1) Who we are
Controller/Developer: Nazar Palamarchuk (independent software developer).
Application: Breadly
Contact: ua.nazar.palamarchuk.ua@gmail.com
2) What this policy covers
This policy covers the Breadly mobile apps and related cloud services used for optional sign-in, subscriptions, and synchronization.
3) Information we process
A. Local-Only Mode (no sign-in, no sync)
• On-device data: accounts, categories, transactions (amounts, currency, date, notes, attachments you add). Stored locally and not sent to our servers.
• Permissions you may grant:
– Photos/Media/Files: attach images to transactions (e.g., receipt photos saved in your gallery).
– Camera (planned): capture receipt photos inside the app when the receipt-scanner is offered.
– Microphone (planned): add transactions by voice (if/when voice input is released).
• We do not collect analytics or advertising identifiers.
B. Sign-in without Sync (account only)
• Account data: minimal information such as email and a user ID from our authentication provider. Your expense data remains only on your device until you purchase sync.
• Payments/Subscribers: if you view subscription screens, our billing provider may process basic device/purchase metadata to validate entitlements. No ad tracking.
C. With Sync Enabled (paid monthly feature)
• Synced data: your expense data (accounts, categories, transactions, and attachments/metadata) is transmitted to our cloud for backup and multi-device sync.
• Technical data: standard logs/diagnostics (timestamps, error logs, basic device/app version) to operate and secure the service.
D. Camera-based receipt capture (optional)
• User content: photos you capture of receipts to help Breadly extract line items.
• Processing: extraction may be performed by third-party AI image processing providers acting as our processors; images are used only to provide the requested extraction and are not used for advertising. Providers may use de-identified data to improve and train their models.
• Output: the structured data (e.g., items, amounts) may be saved as transactions; the original image is saved only if you choose to attach it.
4) Permissions & your consent
• Camera: used to capture photos of receipts so Breadly can help convert them into transaction items using third-party AI image processing providers. Granting camera access is optional and requested only when you use this feature. You can revoke camera access at any time in your device settings. We do not use camera access for advertising.
• Photos/Media: allows attaching existing images to transactions (e.g., gallery photos).
• Microphone (optional, if/when available): to add transactions via voice.
• Not requested: we do not request location, contacts, or calendar permissions.
By granting a permission, you consent to the related processing for that feature. You can withdraw consent by disabling the permission in your OS settings or by contacting us.
5) Why we process this information
• Provide the app's core features (local storage of your finances).
• Authenticate you when you choose to sign in.
• Deliver paid features (subscriptions, cloud sync; later, optional AI capture).
• Operate, troubleshoot, and secure our systems.
• Comply with legal obligations (e.g., tax/accounting for purchases).
6) Legal bases (EU/EEA users)
• Performance of a contract: providing the app and sync for subscribers.
• Consent: enabling optional permissions (camera/microphone) and using optional AI features.
• Legitimate interests: service security and troubleshooting.
• Legal obligation: retention of payment records we must keep.
7) Sharing & disclosure
We do not sell your data or share it for advertising. We share data only with service providers acting on our behalf under data-processing terms, such as:
• Authentication (e.g., Clerk)
• Subscriptions/billing (e.g., RevenueCat integrated with app stores)
• Cloud database/synchronization (e.g., PowerSync and server database)
• Optional AI image processing providers to extract structured data from recipe/receipt photos you submit
We require them to use data only as necessary to provide their services to us. When using AI image processing providers, images may be transmitted for processing solely to provide the requested extraction; providers may use de-identified data to improve and train their models. We do not permit use for advertising or profiling.
8) Data retention
• Local-only data stays on your device until you delete the app data or use the app's delete features.
• For synced accounts, we retain your cloud data while your account is active. If you delete your account or request deletion, we will delete or anonymize your personal data within a reasonable period unless we must keep some records to meet legal obligations (e.g., purchase records).
• Receipt photos: if you attach/save them in Breadly, they remain until you delete them. If an external AI image processing provider is used for extraction, we instruct the provider to retain images only as long as needed to provide the service and then delete them. Some system backups may persist for up to 30 days.
9) Your rights
Depending on your region (e.g., EU/EEA), you may have rights to access, correct, delete, export, or object to certain processing. To exercise rights, contact ua.nazar.palamarchuk.ua@gmail.com.
10) Children
Breadly is intended for a general audience and does not include adult or sensitive content. We do not knowingly collect personal data from children under the age required by applicable law (e.g., 13 in the US or 16 in the EEA). Children may use the app in local-only mode without creating an account. Account, sync, and paid features are intended for users of legal age or with parental consent. If you believe a child has provided personal data without consent, contact ua.nazar.palamarchuk.ua@gmail.com and we will remove it or obtain appropriate consent.
11) Security
We use reasonable technical and organizational measures to protect data. No system is 100% secure, but we work to prevent unauthorized access, use, or disclosure.
12) International transfers
Our primary processing and storage occur in the United States (US). If you are located outside the US, your information may be transferred to and processed in the US. Where required, we use appropriate safeguards (e.g., contractual clauses) to protect your information.
13) Data deletion & account closure
• Local-only users: delete app data via your device OS/app settings.
• Synced users: request deletion of your cloud data by emailing ua.nazar.palamarchuk.ua@gmail.com. In-app deletion will be added in a future update. We may retain limited records as legally required (e.g., purchase history).
• Revoking permissions: you can revoke camera/photos/microphone access in your device settings at any time; Breadly will stop using those features until you re-enable them.
14) Platform disclosures (Google Play and Apple App Store)
• Publicly accessible URL: this policy is hosted at a web URL accessible without special plugins (/privacy-policy).
• In-app access: an in-app link will be added in a future app update.
• App privacy disclosures: we accurately describe our data practices in Google Play and App Store Connect (including any third-party AI image processing providers we choose to use).
• Camera disclosure (Play Console): "Capture receipt images to extract items into transactions using AI."
15) Early access & limitation of liability
The application is in an early stage of development and may contain bugs or issues. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, Nazar Palamarchuk PROVIDES Breadly “AS IS” AND SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR DATA-LOSS DAMAGES ARISING FROM OR RELATED TO YOUR USE OF THE APP. Some jurisdictions do not allow the exclusion or limitation of liability; in those cases, these limitations apply to the maximum extent permitted by law.
16) Changes to this policy
We may update this policy to reflect changes in the app or legal requirements. We will change the "Last updated" date above and, where appropriate, provide additional notice.