Privacy Policy for Poysha

1. Introduction

Welcome to Poysha ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and Android applications, including the Trusted Web Activity distributed on Google Play (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We collect information that you provide directly to us, information that is essential for the Service to function, and data related to your use of the Service.

A. Personal Data You Provide

Account Information: When you register for an account, we collect your username, email address, preferred currency, and timezone. This information is used to create and manage your account.

Financial Data: As the core function of the Service, we collect and store the financial data you provide. This includes, but is not limited to:

• Accounts: Account names, types (e.g., Savings, Credit Card), numbers, initial and current balances, currency codes, and other details like credit limits or loan terms.
• Transactions: Descriptions, amounts, dates, associated accounts, and categories.
• Budgets, Categories, Labels, Templates, and Recurring Payments: All data you create and manage within these features.
• Subscription Information: If you choose to upgrade your account, we collect payment verification details you provide, such as a bKash transaction ID and the last three digits of your mobile number, to confirm your payment and update your account status.

B. Data Stored Locally on Your Device (Offline Functionality)

To provide a seamless offline experience, the Poysha application uses a Service Worker and IndexedDB to store a copy of your data directly on your device. This includes:

• Your user session information (to keep you logged in).
• A replica of your accounts, categories, transactions, budgets, and other financial data.

This local data allows you to view and record transactions even when you are not connected to the internet. These changes are then synchronized with our servers when you next go online. This local data is stored within your browser's sandboxed storage and can be cleared by you at any time by clearing your browser's site data.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your Poysha account.
• Provide, operate, and maintain the core financial tracking features of the Service.
• Enable offline access and functionality.
• Synchronize your data between your device and our servers.
• Process your subscription upgrades and manage your account status.
• Send you essential service-related communications, such as welcome emails and password reset emails.
• Respond to your comments, questions, and provide customer support.
• For admin users, monitor platform health, manage user accounts, and review upgrade requests.

4. How We Share Your Information

We do not sell, trade, rent, or otherwise share your personal and financial information with third parties for their marketing purposes. We may share information in the following limited circumstances:

With Service Providers

We use third-party services to operate our application. These include:

• Email Delivery: We use Google SMTP (Gmail) via PHPMailer to send transactional emails (e.g., password resets). Your email address is processed by this service for the sole purpose of sending these emails.
• Currency Conversion: We rely on ExchangeRate-API to retrieve exchange-rate data so that we can display conversions inside the Service. When we call this API, it receives the currency codes needed for the request along with your IP address as part of the network call.
• Content Delivery Networks (CDNs): We use services like Cloudflare, Google Fonts, and jsDelivr to efficiently deliver application assets (stylesheets, fonts). These services may receive your IP address as part of a standard web request to their servers.

For Legal Reasons

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or protect the personal safety of users or the public.

5. Data Storage and Security

We are committed to protecting your data.

Server-Side Security: Your data is stored on our servers. We implement security measures designed to protect your information, including the use of password hashing to secure your account credentials.

Client-Side Security: As described above, a copy of your data is stored on your device in your browser's secure storage area. Access to this data is sandboxed and limited to the Poysha application within your browser.

6. Your Data Rights and Choices

You have control over your personal information.

Access and Update: You can review and change your information at any time by logging into your account and navigating to the appropriate settings or management pages (e.g., Accounts, Categories).

Data Deletion: The Service provides you with tools to delete your data. In the "Settings" section, you can:

• Delete All User Data: This will permanently delete all your financial data (transactions, accounts, etc.) from our servers. Your user login will remain.
• Delete Account Permanently: This will permanently and irreversibly delete your user account and all associated data from our servers.

Communications: You may not opt-out of service-related emails (e.g., password resets) as they are essential for the operation of your account. We do not send marketing emails.

7. Third-Party Services

This Privacy Policy does not apply to the third-party services we use. We encourage you to review their privacy policies:

• Google Privacy Policy
• Cloudflare Privacy Policy
• ExchangeRate-API Privacy Policy

8. Children's Privacy

The Service is not intended for or directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: poyshaonline@gmail.com.