite and manage members (only if you use team features).

Location information

• Location (optional) – iMoolerFlow may request access to your device's location to tag expenses with a place. You can deny this permission and still use all core features; location is only collected when you explicitly allow it and use location‑based features.

Device information

• Device & technical data – such as device model, operating system version, unique device identifiers (e.g., IDFV), and app version. This helps us diagnose issues and improve performance.
• Usage data – how you interact with the app (screens visited, features used) to understand what works and what needs improvement.

Notifications & FCM

• Push notifications – we use Firebase Cloud Messaging (FCM) to send you reminders, updates, and alerts. You can opt out at any time in your device settings. We do not share your notification token with third parties for marketing purposes.

2. How AI features process data

iMoolerFlow may include AI-powered features (e.g., automatic receipt scanning, category suggestions, or spending insights). When you use these features:

• Data (such as receipt images or transaction text) is processed to provide the requested AI output. This processing may occur on your device or on secure servers.
• We do not use your financial data to train generalized AI models without your explicit consent. Any AI processing is done solely to deliver the feature you requested.
• If a third-party AI service is used, we ensure it is bound by strict data protection terms.

3. How data is stored & secured

• Storage – Your data is stored on secure servers provided by trusted cloud infrastructure (e.g., Firebase/Google Cloud). Data may be stored in your region or in a region where our providers operate, always with appropriate safeguards.
• Security – We implement industry-standard measures including encryption in transit (TLS/SSL) and at rest. Access to personal data is restricted to authorised personnel only. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
• We retain your data as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

4. Data sharing & third-party services

We do not sell your personal information. We only share data with third parties in the following limited cases:

• Service providers – such as Firebase (authentication, database, cloud functions, FCM), hosting providers, and analytics services. These providers process data on our behalf and are contractually obligated to protect it.
• Legal requirements – if required by law, subpoena, or to protect the rights and safety of our users or the public.
• Business transfers – in the event of a merger or acquisition, data may be transferred, but we will notify you and ensure your data remains protected.

5. Data retention & account deletion

• Retention – We keep your data for as long as your account is active. If you delete your account, we will remove or anonymise your personal data within 30 days, unless we are required by law to retain it longer.
• Account/data deletion – You can delete your account directly from the app (Settings → Account → Delete Account) or by emailing us at info@support.mvuma.org. When you delete your account, we will delete your personal data, including income/expense records, receipt images, and team associations, unless we are legally required to keep some information.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access – request a copy of the personal data we hold about you.
• Correction – update or correct inaccurate information (you can do this in the app).
• Deletion – request deletion of your data (see above).
• Restriction / Objection – ask us to restrict or object to certain processing.
• Portability – receive your data in a structured, machine-readable format.
• Withdraw consent – where processing is based on consent (e.g., location), you can withdraw it at any time.

To exercise any of these rights, please contact us at info@support.mvuma.org. We will respond within 30 days.

7. Push notifications (FCM)

We use Firebase Cloud Messaging to deliver notifications. You can manage your notification preferences in the app or device settings. We do not use FCM to collect additional personal data beyond the device token required to send notifications.

8. Children's privacy

iMoolerFlow is not intended for children under 13 (or under 16 in some jurisdictions). We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via the app or email. The "Last updated" date at the top indicates when the policy was last revised.

---