Privacy Policy

1. Our commitment and local-first approach

Serelify is designed around a principle of data minimization and a local-first architecture: most of your financial information is stored only on your device and is not sent to our servers.

Your private transactions, wallets, budgets, goals, categories and tags stay on your phone (a local database encrypted by the operating system). Only the data strictly necessary is synchronized with our servers: the wallets you choose to share and their transactions, your account profile, and the registration for notifications. Everything else never leaves your device unless you voluntarily export it.

2. Data we process

• Account and authentication data: email address and password (encrypted/hashed by our provider, never in plain text). If you sign in with Google, we receive your name, email and profile picture.
• Profile data (optional): display name, avatar photo, and data you choose to add such as country, city, occupation, phone number or date of birth.
• Financial data you enter: transactions, amounts, wallets, budgets, goals, categories, tags, notes and receipt items. This stays on your device, unless it belongs to a shared wallet (that wallet and its transactions are synchronized with our servers).
• Notification data: if you enable them, we register an identifier (token) associated with your device to send them.
• Location data (optional): if you grant permission, the app may use your location for features such as tagging the place of a transaction on a map. It is stored together with your local data; we do not use it for advertising.
• Subscription and purchase data: we manage the status of your subscription through our provider and the stores. We do not receive or store your card or payment method data; that is processed by Apple or Google.
• Technical and website data: basic technical data (device type, version, language) and, on serelify.com, analytics tools (Google Tag Manager) that may use cookies (see section 11).

3. Purposes of processing

We process your data to:

• Create and manage your account and authenticate you.
• Provide and maintain the features of the Service and enable collaboration on shared wallets.
• Send you notifications and reminders you have enabled, and transactional emails such as collaboration invitations.
• Manage your Premium subscription and trial period.
• Handle your requests, comply with legal obligations, prevent fraud and analyze website usage in aggregate form.

4. Legal basis

Processing is based, as applicable, on your consent (given in a prior, free, informed, unequivocal and revocable manner, for example for notifications, location or analytics cookies), on performance of the contract you accept when using the Service, on compliance with legal obligations, and on our legitimate interest in maintaining security and preventing fraud.

You may withdraw your consent at any time; this does not affect the lawfulness of prior processing.

5. Third parties and data processors

We share the strictly necessary data with providers that act as processors and process the data only under our instructions:

• Supabase: hosting of the shared-wallets database, authentication, avatar storage and device registration for notifications.
• Google (Google Sign-In): sign-in, when you choose that option.
• RevenueCat and the App Store (Apple) and Google Play (Google) stores: management and billing of the Premium subscription.
• Expo (push notification service): delivery of notifications to your device.
• Resend: delivery of transactional emails (for example, shared-wallet invitations).
• Exchange-rate providers (dolarapi and fawazahmed0): retrieval of reference rates. No personal data is sent to them.
• Google (Google Tag Manager): analytics for the serelify.com website.

We do not sell your personal data or transfer it to third parties for advertising purposes.

6. International transfers

Some of our providers operate servers outside your country of residence. By using the Service, you understand that your data may be processed in jurisdictions other than yours. We seek to ensure that such providers offer adequate guarantees of security and confidentiality.

7. Data retention

Data that stays on your device is kept until you delete it or uninstall the application. Data hosted on our servers (profile, shared wallets, notification registration) is kept while your account is active and is deleted when you delete your account, except for information we must retain by legal obligation or to resolve disputes.

8. Security

We apply reasonable technical and organizational measures: encryption of communications (HTTPS/TLS), row-level security (Row Level Security) in the shared-wallets database, secure storage of credentials on the device, password hashing and biometric lock. No system is completely infallible, so we cannot guarantee absolute security.

9. Your rights

In accordance with the right to habeas data recognized in articles 28 and 60 of the Constitution of the Bolivarian Republic of Venezuela, and with the data protection laws applicable in your country (including the ARCO rights and equivalents under LGPD, Law 1581, Law 25.326 and other regional rules), you have the right to:

• Access the personal data we process about you.
• Rectify or update inaccurate or incomplete data.
• Delete your data (right to be forgotten) where applicable.
• Object to certain processing or withdraw your consent.
• Request the portability of your data where applicable.

You may exercise these rights by writing to serelifyapp@gmail.com; we will respond within the timeframes set by applicable law. Many rights you can exercise directly from the app (edit your profile, export your data or delete your account).

10. Account and data deletion

You may delete your account and associated data directly from the application settings or by requesting it at serelifyapp@gmail.com. Deletion erases your personal data from our servers, except for data we must retain by legal obligation. Deleting the account does not by itself cancel your subscription in the App Store or Google Play, which you must cancel separately in the store.

11. Minors

The Service is intended for people over 18 years of age. We do not knowingly collect data from minors. If we become aware that we have processed a minor's data, we will delete it.

12. Cookies and website analytics

The serelify.com website uses Google Tag Manager and associated technologies that may use cookies or identifiers to measure site usage in aggregate form and improve the experience. You can manage or block cookies from your browser settings. The mobile application does not use advertising cookies. This section serves as the cookie policy for the Service.

13. Changes to this Policy

We may update this Policy to reflect changes in the Service or the law. We will publish the current version with its update date and, when changes are material, we will endeavor to notify you by reasonable means.

14. Contact and complaints

To exercise your rights or make inquiries about this Policy, contact us at serelifyapp@gmail.com or visit serelify.com.

If you believe the processing of your data violates your rights, you may pursue the habeas data remedy before the competent courts in Venezuela or the data protection authority corresponding to your country of residence.