Privacy Policy
DueNa helps you organize your credit card Statements of Account (SOAs). This policy explains what information we collect, where we store it, and how we use it.
The short version
Here are the most important things to know:
- You need a DueNa account to use the app.
- We store your account information and approved financial records in the cloud so you can access them across devices.
- DueNa does not connect to your bank account or receive your bank login details.
- We do not sell your personal information or use it for advertising.
- You control optional features such as biometrics, notifications, and CSV exports.
Information we collect
The information we collect depends on how you use DueNa:
- Account information: We store your email address, account ID, and sign-in method. If you use Google or Apple, we receive the email address and unique identifier that the provider shares with us.
- Card and statement information: We store the card nicknames, banks, statement dates, amounts due, and transactions you approve or enter.
- Splits and settlements: We store the names you add, split amounts, and payment status for shared expenses. If you choose to add someone’s phone number or email address, make sure you have their permission.
- PDF statements: DueNa processes your PDF on your device to find its transactions. We save the information you approve, but we do not upload the original PDF.
- Saved PDF passwords: If you choose to save a PDF password, DueNa keeps it in your device’s secure storage, such as the iOS Keychain. We do not store it in the cloud.
- App preferences: DueNa stores your theme, reminder settings, and optional app-lock setting on your device.
- Sign-in sessions: Our authentication provider manages the session tokens that keep you signed in.
- Beta applications: If you apply to test DueNa, we collect your first name, email address, iPhone model, iOS version, banks used, active card count, current tracking method, testing availability, feedback, and consent choices. Do not send card numbers, balances, passwords, statement files, or bank credentials through the form.
Where we store your information
We use Supabase to manage sign-in and store your DueNa data in the cloud. This includes your account, cards, statements, transactions, and splits. Read the Supabase Privacy Policy to learn how Supabase handles data.
Saved PDF passwords, biometric settings, and other sensitive preferences stay on your device. DueNa does not send them to the cloud.
When you export a comma-separated values (CSV) file or use your device’s share menu, you choose which outside service receives the data. That service has its own privacy policy.
Tally processes beta applications for us. We keep an application for up to 90 days, then delete it unless you separately agree to receive launch updates.
Information we do not collect
DueNa does not:
- Receive your bank login credentials.
- Upload your original PDF statements.
- Track your location.
- Run advertising or sell information to advertisers.
- Ask for financial records or bank credentials in the beta application.
Services that help us run DueNa
We use these outside services to operate the app:
- Supabase: Supabase provides authentication and cloud storage. It processes your email address, account credentials, and financial records for us. Read the Supabase Privacy Policy.
- Google Sign-In: If you sign in with Google, Google confirms your identity and shares your email address with us. Read the Google Privacy Policy.
- Sign in with Apple: If you use Apple to sign in on iOS, Apple confirms your identity. Apple may share your email address or a private relay address with us. Read the Apple Privacy Policy.
- Apple App Store: Apple distributes DueNa. Apple’s terms also apply when you download the app.
- Tally: Tally hosts the optional beta application and processes the information you submit. Read the Tally Privacy Policy.
Permissions you can choose to grant
DueNa asks for a device permission only when a feature needs it:
- Biometrics or device lock: When you turn on App Lock, your operating system checks your identity. DueNa never receives your fingerprint or facial-recognition data.
- Notifications: If you turn on payment reminders, DueNa can notify you about upcoming due dates.
- Files and documents: This permission lets you choose a PDF statement to import.
How we protect your information
We use the following safeguards:
- HTTPS and Transport Layer Security (TLS) encrypt data while it travels between your device and our services.
- Google and Apple sign-in use the Proof Key for Code Exchange (PKCE) authorization flow.
- Supabase Row Level Security (RLS) limits each account to its own data.
- DueNa stores saved PDF passwords in your device’s secure storage.
- The authentication system refreshes your session tokens automatically.
No storage or transmission system is completely secure. Keep your device and account credentials safe, and contact us if you think someone has accessed your account.
Your choices and privacy rights
You can manage your information from the app:
- Delete cards, statements, or people.
- Remove saved PDF passwords in Settings.
- Turn off notifications or App Lock.
- Export your data as a CSV file.
- Sign out from Settings.
- Delete your account in Settings. This permanently deletes your account and its cloud data.
Children’s privacy
DueNa is not intended for children under 13. We do not knowingly collect personal information from children. Contact us if you believe a child has created an account, and we will delete it.
Your privacy rights in the Philippines
The Data Privacy Act of 2012 (Republic Act No. 10173) gives people in the Philippines rights over their personal information. These include the rights to access, correct, and delete personal data. You can manage your data in DueNa or email supportduena@gmail.com. We will respond within 15 business days.
Changes to this policy
We may update this policy when DueNa changes. We will update the date at the top of this page. If a change materially affects your privacy, we will notify you in the app before it takes effect. By continuing to use DueNa after that date, you accept the updated policy.
Contact us
If you have a privacy question, email supportduena@gmail.com or visit DueNa Support.