This policy explains what the My Passbook app and website collect, why, and the choices you have. The data controller (data fiduciary) is My Passbook, contactable at developerpb07@gmail.com.

Ledger data you enter. Accounts, transactions, transfers, categories, tags, budgets, recurring items, people and debt records, and committees (a kitty or chit: the contribution, the schedule, and the payout). Guest ledger data stays only in local storage on your device. With an account, a copy is stored on our backend to enable backup and multi-device sync.

Account credentials. If you create an account: your email address and a securely hashed password, handled by our authentication provider (Supabase). Guests are issued an anonymous identifier with no personal details attached.

Technical data. When the app or website contacts our backend, standard request metadata (such as IP address and timestamps) is processed by our infrastructure providers to deliver and secure the Service. We do not build advertising or behavioural profiles.

Where the law asks us to identify a legal basis: running your account is performance of our contract with you (the Terms of Service); security, debugging, and improvement rely on our legitimate interests in operating a reliable Service; some processing is to meet legal obligations. Where consent is required, we ask for it and you can withdraw it.

We send transactional email only: password-reset codes and, if enabled, account-confirmation messages. Delivery is handled by our email provider, Resend. We do not send newsletters or promotional email.

We do not sell your personal data and we do not share it for advertising. We share it only with the providers that run the Service on our behalf, under agreements that limit them to processing it for us:

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a business transfer (you would be notified).

Our providers may process and store data on servers outside your country, including in the United States and the European Union. Where a transfer needs a safeguard under Indian, EU, UK, or other law, we rely on appropriate measures such as standard contractual clauses and the providers' own compliance programmes.

Guest ledger data lives on your device until you delete entries or remove the app. It is not uploaded. The anonymous sign-in created on first open is kept so that phone can keep working; we do not yet run an automatic job that deletes unused anonymous sign-ins. Account data is kept while your account exists. Signing out of a device first tries to back up anything not yet synced, then deletes that device's local copy and returns it to a fresh guest ledger. The copy on our server stays until you delete the account.

In the app, open Settings, then Delete account. That closes the account immediately: the ledger is hidden (each row is marked deleted, not wiped from the database in that moment), the email is released, and this phone returns to a fresh guest ledger. Another device signed into that account loses the ledger the next time it syncs. You can use the same email to create a new account later; the old ledger is not restored. Those hidden rows stay until we erase them.

To have the stored rows erased, email developerpb07@gmail.com from the account address and ask. We erase them within 30 days, unless the law requires us to keep a specific record. India's Digital Personal Data Protection Act, 2023 gives you a right to erasure; this email is how that request is carried out for data the in-app delete has only hidden. We do not keep a separate automatic purge schedule.

Depending on where you live — for example under India's Digital Personal Data Protection Act, 2023, the EU/UK GDPR, or similar laws — you may have the right to access, correct, complete, update, export, or erase your personal data, to withdraw consent, to nominate someone to exercise your rights, and to complain to a data-protection authority. Most ledger data is already visible and editable inside the app; for anything else, contact developerpb07@gmail.com. If you are in the EU/UK you may also object to or restrict certain processing.

Data in transit is encrypted (HTTPS/TLS). Account data on our backend is isolated per user by row-level security so one account cannot read another's. Passwords are stored only as salted hashes. No system is perfectly secure, so we cannot guarantee absolute security; tell us at developerpb07@gmail.com if you spot a problem.

The Service is not directed to, and not intended for, anyone under 18. We do not knowingly collect their personal data; if we learn we have, we will delete it.

We may update this policy. The current version is always on this page with its “last updated” date; where a change is significant we will make reasonable efforts to highlight it in the app or by email.

Privacy questions or requests: developerpb07@gmail.com.