Introduction
Welcome to YoCatetin. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data when you use our services, including our mobile app and web dashboard.
1. Information We Collect
1.1 Account Information
- Email address for account creation and authentication
- Phone number (WhatsApp/Telegram) or Discord user ID for messaging integration
- Name and profile information
- Payment information (processed securely through Paddle)
1.2 Financial Data
- Expense and income transactions you record via messaging
- Categories and tags assigned to transactions
- Budget information and financial goals
1.3 Automatically Collected Information
- Device information (OS, device type, app version)
- Usage analytics (features used, frequency)
- Error logs and performance data
- IP address and general location
1.4 Information We Do NOT Collect
- Detailed message content beyond transaction data
- Files or images (unless explicitly uploaded)
- Your browsing history outside YoCatetin
- Sensitive credentials (passwords, full credit card numbers)
2. How We Use Your Information
We use your personal data to:
- Provide, operate, and improve the Service
- Process transactions and send related confirmations
- Send important account notifications and updates
- Provide customer support and respond to inquiries
- Analyze usage patterns to improve user experience
- Comply with legal and regulatory obligations
- Detect and prevent fraudulent activity
3. Data Sharing
We do not sell your personal data.
We may share your information with:
- Paddle: Payment processor for secure transaction handling
- Supabase: Database provider for secure data storage
- Vercel: CDN and hosting provider for service delivery
- Service Providers: Third parties who assist in operating our service under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or government request
4. Data Storage and Security
4.1 Security Measures
- End-to-end encryption for sensitive data
- HTTPS/TLS for all data in transit
- Regular security audits and penetration testing
- Database encryption at rest
- Role-based access controls for employees
4.2 Data Storage Location
Your data is stored on Supabase servers. Please refer to Supabase's privacy policy for information about their data center locations and security practices.
4.3 Payment Processing
Payment information is handled entirely by Paddle and we never have access to your full credit card information. Paddle is PCI DSS compliant.
5. Your Rights
You have the right to:
Request a copy of your personal data we hold
Request correction of inaccurate personal data
Request deletion of your personal data ("right to be forgotten")
Receive your data in a machine-readable format
Opt out of non-essential data collection (may limit functionality)
We do not sell personal information (CCPA/GDPR compliance)
6. Data Retention
- Account Data: Retained while subscription is active plus 30 days after cancellation
- Financial Transactions: Retained for the duration of your account and 1 year after deletion
- Audit Logs: Retained for 90 days for security purposes
- Deleted Accounts: All data permanently deleted within 30 days of account deletion
7. Cookies and Tracking
Our app does not use cookies. The web dashboard uses minimal cookies only for authentication. We do not use third-party tracking or analytics that identify you personally.
8. International Data Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers in compliance with GDPR and other data protection laws.
9. Regional Rights
9.1 European Union (GDPR)
- Legal basis for processing: Contractual necessity and legitimate interest
- Right to lodge complaint with supervisory authority
- Right to withdraw consent at any time
9.2 California (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information
- Right to non-discrimination
9.3 Other Jurisdictions
We comply with applicable data protection laws in your region. Contact us for specific information.
10. Breach Notification
In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.
11. Children's Privacy
YoCatetin is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If we discover we have collected such information, we will promptly delete it.
12. Third-Party Services
Privacy Policy: https://supabase.com/privacy
Privacy Policy: https://www.paddle.com/legal/privacy
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through email and notice in the app. Your continued use of the Service constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights:
- Email: privacy@yocatetin.com
- Open Ticket: https://yocatetin.com/dashboard/tickets
- Allow up to 30 days for processing data requests
By using YoCatetin, you consent to this Privacy Policy and acknowledge our data practices as described.