Alocare Privacy Policy

1. Introduction

Welcome to Alocare ("we", "our", or "us"). Alocare is a personal finance application that helps you record and understand your expenses, income, budgets, savings, loans, assets, and net worth. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://alocare.app, the web app at https://app.alocare.app, and the Alocare app for Android (together, the "Service"). By accessing or using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

• Personal Information: We collect the following personal information when you register or use the Service:
  • Name (required)
  • Email address (required)
  If you sign in with Google, we receive your name and email address from your Google account.
• Financial Records You Enter: The accounts, transactions, budgets, savings, loans, assets, notes, and descriptions you record in the Service. You decide what to record. Alocare does not connect to your bank accounts and cannot move money.
• Smart Sync Content (optional): If you turn on Smart Sync, we receive the bank, e-wallet, and payment notifications you forward to your Alocare address or send through a connected automation app. These can include transaction amounts, merchant or recipient names, dates, account or card details shown in the notification, and the sender's email address.
• Purchase Information: When you buy a license, we receive the order details from the payment provider: the product, amount, currency, transaction ID, and payment status. We do not receive or store your full card or bank account details.
• Usage Data and Analytics: We automatically collect certain information about how you interact with our Service, including:
  • Button clicks, page views, and navigation patterns
  • Features used and duration of sessions
  • Device and browser information (e.g., device type, operating system, browser version)
  • IP address and approximate location (city level)

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

4. How We Use Your Information

We use the information we collect for purposes such as:

• Providing and improving the Service: to personalize your experience, troubleshoot issues, and enhance functionality.
• Automatic transaction recording (Smart Sync): to read the notifications you send us, extract the transaction details, and record them in your workspace. To put each transaction in the right place, we also use the names and descriptions you gave your accounts and expense allocations.
• Purchases: to process your payment, grant the license you bought, and keep payment records.
• Communication: to send you account-related emails (e.g., welcome messages, password reset instructions).
• Analytics and Marketing: to understand usage patterns, improve our features, and measure the effectiveness of our advertising campaigns.

5. Data Retention

We retain your personal information and usage data for as long as your account is active or as needed to provide you the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

• Smart Sync notifications and their processing records are deleted automatically 90 days after they are processed. Drafts and items waiting for your action are kept until you resolve them.
• When you delete your account, it is permanently deleted with all of its data after a 28-day grace period (see Delete your account). Payment and invoice records are kept for accounting, with your personal details removed.

6. Data Sharing and Disclosure

We do not sell, rent, or lease your personal information to third parties. We may share information in the following situations:

• Service providers: We may engage third-party companies to perform technical, analytical, or marketing services on our behalf (e.g., hosting, analytics, ad networks, and email delivery). They have access only to the data needed to perform their functions and are obligated to protect your information.
• AI processing: Smart Sync uses a third-party AI service to read the notifications you send and extract transaction details. We send it only the notification content and the account and budget names and descriptions needed for that task. The provider processes this data on our behalf under commercial terms that do not allow it to use the data to train its models.
• Payments: purchases on the web are processed by Tripay (Indonesia) or Polar (other countries). Purchases in the Android app are processed by Google Play, and RevenueCat verifies them on our behalf. Each receives only what it needs to process the payment, under its own privacy policy.
• Sign-in with Google: if you choose it, Google authenticates you and shares your name and email address with us.
• Analytics: we use PostHog to understand how the Service is used.
• International processing: some of these providers process data outside Indonesia, including in the United States.
• Legal requirements: When required by law, regulation, or legal process, we may disclose your information to respond to subpoenas, court orders, or other legal requests.

7. Third-Party Services and Links

Our Service may include links to third-party websites or services (e.g., analytics platforms). This Privacy Policy does not apply to those services; we encourage you to review their privacy policies before providing any personal data.

8. Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no Internet transmission can be guaranteed to be completely secure.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access, update, or delete your personal information. You can delete your account and all of its data yourself; see Delete your account.
• Object to or restrict our processing of your information.
• Withdraw your consent (where we rely on consent to process your data).

To exercise any of these rights, please contact us at [email protected].

10. Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.