Privacy Policy

1. Introduction

Welcome to Fidexa. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Fidexa is designed to help users track expenses, mileage, and financial information for accounting and tax deduction purposes. We comply with applicable privacy regulations including the GDPR (Europe) and CCPA (United States).

2. Information We Collect

We collect only the information necessary to provide core features of the app.

Account Information

We collect your email address and authentication tokens through secure authentication providers such as Supabase in order to create and manage your account.

Financial Information

We store financial data entered by you or securely imported from your linked financial institutions, including:

• transaction amounts
• bank account status
• merchant names
• dates
• categories

We use Plaid Inc. ("Plaid") to connect your Fidexa account with your financial institutions. By using our service, you grant us and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid in accordance with the Plaid End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy).

Location Data (Mileage Tracking)

Fidexa may optionally collect location data when you enable the Mileage Tracker feature.

Location data is used exclusively to:

• calculate distance traveled
• generate mileage logs
• estimate potential tax deductions

Location tracking may occur in the background only when a trip is actively started by the user or when the user enables automatic trip detection.

We do NOT use location data for:

• advertising
• selling user data
• tracking unrelated activities

Users may disable location access at any time in device settings.

Voice & Media Data

If you choose to use voice input or upload receipt images:

• Voice recordings may be temporarily processed to convert speech into structured transaction data.
• Images of receipts may be analyzed to extract text such as merchant name or amount.

Voice recordings are processed only for the purpose of providing requested features and are not used for profiling or advertising.

3. AI Processing Disclosure

Fidexa uses artificial intelligence services to help interpret transaction descriptions, receipts, and voice inputs.

When AI features are used:

• Text, voice transcripts, or receipt images may be securely transmitted to AI service providers for processing.
• Data is used solely to generate structured transaction information requested by the user.
• Data is not used to train public AI models.
• Data is processed only as necessary to fulfill the user's request.

Users may choose not to use AI-powered features and still use the core accounting functionality.

4. Third-Party Service Providers

We use trusted third-party services to operate our application:

Supabase

Used for:

• secure cloud database storage
• authentication
• data synchronization

Privacy Policy: https://supabase.com/privacy

OpenAI

Used for:

• transaction text interpretation
• voice description parsing
• receipt text extraction assistance

We do not send sensitive financial credentials such as bank login information.

Privacy Policy: https://openai.com/privacy

Apple Inc.

Used for:

• speech recognition
• Face ID authentication
• device-level security features

Biometric authentication data such as Face ID is processed locally on your device and never leaves your device.

Privacy Policy: https://www.apple.com/legal/privacy/

5. Data Retention & Deletion

Your data is stored securely while your account remains active.

You may request deletion of your account at any time through the app settings or by contacting support.

Upon deletion request:

• your stored financial records
• associated account data

will be permanently removed from our systems within a reasonable timeframe.

6. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect your information, including encryption in transit and secure authentication methods.

No system can guarantee absolute security, but we continuously work to protect your data.

7. Children's Privacy

Fidexa is not intended for individuals under the age of 13.

We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take steps to delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by revising the "Last Updated" date.

Continued use of the app after changes indicates acceptance of the updated policy.