Privacy Policy

At Simple Business Finance, we value your privacy. This Privacy Policy explains how personal data collected through our mobile application is processed, protected, and users' rights.

1. Data Collected

1.1 Identity and Account Information

• Email address
• Authentication information (passwords are not visible to or stored by the application developer; they are processed through secure authentication infrastructure)

1.2 User-Entered Content

The following information is entered entirely at user's discretion and manually:

• Financial records (bank accounts, cash, income-expense records)
• Client account information (customer and supplier information)
• Staff information (name, position, salary, leave details)
• Product and inventory information (product name, code, price, stock quantity)
• Descriptions, notes, and similar content

1.3 Optional Information

Tax number, phone number, and similar fields are not mandatory and are entered optionally by users.

1.4 Device Access

• Camera and Photo Library: Access is requested only when the user wants to attach photos (receipts, invoices, etc.) to transactions. Photos are uploaded to the server and associated with the relevant transaction.
• File System: Access is requested during Excel file import and export operations.
• Notifications: Push notification permission may be requested for scheduled transaction reminders.

2. Data Usage Purposes

Collected data is processed for the following purposes:

• Providing application functions
• Account and session management
• Creating financial records and reports
• Sending scheduled transaction reminders
• Resolving technical issues
• Fulfilling legal obligations

Data is not used for advertising, marketing, or user tracking purposes.

3. Multi-User Access and Data Sharing

• Business owners can invite other users to their business by generating invite codes.
• Invited users can access business data within the roles and permissions set by the business owner.
• User roles (owner, manager, operator, purchaser) provide different access levels.
• Business owners can revoke invited users' access at any time.

4. Data Relationship with User (Apple App Store Perspective)

• Identity and account information is associated with user account.
• Financial records, client, staff, and product information entered by users belong to content created within user's account, not to users themselves.
• This data is accessible only by the relevant user and authorized team members.

5. Data Security

The following measures are taken for personal data security:

• SSL/TLS encrypted data transmission
• Secure server infrastructure
• Row Level Security (RLS) access controls
• Authorization and access control mechanisms
• Technical measures to prevent unauthorized access

6. Third-Party Service Providers

The application may utilize the following service providers:

• Authentication services (Apple ID, Google Account)
• Database and authentication infrastructure (Supabase)
• File storage services (Supabase Storage)
• Cloud hosting services

These service providers can access data only for the purpose of fulfilling application functions and to a limited extent.

7. Data Export

Users can export transaction data and reports in Excel (.xlsx) format from within the application. Exported files are downloaded to the user's device and sharing preferences are entirely up to the user. The application does not retain copies of exported files on the server.

8. Data Retention Period and Account Deletion

• Data is retained as long as user account is active.
• Users can delete their account from within the application.
• A 7-day waiting period applies after account deletion request.
• After the waiting period, account and all associated data (transactions, clients, staff, products, photos included) are automatically and permanently deleted.
• For users signing in with Apple ID, Apple authentication tokens are also revoked during account deletion.

9. Children's Privacy

The application is not intended for children under 13. Personal data from children is not knowingly collected.

10. User Rights

Users have the following rights under applicable regulations:

• Right to access their data
• Right to request correction
• Right to request deletion
• Right to object to processing
• Right to data portability (via Excel export)

11. Policy Changes

This privacy policy may be updated from time to time. Users will be notified of significant changes through the application.

12. Contact

For questions about privacy policy: ozadaliomerfaruk@gmail.com