VoiceSpend Privacy Policy

1. Introduction

Welcome to VoiceSpend ("the App"), a personal expense tracking application operated by BWJ Tech Solutions Private Limited ("we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our App, and your rights regarding that data.

By downloading or using VoiceSpend, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.

2. Applicability of Indian Data Protection Law (DPDP Act, 2023)

VoiceSpend complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

• We process your personal data only for the purposes described in this policy.
• You have the right to consent, withdraw consent, access, correct, and erase your personal data.
• We do not sell your personal data to any third party.
• We appoint ourselves as the Data Fiduciary under the DPDP Act for the personal data we collect.
• Where required, we will register as a Significant Data Fiduciary if our processing meets applicable thresholds.
• You may raise a complaint with the Data Protection Board of India if you believe your rights have been violated.

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: Name, email address, profile photo (optional)
• Financial Data: Expense amounts, categories, merchants, notes, payment methods, and dates that you enter manually or via voice
• Preferences: Home currency, budget settings, notification preferences

3.2 Information Collected Automatically

• Device Information: Device model, operating system version, app version, unique device identifiers
• Usage Data: Features used, screens viewed, frequency of app opens, crash logs and error reports
• Voice Input: When you use the voice entry feature, your speech is temporarily processed to extract expense data. We do not store raw audio recordings.

3.3 Information from Third-Party Sign-In

If you sign in using Google, Apple, Facebook, or Microsoft, we receive:

• Your name and email address as provided by those platforms
• A unique identifier from the provider to link your account
• We do not receive your passwords from these providers

3.4 Payment & Subscription Information

• Subscription purchases are processed entirely by Apple App Store (iOS) or Google Play Store (Android) via RevenueCat. We do not store your credit card or payment details.
• We receive confirmation of your subscription status (active, expired, trial) but not your payment method.

4. How We Use Your Information

We use your data for the following purposes, with your consent or as necessary to provide our service:

5. Microphone and Camera Access

• Microphone: Used solely to capture voice input for expense entry when you tap the voice button. Audio is processed in real-time on our secure, in-house servers and is not stored.
• Camera: Used solely for receipt scanning (OCR) when you choose to photograph a receipt. Images are processed on our secure, in-house servers to extract expense data and are not permanently stored.
• Both permissions are requested only when you attempt to use those features. You may revoke these permissions at any time in your device settings.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Service Providers: Firebase (push notifications, analytics), RevenueCat (subscription management). These providers are contractually bound to process data only on our behalf and in compliance with applicable law. Our AI features (Voice & OCR) are powered by our own private, in-house infrastructure.
• Authentication Providers: Google, Apple, Facebook, Microsoft — only to the extent necessary to verify your identity during sign-in.
• Legal Requirements: If required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you in advance.

7. Data Retention

• Your account data and expense history are retained as long as your account is active.
• When you delete your account, your personal data and expenses are permanently deleted within 30 days, except where retention is required by applicable law.
• You may request deletion of your account at any time by emailing support@bwjts.net.

8. Data Security

We implement industry-standard security measures including:

• Encrypted transmission of data using TLS/HTTPS
• Encrypted storage of authentication tokens on your device (using the platform's secure storage)
• Access controls limiting data access to authorised personnel only
• Regular security reviews

No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at support@bwjts.net.

9. Children's Privacy

VoiceSpend is not directed at children under the age of 13 (or 18 where required by local law). We do not knowingly collect personal data from children. If we discover we have inadvertently collected such data, we will delete it promptly. If you are a parent or guardian and believe your child has provided us personal data, please contact us at support@bwjts.net.

10. Your Rights Under DPDP Act and GDPR (Where Applicable)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Erase your personal data ("right to be forgotten")
• Withdraw consent at any time, without affecting prior processing
• Nominate a person to exercise your data rights in the event of your death or incapacity (as per DPDP Act)
• Data Portability — receive a copy of your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Raise a grievance with us before escalating to the Data Protection Board of India

To exercise any of these rights, email support@bwjts.net with the subject line "Data Rights Request". We will respond within 30 days.

11. Cross-Border Data Transfers

Your data may be processed on servers located outside India (including the United States) by our service providers (e.g., Firebase, RevenueCat). Such transfers are made under appropriate safeguards in compliance with the DPDP Act.

12. Third-Party Links and Services

The App may integrate with third-party platforms for authentication. We are not responsible for the privacy practices of those platforms. Please review their privacy policies separately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. Continued use of the App after the effective date of changes constitutes acceptance.

14. Grievance Officer

In accordance with the DPDP Act, 2023 and Information Technology Act, 2000, the details of the Grievance Officer are:

Name: BWJ Tech Solutions Private Limited — Grievance Officer
Email: support@bwjts.net
Response Time: Within 30 days of receipt of complaint

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy:

BWJ Tech Solutions Private Limited
Email: support@bwjts.net