🔐 Privacy Policy

1. Introduction

Wheel Traveler ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application TransactionLog (the "App").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App.

2. Information We Collect

2.1 Information You Voluntarily Provide

We collect information that you voluntarily provide to us:

Authentication Information

• Email Address - Required for optional backend account creation and authentication
• Password - Used for account authentication (never stored in plain text, only SHA-256 hashed)

Financial Data

• Transaction Information - Date, amount, merchant name, category, payment method, notes
• Bill Reminder Information - Bill name, due date, category, reminder settings
• Budget Information - Budget limits and spending goals

Device Information

• Device Identifiers - IDFA (Identifier for Advertisers) for analytics purposes only
• Device Type - iPhone model, iOS version (for compatibility)

2.2 Information Collected Automatically

We collect certain information automatically when you use the App:

• Usage Data - App features used, transaction categories created, reports generated
• Device Data - Device type, OS version, app version
• Crash Reports - Only if you enable crash reporting (optional)
• Performance Data - App performance metrics for optimization

2.3 Information NOT Collected

We explicitly do NOT collect:

• ✗Real-time location data
• ✗Biometric data (Face ID/Touch ID data never leaves your device)
• ✗Browser history
• ✗Call logs or SMS
• ✗Contact information
• ✗Health or fitness data
• ✗Analytics beyond basic usage
• ✗Behavioral tracking data

3. How We Use Your Information

3.1 Essential Functions

• ✓Authentication - Verify your identity when you log in
• ✓Spending Tracking - Store and retrieve your transaction data
• ✓Report Generation - Create monthly reports and analytics
• ✓Bill Reminders - Send notifications for upcoming payments
• ✓iCloud Sync - Backup and sync data across your devices
• ✓App Functionality - Enable all core features of the App

3.2 Service Improvement

• Bug Fixes - Fix issues and improve app stability
• Performance - Optimize app speed and responsiveness
• Feature Development - Create new features based on usage patterns
• User Support - Respond to your support requests

3.3 Legal Requirements

• Compliance - Meet legal obligations and regulations
• Fraud Prevention - Detect and prevent security issues
• Law Enforcement - Respond to legal requests (only when legally required)

3.4 What We Do NOT Do

• ✗We do NOT sell your data to third parties
• ✗We do NOT share your financial data with anyone
• ✗We do NOT use your data for marketing or advertising
• ✗We do NOT track your behavior across other apps or websites
• ✗We do NOT create detailed usage profiles

4. Data Security

We implement multiple layers of security to protect your information:

4.1 On-Device Encryption

• AES-256-GCM Encryption - Military-grade encryption for all transaction data
• Local Storage - Data stored securely on your device's encrypted storage
• PIN Protection - App-level PIN or biometric authentication required for access

4.2 Authentication Security

• SHA-256 Hashing - Passwords hashed using SHA-256 (never stored in plain text)
• No Plain Text - Sensitive data never stored or transmitted unencrypted
• Secure Transmission - All data sent over HTTPS/TLS only

4.3 iCloud Backup Security

• Apple Encryption - iCloud backup uses Apple's end-to-end encryption
• User Control - You can enable/disable iCloud sync anytime
• CloudKit Protocol - Uses Apple's secure CloudKit framework

4.4 Access Control

• Device-Only Access - Your financial data only accessible on your device
• No Server Access - We don't have servers that store your transaction data
• Biometric Protection - Face ID or Touch ID protects access

5. Data Sharing & Third Parties

5.1 What We Do NOT Share

Your personal and financial data is NEVER shared with:

• ✗Third-party advertisers
• ✗Data brokers
• ✗Marketing companies
• ✗Social media platforms
• ✗Financial institutions
• ✗Analytics companies (beyond basic app analytics)

5.2 Limited Sharing

Data may be shared only in these specific cases:

Service Providers

• Apple (iCloud) - Only if you enable optional iCloud sync
• Apple (CloudKit) - For multi-device synchronization
• Error Reporting - Only crash reports (if you opt-in)

Legal Requirements

• Law Enforcement - Only when legally required by subpoena or court order
• Compliance - Meeting legal and regulatory obligations
• Safety - Preventing fraud or protecting user safety

5.3 Your Control

• ✓You control whether iCloud sync is enabled
• ✓You can opt-out of crash reporting anytime
• ✓You can delete your data by uninstalling the app
• ✓You can request data deletion by emailing us

