1. Introduction
CediWise ("we", "us", "our") provides a salary calculator, budgeting, SME ledger, and financial literacy tools via web and mobile applications (the "Services"). This Privacy Policy describes what personal information we collect, how we use it, with whom we share it, and your rights. By using our Services you agree to the terms below.
2. Controller & Contact
Data controller: CediWise. For privacy inquiries, contact us at privacy@cediwise.app.
3. What we collect
- Account & identity data: email address, phone number (used for OTP), name, Google account identifiers for Google Sign-In.
- Financial & usage data: salary inputs, budgets, SME ledger entries, transactions you input (stored to provide the service).
- Device & technical data: device model, OS version, app version, IP address, crash reports (for troubleshooting and analytics).
- Analytics & telemetry: usage patterns via Firebase Analytics to improve the app.
- Communications: emails you send, newsletter sign-ups, and support responses.
4. Legal bases
- Performance of a contract — account and financial data.
- Legitimate interests — security, product improvement, analytics.
- Consent — marketing emails and newsletters (opt out anytime).
5. How we use your data
- Provide, operate, and maintain the Services.
- Authenticate you (OTP via SMS, Google Sign-In).
- Improve and personalize the Services (analytics).
- Communicate about account, support, updates, or legal notices.
- Detect and prevent fraud and misuse.
6. Third parties & processors
We use trusted providers: Supabase (database/auth), Firebase (analytics), Google (Sign-In), Arkesel (SMS OTP), Vercel/GitHub (hosting). We only share the minimum data required. Refer to each provider's privacy policies for details.
7. Data retention
We retain personal data only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Financial entries and user content are retained until you delete them or close your account, except where backups or legal holds apply.
8. Your rights
You have rights to request: access, correction, deletion (right to be forgotten), portability, restriction of processing, and to object to processing where applicable. Contact privacy@cediwise.app to exercise these rights.
9. Security
We use industry-standard measures (encryption in transit, secure storage, least privilege access). No internet transmission is 100% secure — please treat sensitive financial data with discretion.
10. International transfers
Your data may be stored or processed in countries other than yours where our providers operate. We ensure appropriate safeguards (processor agreements, standard contractual clauses where required).
11. Children
Our Services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we collected such data, contact us and we will remove it.
12. Changes
We may update this policy; we'll post the date of the latest revision and, if material, notify users.