Privacy Policy

1. Our commitment and local-first approach

Serelify is designed around a principle of data minimization and a local-first architecture: most of your financial information is stored only on your device and is not sent to our servers.

Your private transactions, wallets, budgets, goals, categories and tags stay on your phone (a local database encrypted by the operating system). Only the data strictly necessary is synchronized with our servers: the wallets and debts you choose to share, with their transactions and payments, your account profile, and the registration for notifications. Everything else never leaves your device unless you voluntarily export it.

2. Data we process

• Account and authentication data: email address and password (encrypted/hashed by our provider, never in plain text). If you sign in with Google, we receive your name, email and profile picture.
• Profile data (optional): display name, avatar photo, and data you choose to add such as country, city, occupation, phone number or date of birth.
• Financial data you enter: transactions, amounts, wallets, budgets, goals, categories, tags, notes and receipt items. This stays on your device, unless it belongs to a shared wallet (that wallet and its transactions are synchronized with our servers) or to a shared debt (that debt and its payments are synchronized).
• Notification data: if you enable them, we register an identifier (token) associated with your device to send them.
• Subscription and purchase data: we manage the status of your subscription through our provider (RevenueCat) and the stores. We store on our servers the date until which you have Premium, the store, the product and the date of the latest event of your subscription. We also record in RevenueCat which feature opened the Premium screen, to learn which features people are interested in. We do not receive or store your card or payment method data; that is processed by Apple or Google.
• Technical and website data: basic technical data (device type, version, language) and, on serelify.com, analytics tools (Google Tag Manager, Google Analytics and Microsoft Clarity) that use cookies only if you accept them, and Cloudflare Web Analytics, which uses no cookies (see section 12).
• Waitlist: if you join on serelify.com, we process your email address, country, form answers (what you use for your finances today and, if you say, what interests you most), language, the visit's campaign parameters (UTM) and the approximate country our provider infers from the connection. We do not store your IP address. To curb abuse we use Cloudflare Turnstile, which analyzes technical browser signals without tracking cookies. We only write to you if you confirm your email (double opt-in).

3. Purposes of processing

We process your data to:

• Create and manage your account and authenticate you.
• Provide and maintain the features of the Service and enable collaboration on shared wallets and debts.
• Send you notifications and reminders you have enabled, and transactional emails such as collaboration invitations.
• Manage your Premium subscription.
• Manage the waitlist: tell you about the launch, invite you to the beta if you want to try it, and analyze interest by country in aggregate form.
• Handle your requests, comply with legal obligations, prevent fraud and analyze website usage in aggregate form.

4. Legal basis

Processing is based, as applicable, on your consent (given in a prior, free, informed, unequivocal and revocable manner, for example for notifications or analytics cookies), on performance of the contract you accept when using the Service, on compliance with legal obligations, and on our legitimate interest in maintaining security and preventing fraud.

You may withdraw your consent at any time; this does not affect the lawfulness of prior processing.

5. Third parties and data processors

We share the strictly necessary data with providers that act as processors and process the data only under our instructions:

• Supabase: hosting of the database of shared wallets and debts, authentication, avatar storage and device registration for notifications.
• Google (Google Sign-In): sign-in, when you choose that option.
• RevenueCat and the App Store (Apple) and Google Play (Google) stores: management and billing of the Premium subscription.
• Expo (push notification service): delivery of notifications to your device.
• Resend: delivery of transactional emails (for example, invitations to shared wallets and debts).
• Cloudflare (Turnstile and D1): anti-bot verification of the waitlist form and storage of its sign-ups.
• Exchange-rate providers (dolarapi and fawazahmed0): retrieval of reference rates. No personal data is sent to them.
• Google (Google Tag Manager and Google Analytics), Microsoft (Clarity) and Cloudflare (Web Analytics): analytics for the serelify.com website.

We do not sell your personal data or transfer it to third parties for advertising purposes.

6. International transfers

Some of our providers operate servers outside your country of residence. By using the Service, you understand that your data may be processed in jurisdictions other than yours. We seek to ensure that such providers offer adequate guarantees of security and confidentiality.

7. Data retention

Data that stays on your device is kept until you delete it or uninstall the application. Data hosted on our servers (profile, shared wallets and debts, notification registration) is kept while your account is active and is deleted when you delete your account, except for information we must retain by legal obligation or to resolve disputes. Waitlist data is kept until you unsubscribe (every email includes a one-click link) and, at most, six months after the app's launch; if you don't confirm your email, we delete it after 7 days.

8. Security

We apply reasonable technical and organizational measures: encryption of communications (HTTPS/TLS), row-level security (Row Level Security) in the database of shared wallets and debts, secure storage of credentials on the device, password hashing and biometric lock. No system is completely infallible, so we cannot guarantee absolute security.

9. Your rights

In accordance with the right to habeas data recognized in articles 28 and 60 of the Constitution of the Bolivarian Republic of Venezuela, and with the data protection laws applicable in your country (including the ARCO rights and equivalents under LGPD, Law 1581, Law 25.326 and other regional rules), you have the right to:

• Access the personal data we process about you.
• Rectify or update inaccurate or incomplete data.
• Delete your data (right to be forgotten) where applicable.
• Object to certain processing or withdraw your consent.
• Request the portability of your data where applicable.

You may exercise these rights by writing to serelifyapp@gmail.com; we will respond within the timeframes set by applicable law. Many rights you can exercise directly from the app (edit your profile, export your data or delete your account).

10. Account and data deletion

You may delete your account and associated data directly from the application settings or by requesting it at serelifyapp@gmail.com. Deletion erases your personal data from our servers, except for data we must retain by legal obligation. Deleting the account does not by itself cancel your subscription in the App Store or Google Play, which you must cancel separately in the store.

11. Minors

The Service is intended for people over 18 years of age. We do not knowingly collect data from minors. If we become aware that we have processed a minor's data, we will delete it.

12. Cookies and website analytics

The serelify.com website uses Google Tag Manager to load Google Analytics 4 and Microsoft Clarity, which measure in aggregate how the site is used (pages viewed, where visits come from, country, device, clicks and scrolling) in order to improve it. These tools only use cookies (for example _ga and _ga_* from Google Analytics, and _clck and _clsk from Clarity) if you accept them in the cookie notice; if you reject them or make no choice, Google Analytics only receives cookieless signals without identifiers and Clarity is not loaded. Google Analytics data is kept for 14 months. We also use Cloudflare Web Analytics, which measures visits in aggregate without cookies. You can change your choice at any time from “Cookie preferences” in the footer, and you can also block cookies in your browser. The mobile application does not use advertising cookies. This section serves as the cookie policy for the Service.

13. Changes to this Policy

We may update this Policy to reflect changes in the Service or the law. We will publish the current version with its update date and, when changes are material, we will endeavor to notify you by reasonable means.

14. Contact and complaints

To exercise your rights or make inquiries about this Policy, contact us at serelifyapp@gmail.com or visit serelify.com.

If you believe the processing of your data violates your rights, you may pursue the habeas data remedy before the competent courts in Venezuela or the data protection authority corresponding to your country of residence.