Privacy Policy

Overview

GoalCents is a personal finance app that helps you track spending, budgets, and goals. This policy explains what data we collect, why we collect it, who else handles it, and what you can ask us to do with it.

Data we collect

When you use GoalCents we collect only the data needed to provide the service:

• Account information: your email address and a hashed password used to authenticate you. If you use Sign in with Apple, we receive the email address Apple gives us, which may be a private relay address.
• Financial data you enter: transactions, accounts, budgets, goals, recurring rules, categories, vendors, and household member profiles that you create inside the app.
• Receipt images you choose to keep: when you scan a receipt, the text is read entirely on your device and is never uploaded. The picture itself is stored only if you keep it, in a private folder that only your account can open, and you can remove it from the transaction at any time.
• Screenshots you import: if you import a screenshot of a transaction list, it is read entirely on your device and the image is not uploaded or stored. Only the rows you confirm are saved, as ordinary transactions.
• Support messages: if you send feedback from inside the app, we receive your message, your email address, and basic technical details such as your app version, device model, and operating system version.
• Usage metadata: timestamps and record identifiers generated automatically when you create or modify data, and a record of which version of our terms and privacy policy you accepted and when.

We do not link to your bank, read your statements, or receive data from any financial institution. All financial data in GoalCents is entered manually by you. We do not collect advertising identifiers, and we do not track you across other apps or websites.

Device permissions

The app asks for camera access only to scan receipts, and for notification permission only to send you the reminders you turn on. Both are optional and the app works without them. If you enable the biometric lock, Face ID and Touch ID are handled entirely by your device: we never receive your biometric data.

How we use your data

• To authenticate you and keep your data private to your account.
• To display your financial data back to you across your devices.
• To let you split transactions and scope budgets between the household members you set up. Household members are labels inside your own account, not separate logins, so nobody else can sign in to your account or see your data.
• To answer you when you contact us for support.
• To email you occasionally about the Service, including asking what you think of it. These are written by hand and sent rarely, not a mailing list, so there is no unsubscribe link to click: reply and say stop, and we will not write again.

We do not sell your data, share it with advertisers, or use it to train machine-learning models.

Data storage and security

Your data is stored in Supabase, a cloud database provider, on servers located in North America. Supabase encrypts data at rest and in transit using industry-standard protocols. Access to your data is enforced by row-level security policies that prevent any other user from reading or modifying your records. Receipt images are held in a private storage bucket under the same rules: there are no public links, and every request is authenticated as you.

Who else processes your data

We use a small number of service providers, each of which receives only what it needs to do its job and is not permitted to use your data for its own purposes:

• Supabase: database, sign-in, and file storage for everything described above.
• Resend: sending email, such as password resets, verification codes, and support replies. It handles your email address and the contents of those messages.
• Vercel: hosting this website and counting page views on it.
• Apple: app distribution, and Sign in with Apple if you choose it.

These providers operate in Canada and the United States, so your data may be processed outside your province or country and be subject to the laws there. Some email we receive from you, such as a support message, remains in our email account after it is sent.

Data retention and deletion

Your data is retained for as long as your account is active. You may delete your account at any time from the Settings screen inside the app, which requires an emailed confirmation code. Deleting your account removes your records and any receipt images you kept from our database, normally immediately and in any case within 30 days, except where retention is required by applicable law. Email you have already sent us, such as a support message, is not stored in the database and is not removed by deleting your account; ask us and we will delete it.

Your rights

You can exercise most of these yourself in the app, and we will help with the rest:

• Access and portability: export your full history from Settings as a set of CSV files at any time.
• Correction: edit any record you have entered, at any time.
• Deletion: delete individual records, or your whole account, from Settings.
• Withdraw consent: turn off notifications or camera access in your device settings, or stop using the Service and delete your account.
• Complain: if you are not satisfied with how we have handled your data, you may contact your local data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada.

To make a request, email us at expirify.team@gmail.com. We will respond within 30 days.

Cookies and tracking

We do not use third-party tracking cookies, advertising pixels, or cross-site profiling. We do count page views on this website using cookieless analytics that records no personal information. Those requests are served from our own domain and processed on our behalf by Vercel, our hosting provider. The app itself contains no analytics.

Children's privacy

GoalCents is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page, and the app will ask you to accept the new version.

Contact

Questions or concerns about this policy? Email us at expirify.team@gmail.com.