Privacy Policy for Expense Hunter

A. Account and Identity Information

Data Points: A unique user ID, a username, an email address, and a securely hashed password. We may also store other profile information you choose to provide in an encrypted format.

Purpose: To create your account, authenticate you when you log in, provide customer support, and send you important service-related communications (e.g., security alerts, password resets).

Legal Basis (GDPR): Performance of a contract (our Terms of Service with you). The provision of this data is necessary for the performance of our contract with you. Failure to provide this essential information will result in you being unable to create an account and use the Expense Hunter service.

B. Financial and Transactional Data

Data Points: Transaction details (such as title, description, amounts, currency, date), categories, and tags you create, information about who participated in a transaction, and details of shared ledgers.

Purpose: To provide you with the core features of our service, such as expense tracking, budgeting, and bill splitting.

Legal Basis (GDPR): Performance of a contract.

C. Technical and Usage Data

Data Points: Your IP address, application version, and operating system version. We also log your interaction with the service, such as when you select a ledger or asset.

Purpose: To ensure the security of our service (e.g., fraud prevention), to diagnose technical problems, and to analyze usage patterns for service improvement.

Legal Basis (GDPR): Legitimate interest (for security and service improvement) and performance of a contract (for service functionality).

D. Collaboration and Sharing Information

Data Points: User IDs of people you invite to share resources (like ledgers), the permissions you grant them, and your relationship to transactions.

Purpose: To enable the sharing and collaboration features of our service.

Legal Basis (GDPR): Performance of a contract.

E. Feedback and Communications

Data Points: Your user ID (if logged in), the content of your message, and associated technical data (IP address, app version, device information).

Purpose: To respond to your inquiries and to use your feedback to improve our service.

Legal Basis (GDPR): Legitimate interest (to improve our service and provide support).

A. Active Account

While your account is active, we retain your personal data as described in Section 3 to provide you with the full functionality of the Expense Hunter service.

B. Account Deletion and Personal Data

You have the right to delete your account at any time. When you initiate an account deletion request, we will permanently delete or fully anonymize all personal data that belongs solely to you within a reasonable period, not to exceed 90 days. This includes your Account and Identity Information and all non-shared ledgers, transactions, categories, and tags.

C. Important Exception: Data in Shared Resources

Please be aware that any data you have contributed to a shared resource (such as a shared ledger) will not be automatically deleted when you delete your account. Your personal association with that data will be removed (i.e., it will be anonymized), but the transactional data itself will remain in the shared resource for the other members to see. This is necessary to maintain the integrity of their financial records. If you wish to remove specific entries from a shared resource, you must do so manually before deleting your account.

D. Additional Retention Periods

In specific circumstances, certain data may be retained or anonymized after your account has been deleted:

• Feedback and Communications: Upon account deletion, we anonymize any feedback or support communications you have sent us. This means we remove the link to your user account and any personal identifiers from the communication record. We retain the anonymized content of the message itself to track issues, analyze user needs, and improve our service.
• Legal Obligations: Where we are required by law (e.g., Austrian commercial or tax laws), we may need to retain certain data for a legally mandated period (typically 7 years).
• Security and Service Integrity: We retain technical and security logs (which may include IP addresses) for a limited time (e.g., up to 180 days) to protect the security of our service, prevent fraud, and diagnose technical issues.
• Anonymized Data for Analytics: We may anonymize your usage data and aggregate it with other anonymized data for statistical analysis to improve our service. This is no longer considered personal data under GDPR.