1. Information We Collect

We collect information necessary to provide, maintain, and improve our Service. This includes data you provide directly and data generated through your use of WeBalance:

• Account information: name, email address, profile picture, and authentication credentials
• Financial data: income amounts, expense entries, budget categories, and financial goals you enter into the app
• Usage data: how you interact with the app, features you use, and your preferences
• Device information: device type, operating system, browser type, and language settings
• Payment information: when you subscribe to a paid plan, payment processing is handled by Stripe — we do not store your full card details

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and operating the core budgeting and expense tracking features
• Generating personalized AI-powered insights, recommendations, and financial coaching
• Detecting anomalies and unusual patterns in your spending to help protect you
• Improving and optimizing the performance, reliability, and security of the Service
• Processing payments and managing your subscription
• Sending important service notifications (e.g., security alerts, billing reminders)
• Complying with legal obligations and enforcing our Terms of Service

We take the security of your financial data extremely seriously and implement multiple layers of protection:

• End-to-end encryption for sensitive financial data using industry-standard protocols
• Secure encrypted connections for all data transmitted between your device and our servers
• Robust authentication with support for multi-factor authentication
• Regular security audits and vulnerability assessments
• Strict access controls — only authorized systems can access your data to provide the Service
• Data stored in secure, certified cloud infrastructure

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We only share data with third-party service providers strictly necessary to operate the Service (such as Stripe for payment processing, Firebase for authentication and data storage, and Google Cloud for AI processing). These providers are contractually bound to protect your data and may only use it to perform services on our behalf. We may also disclose information when required by law, court order, or to protect the rights and safety of our users.

6. Cookies & Tracking Technologies

WeBalance uses essential cookies and local storage to maintain your session, remember your preferences (such as language and theme), and ensure the Service functions correctly. We do not use third-party advertising cookies or cross-site tracking technologies. Analytics data, when collected, is used solely to improve the Service and is not shared with advertisers.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain certain information (e.g., transaction records for tax or accounting purposes). You can export all of your data at any time before deleting your account.

8. Your Rights & Controls

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct any inaccurate or incomplete data
• Deletion: Request the deletion of your personal data and account
• Export: Download all of your data in a portable format
• Objection: Object to certain types of data processing
• Restriction: Request that we limit how we use your data
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

9. Children's Privacy

WeBalance is not intended for use by children under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting a notice within the app or by email at least 15 days before the changes take effect. We encourage you to review this policy periodically. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.