Skip to main content

Privacy Policy

What we collect, how we use it, and your rights.

Last updated: {{EFFECTIVE_DATE}}

1. Introduction

SuertStash ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, mobile application, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third-party services.

  • Account Information: email address, name, and password when you register for an account.
  • Financial Data: expense records, subscription details, budget categories, and card information that you enter into the app.
  • Usage Data: app interactions, feature usage, device information, and crash reports to improve our Services.
  • Payment Information: billing details processed by Paddle. We do not store full payment card numbers.
  • Communications: emails and messages you send to our support team.

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve our Services, and to communicate with you.

  • To provide core app functionality: expense tracking, budgeting, subscription monitoring, and financial insights.
  • To process payments and manage subscriptions through our billing provider.
  • To send you important account-related notifications, such as password resets or billing reminders.
  • To analyze usage patterns and improve app performance, features, and user experience.
  • To comply with legal obligations and protect our rights and the rights of others.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal data within a reasonable time, except where we are legally required to retain it.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share your data with trusted third-party service providers who assist us in operating our Services.

  • Supabase: Cloud database and authentication services. Data is stored securely in Supabase infrastructure.
  • Paddle: Payment processing for web subscriptions. Paddle handles billing data under their own privacy policy.
  • Apple App Store / Google Play: For in-app purchases and subscription management on mobile platforms.
  • Analytics providers: We may use analytics tools to understand app usage. These providers process data under their own policies.

6. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data, subject to legal obligations.
  • Right to Restrict Processing: You can request that we limit how we use your data.
  • Right to Data Portability: You can request your data in a structured, machine-readable format.
  • Right to Object: You can object to certain types of processing, such as direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.

6. Your Rights (GDPR / CCPA)

To exercise these rights, contact us at {{SUPPORT_EMAIL}}. We will respond within the timeframe required by applicable law (typically 30 days under GDPR).

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze traffic, and understand how our Services are used.

For detailed information about the cookies we use, please see our Cookie Policy.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our Services are not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at {{SUPPORT_EMAIL}}.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, in compliance with applicable data protection regulations.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date. Continued use of our Services after such changes constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

  • Email: {{SUPPORT_EMAIL}}
  • Service operator: {{LEGAL_ENTITY_NAME}}

This content is provided for product transparency and must be reviewed by qualified legal counsel before production release.