Privacy Policy

Last updated: April 10, 2026

Qaizo ("we", "our", "the app") is a personal finance management application. Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data: When you register, we collect your email address, display name, and authentication credentials via Firebase Authentication.

Financial data: Transactions, budgets, accounts, recurring payments, and categories you create within the app. This data is entered by you manually or via our smart input feature.

App preferences: Language, currency, theme, and notification settings.

We do NOT collect:

• Bank account or credit card numbers
• Government ID or social security numbers
• Location data
• Contact lists or phone data
• Usage analytics or advertising identifiers

2. How We Use Your Data

• To provide and maintain the app's functionality
• To sync your data across devices (when signed in)
• To generate personalized financial insights and AI-powered advice
• To send local push notifications (reminders, streak alerts, payment notifications)

3. Device Permissions

Camera: Used only for the receipt scanner feature. Photos are processed locally and sent to Google Gemini API for text extraction. Photos are not stored on our servers.

Microphone: Used only for the voice input feature. Speech is converted to text on-device using the system speech recognizer. Audio is not recorded or sent to our servers.

Notifications: Used for recurring payment reminders, streak alerts and weekly summaries. All notifications are local — no data is sent to external push services.

4. AI Features

Qaizo uses Google Gemini API to provide smart transaction parsing, receipt scanning, AI chat and personalized financial advice. When you use these features:

• Your transaction text input or receipt image is sent to Google Gemini API for processing
• Aggregated monthly financial summaries (totals by category, not individual transactions) may be sent for generating advice
• No personally identifiable information (name, email) is sent to the AI
• Google's Gemini API Terms of Service apply to AI processing

5. Data Storage

Guest mode: All data is stored locally on your device using AsyncStorage. Nothing is sent to any server.

Signed-in mode: Data is stored in Google Firebase Firestore, associated with your user account. Firebase servers are located in the United States and comply with Google's security standards.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your data is only shared with:

• Firebase (Google) — for authentication and data storage
• Google Gemini API — for AI features (only when you actively use them)

7. Data Retention & Deletion

Your data is retained as long as your account exists. You can delete all your data at any time:

• Go to Settings → Account → Delete account & data
• This permanently removes all your data from our servers and signs you out

You can also request data deletion by emailing us at support@qaizo.app.

8. Security

We use industry-standard security measures:

• Firebase Authentication with encrypted credentials
• Firestore security rules limiting access to authenticated users only
• HTTPS encryption for all data in transit
• API keys stored in environment variables, not in source code
• Optional PIN code lock — PIN is stored as a SHA-256 hash on your device only, never sent to any server

9. Children's Privacy

Qaizo is not intended for children under 13. We do not knowingly collect data from children.

10. Your Rights

You have the right to:

• Access your data (via the Export feature in Settings)
• Delete your data (via Settings or by contacting us)
• Withdraw consent at any time by deleting your account

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

12. Contact Us

If you have any questions about this privacy policy, contact us at:

support@qaizo.app