Privacy Policy
Last updated: August 3, 2026
1. Information We Collect
When you create an account, we collect your email address and an optional display name. When you use the app, we store the session data you voluntarily enter: game type, amounts, currencies, dates, tags, and notes. If you use AI import or card-recognition features, we process the text or images you choose to submit. AI imports return drafts that are stored only if you choose to save them. AI Coach reports generated from your decision-trainer attempts are stored with your account so you can reopen them. We also collect basic technical data needed to run the service, such as device type, operating system, browser, app version, crash reports, usage events, and mobile push notification tokens if you enable notifications. We do not collect payment card numbers, government IDs, or sensitive financial account credentials.
2. How We Use Your Data
- To provide and maintain the Balnceo service (bankroll tracking, analytics, AI coaching).
- To authenticate your identity and protect your account.
- To send transactional emails (password resets, debt reminders) if you opt in.
- To generate aggregated, anonymized usage statistics to improve the product.
- To diagnose crashes, maintain app reliability, and deliver push notifications you request.
We never sell, rent, or share your personal data with third parties for advertising purposes.
3. Data Storage & Security
Application data is stored in Supabase (powered by PostgreSQL) with row-level security (RLS). Access is limited to account-specific records and room data that a user intentionally owns, joins, or shares. Our service providers protect data in transit and at rest using their platform security controls.
4. Third-Party Services
- Supabase — database, authentication, edge functions.
- Cloudflare — CDN, DDoS protection, web hosting.
- Google Gemini — when you explicitly use an AI import, recognition, or coaching feature, the text or image you submit is sent directly from our protected server function to the selected Google Gemini model to generate the requested result. Before the first AI data transfer for a Balnceo account on a device, the app identifies Google Gemini as the third-party AI provider, explains the data that may be sent, and asks for permission. If you cancel, no AI request is sent and the manual tools remain available. The saved permission is versioned so the app asks again if the provider or purpose changes. You can withdraw the saved permission at any time in Settings → Profile; the next AI request will ask again. This processing is subject to Google's Privacy Policy.
- Stripe / RevenueCat — subscription and purchase management.
- Apple / Google — in-app purchases, app distribution, sign-in, and push notifications on mobile.
5. Cookies
We use essential cookies only: authentication session tokens and language preferences. We do not use advertising or tracking cookies.
6. Your Rights
You have the right to:
- Access — view all data associated with your account.
- Rectify — edit your profile and entries at any time.
- Delete — permanently delete your account and all associated data from Settings → Profile.
- Export — request a copy of your data by contacting us.
7. Data Retention
We retain your account data while your account is active or as needed to provide the service and meet legal obligations. This includes saved AI Coach reports. The in-app account deletion flow removes the active account and associated application records. Limited security, billing, or backup records may remain for the period required by law or a service provider's documented retention schedule.
8. Children
Balnceo is not intended for users under 18 years of age. We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of Balnceo after changes constitutes acceptance.
10. Contact
For privacy-related questions, contact us at privacy@balnceo.com.