6. Data Retention

6.1 Local Data

• Stored On Device - Transaction data stays on your device
• Retained Until - Until you delete the app or manual deletion
• Backup Period - If uninstalled, CloudKit keeps backup for 30 days

6.2 Deleted Data

• Permanent Deletion - Deleted transactions cannot be recovered
• No Backups - We don't maintain backups of your financial data
• Immediate Removal - Deletion is final and immediate

6.3 iCloud Data

• User Control - You control iCloud retention in Settings
• Sync Disabled - If you disable sync, new data doesn't sync
• Manual Deletion - You can delete iCloud backup anytime

7. Your Privacy Rights

7.1 Your Rights

You have the right to:

• ✓Access - Request what data we have about you
• ✓Correction - Correct inaccurate data
• ✓Deletion - Delete your data anytime (by uninstalling)
• ✓Portability - Export your data in common formats (CSV export feature)
• ✓Withdraw Consent - Disable iCloud sync or stop using the app
• ✓Opt-Out - Opt out of optional features like crash reporting

7.2 How to Exercise Your Rights

To request access, correction, or deletion of your data:

8. Children's Privacy

8.1 Age Restriction

TransactionLog is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

8.2 Parental Controls

• Parents should review the App's privacy settings
• Parents should supervise children's use of the App
• If we learn we've collected data from a child under 13, we will delete it

9. Compliance & Regulations

9.1 GDPR Compliance

If you are in the European Union, you have additional rights under GDPR:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision making

We comply with all GDPR requirements.

9.2 CCPA Compliance

If you are in California, you have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information collected
• Right to opt-out of the sale or sharing of personal information
• Right to non-discrimination for exercising your rights

We do NOT sell your data, so most CCPA provisions don't apply.

9.3 Other Regulations

We comply with applicable privacy laws in your jurisdiction:

• ✓LGPD (Brazil)
• ✓PIPL (China)
• ✓PIPEDA (Canada)
• ✓POPIA (South Africa)

10. California Privacy Rights (CCPA)

10.1 Personal Information Collected

In the past 12 months, we collected:

• Email address
• Transaction data (amounts, merchants, categories)
• Device identifiers
• Usage data

10.2 Categories of Information Sold or Shared

NONE. We do not sell or share any personal information.

10.3 Your CCPA Rights

• Right to know what's collected
• Right to delete data
• Right to opt-out (not applicable - we don't sell data)
• Right to non-discrimination

10.4 How to Submit Requests

11. Data Breach Notification

11.1 In Case of a Breach

If we discover a data breach:

• ✓We will notify you via email within 72 hours
• ✓We will notify regulatory authorities as required
• ✓We will provide details of what information was affected
• ✓We will offer remediation steps

11.2 Prevention

• ✓We implement security best practices
• ✓We conduct security audits
• ✓We use encryption for all sensitive data
• ✓We monitor for suspicious activity

12. Analytics & Tracking

12.1 What We Track

• App feature usage (which features are used most)
• Crash reports (only if enabled)
• Device information (for compatibility)

12.2 What We Do NOT Track

• ✗Individual transaction amounts
• ✗Merchant names you use
• ✗Category patterns
• ✗Spending habits
• ✗Behavioral profiling

12.3 Opt-Out

You can disable analytics and crash reporting anytime in Settings → App Privacy.

13. Changes to This Privacy Policy

13.1 Updates

We may update this Privacy Policy:

• When we change our practices
• When required by law
• When we add new features
• When we receive user feedback

13.2 Notification

• ✓We will notify you of major changes via app notification
• ✓The "Last Updated" date will change
• ✓You must agree to changes to continue using the App

13.3 Your Rights

• If you don't agree to changes, you can delete the app
• Continued use means you accept the new policy

14. International Data Transfers

14.1 Data Location

• Primary Storage - Your device (local)
• iCloud Backup - Apple's servers (encrypted)
• Support Requests - Our support email (support@wheeltraveler.com)

14.2 Cross-Border Transfer

• If you use iCloud sync, data may be stored on Apple's servers globally
• Apple complies with international data protection laws
• We comply with Standard Contractual Clauses where applicable

15. Contact Us

15.1 Privacy Questions

If you have questions about this Privacy Policy:

15.2 Data Requests

To request, access, correct, or delete your data:

15.3 Regulatory Authorities

If you're unsatisfied with our response, you can contact your local data protection authority:

• EU: Your national Data Protection Authority
• US: State Attorney General
• Other: Your country's privacy regulator

16. Summary: Your Privacy Guarantees

Here's what TransactionLog guarantees about your privacy: