Privacy Policy

1. Introduction

Welcome to Divvio. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our expense-splitting application and related services.

2. Information We Collect

2.1 Information You Provide

When you use Divvio, we collect information that you provide directly to us, including:

• Account Information: Name, email address, and profile picture when you create an account
• Expense Data: Transaction details, amounts, descriptions, and dates you enter into the app
• Group Information: Group names, member details, and shared expense records
• Settlement Records: Records of who paid whom and when, as tracked manually by you and your group members

2.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Usage Data: Information about how you interact with our app, including features used and actions taken
• Device Information: Device type, operating system, browser type, and unique device identifiers
• Log Data: IP address, access times, pages viewed, and app crashes or errors
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Our Services: To enable expense tracking, splitting, and settlement features
• Account Management: To create and manage your account and authenticate your identity
• Communication: To send you service-related notifications, updates, and support messages
• Improvement: To analyze usage patterns and improve our app's functionality and user experience
• Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We may share your information in the following circumstances:

• With Group Members: Expense information you create is shared with members of your expense groups
• Service Providers: We share data with third-party service providers who perform services on our behalf, such as hosting, analytics, and customer support
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• Legal Requirements: We may disclose information when required by law or to protect our rights, safety, or property
• With Your Consent: We may share information for other purposes with your explicit consent

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or regulatory purposes.

Expense records may be retained in anonymized form for analytical purposes even after account deletion.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the email address provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

9. Children's Privacy

Our services are not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. Third-Party Links and Services

Our app may contain links to third-party websites or integrate with third-party services. This privacy policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Email: privacy@divvio.co

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at privacy@divvio.co. We will verify your identity before processing your request.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 7 above. The legal basis for processing your information includes:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Processing for business operations and service improvement
• Consent: Where you have provided explicit consent
• Legal Obligations: Processing required to comply with legal requirements

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately.