Privacy Policy

Last updated: 08/10/2024

This Privacy Policy describes how we collect, use, and protect the personal data of users of the expense tracking app "HeyBill Expense Tracker", in accordance with European, Swiss, American, and international regulations, including the General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (LPD).

1. Personal Data Collected

We collect the following personal data when users use the app:

• Identification data: name, email address.
• Usage data: expense history, OCR scans.
• Technical data: IP address, app usage information.

2. Purpose of Data Processing

We use the collected personal data for the following purposes:

• To contact users regarding app-related issues or to provide support.
• To improve the user experience and implement new features.
• To ensure the security of accounts and personal data.
• To comply with legal obligations and respond to requests from authorities.

3. Data Sharing

We do not share users' personal data with third parties, except for synchronization and storage on cloud platforms, such as Google Firestore.

4. Data Retention

We retain personal data for as long as the user maintains an active account or for up to 10 years of inactivity. After this period, the data will be securely deleted.

5. User Rights

Users have the right to access, correct, or delete their personal data at any time. To exercise these rights, users can contact us at: info@arcaweb.ch.

6. Data Security

Data is synchronized on Firestore, and security rules are in place to ensure that each user can only access their own data. We have implemented technical and organizational measures to protect personal data from unauthorized or unlawful access.

7. Minors

The app is not intended to be used by people under 13 years old, and we do not knowingly collect personal data from minors. If we become aware of such data, we will take the necessary steps to delete it.

8. International Data Transfers

Users' data may be transferred and stored on servers located in Switzerland, the European Union, or the United States. In such cases, we ensure that all transfers comply with applicable regulations by implementing appropriate safeguards, such as standard contractual clauses.

9. Data Breach Notification

In the event of a data breach that could compromise users' privacy, we will promptly notify the competent Swiss authority, the IFPDT, and affected users.

10. Responsibility

The data controller responsible for the processing of personal data is Arcaweb di Lorenzo Conti, 6982 Agno, a company registered in Switzerland under the IDI/VAT CHE-487.749.680 and Swiss Commerce Registry CH-501.1.021.267-3

11. Applicable Laws and Jurisdiction

This policy is governed by Swiss law. In case of disputes, the competent court will be in Lugano, Switzerland.

12. Privacy Policy Updates

We reserve the right to update this privacy policy. Any changes will be communicated through the app and will become effective immediately.