1. Introduction
Debtlify ("Debtlify," "we," "us," or "our") provides a mobile application and this marketing website (together, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Services.
The Debtlify app is designed for personal finance tracking: debts, bills, group expense splits, and related features. Most financial data you enter is stored locally on your device by default. Optional cloud features sync some data when you create an account and use shared groups or profile features.
By using the Services, you agree to this Privacy Policy and our Terms of Use. If you do not agree, please do not use the Services.
2. Information we collect
2.1 Information you provide
- Profile and preferences: display name and preferred currency collected during onboarding.
- Financial and activity data: debts, payments, bills, billers, group expenses, settlements, balances, notes, and related metadata you enter in the app.
- Account credentials: if you sign in, we process email address, display name, and a six-digit PIN used for authentication (handled through our authentication provider; we do not store your PIN in plain text in app databases you control).
- Photos: optional receipt images, group banner images, and profile avatars you choose to attach or upload.
- Backups: if you export a backup file, that file is created on your device and may be shared by you via email, AirDrop, cloud drives, or other channels you select. Backups are encrypted by the app; we do not receive your backup files unless you send them to us.
- Waitlist (website only): if you join our waitlist, we collect your email address submitted through the form.
- Support communications: information you send when you contact us (for example, by email).
2.2 Information collected automatically
- Device and app data: basic technical information needed to run the app (for example, device type, operating system version, app version, and crash-related diagnostics if made available by the platform).
- Identifiers: when you use optional cloud sign-in, we associate your account with an internal user identifier. When you subscribe to Debtlify Pro, purchase identifiers and subscription status are processed by Apple and our subscription partner (see Section 4).
- Local notifications: the app may schedule reminders on your device (for example, due dates). Notification content is generated on your device; we do not use notifications for advertising.
- Website logs: our hosting provider may process standard server logs (such as IP address, user agent, and request time) when you visit this site or submit the waitlist form.
2.3 What we do not collect
We do not sell your personal information. We do not run third-party advertising networks in the app. We do not use your financial data for cross-app tracking or behavioral advertising.
3. How we use information
We use information to:
- Provide, maintain, and improve the Services;
- Store and sync data you choose to keep on your device or in the cloud;
- Authenticate you and secure your account;
- Enable optional group sharing and collaboration features;
- Process and validate subscriptions (Debtlify Pro);
- Send local reminders and display in-app alerts you configure;
- Operate the waitlist and respond to support requests;
- Comply with law, prevent fraud, and enforce our terms;
- Protect the security and integrity of the Services.
Legal bases (EEA/UK users)
Where applicable, we rely on:
- Performance of a contract — to provide the app and account features you request;
- Legitimate interests — to secure the Services, prevent abuse, and improve reliability, balanced against your rights;
- Consent — where required (for example, device permissions you grant, such as notifications or photo library access);
- Legal obligation — where we must retain or disclose information under law.
5. Retention
On-device data remains on your phone until you delete it in the app or use Clear all data in profile settings.
Cloud datais retained while your account is active and as needed to operate shared groups. If you request account deletion, we will delete or anonymize cloud account data within a reasonable period, subject to legal retention requirements and residual backups on our processors' systems.
Waitlist emails are retained until you unsubscribe or we no longer need the list for launch communications.
Subscription records may be retained by Apple and RevenueCat according to their policies and applicable tax or fraud-prevention requirements.
6. Security
We use administrative, technical, and organizational measures designed to protect information, including encryption in transit (HTTPS/TLS), secure credential storage on device where supported by the operating system, and access controls on cloud infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
You are responsible for securing your device, PIN, and any backup files you create or share outside the app.
7. Your rights and choices
7.1 In the app
- Edit profile information in settings;
- Decline optional cloud sign-in and use local-only features where available;
- Revoke notification or photo permissions in iOS/Android settings;
- Use Clear all data to remove local app data and sign out of cloud sessions;
- Manage or cancel subscriptions through your Apple ID subscription settings.
7.2 Privacy rights requests
Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal information, and to object to certain processing. California residents may have additional rights under the CCPA/CPRA, including knowing what categories we collect and requesting deletion, subject to exceptions.
To exercise these rights, email cale.lacson@gmail.com with the subject line Privacy Request. We may verify your request (for example, by confirming the email associated with your account). We do not discriminate against you for exercising privacy rights.
7.3 Do Not Track
The Services do not respond to browser "Do Not Track" signals because we do not track users across third-party websites for advertising purposes.
8. Children's privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take steps to delete it.
9. International transfers
We may process information in countries other than where you live, including the United States, where our service providers operate. When we transfer personal information internationally, we rely on appropriate safeguards where required by law (such as standard contractual clauses or equivalent mechanisms offered by our providers).
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date above. Material changes may also be communicated in the app or by email where appropriate. Continued use after changes become effective constitutes acceptance of the updated policy.
11. Contact us
Questions about this Privacy Policy or our data practices:
Email: cale.lacson@gmail.com
App: Debtlify (iOS) — bundle identifier com.caleadrian.debtlify