Privacy Policy for Light Money Tracker

Last updated: June 19, 2026

This Privacy Policy explains how Light Money Tracker (the "App") collects, uses, and protects your personal data. It is written to comply with the EU General Data Protection Regulation (GDPR). It applies to the App on both the Apple App Store (iOS) and Google Play (Android).

1. Data Controller

The data controller is Light Cup Pix Lab, Padova, Italy (the studio that develops the App "Light Money Tracker").

Contact: lightcuppixlab.dev@gmail.com

2. Data We Collect

We collect only the data needed to run the App.

• Account and identity. Depending on your platform, you sign in with Apple (on iOS) or with Google (on Android).
  • With Sign in with Apple, we receive your email address, which may be Apple's private "Hide My Email" relay address if you choose that option, and, only on your first sign-in and only if you choose to share it, your name.
  • With Sign in with Google, we receive your email address and your Google profile name.
  In both cases the email is stored in our authentication provider (Supabase) and is used to identify your account; the name is used only temporarily in the App during a session and is not saved to your profile. We do not collect or use your profile photo.
• Profile. An optional nickname that you choose yourself (separate from your sign-in name) and a currency symbol used only as a display label (no currency conversion is performed).
• Personal financial data. The expenses and income you record, including amount, date, type (income or expense), optional free-text note, payment method (card, cash, transfer, or other, for expenses), and category. We also store recurring entries (such as a fixed income or a tracked recurring expense, including its name and amount) and an optional monthly budget with an alert threshold.
• Subscription data. If you purchase the optional "Pro" subscription, we store your subscription status (whether it is active and its renewal or expiry date) and a non-financial subscription identifier provided by the store, so we can unlock Premium features for your account. We do not receive or store any payment card or payment instrument data — see "Payments" below.
• Feedback. Optional ratings (design, features, performance) and an optional free-text comment that you submit through "Rate the App".
• Reminder settings. If you enable transaction reminders, your reminder preferences are stored only on your device.

Please note: free-text fields (transaction notes, recurring entry names, personal category names, and feedback comments) are stored as you type them, so please avoid entering sensitive personal details you do not want stored.

3. Data We Do Not Collect

We do not collect your location, contacts, photos or camera content, biometric data, advertising identifiers, or device identifiers. We do not use analytics, advertising, crash-reporting, or push-notification (FCM) software. We do not collect or store payment card details or any payment instrument data.

4. Where Your Data Is Stored

• Server-side data (profile, financial records, categories, recurring entries, budgets, subscription status, and feedback) is stored in our backend, Supabase. Each user can access only their own data, enforced by database row-level security.
• Device-only data (reminder preferences and your language choice) stays on your device and is not sent to our servers. A feedback entry may be cached on your device only if it fails to upload; it is sent to Supabase and removed from the device as soon as the connection is restored.

5. Legal Bases (Art. 6 GDPR)

• Performance of a contract (Art. 6(1)(b)): providing the core expense and income tracking service, managing your account, and providing and managing your "Pro" subscription entitlement.
• Consent (Art. 6(1)(a)): submitting optional feedback through "Rate the App".
• Legitimate interests (Art. 6(1)(f)): keeping the App secure and functioning correctly.

6. Your Rights (Art. 15-22 GDPR)

You have the right to access, rectify, erase, restrict, and object to the processing of your data, and the right to data portability.

• Access and portability. Use Settings, then "Export my data" to receive a copy of your profile, transactions, recurring entries, custom categories, and feedback in JSON (a CSV export of your full transaction history is also available). The export reflects the data held in our database. Your account login email, which is held by our authentication provider, is not included in the file; you can request it from us by email.
• Erasure. Use Settings, then "Delete account". See "Retention and Deletion" below.
• Rectification and other rights. Edit your nickname, currency, and entries directly in the App, or contact us at lightcuppixlab.dev@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

7. Retention and Deletion

We keep your data only while your account is active. There is no separate purge schedule, so your transaction history and feedback are retained until you delete your account.

When you choose Settings, then "Delete account" (which requires you to confirm by typing the word DELETE), the App deletes your authentication account itself, not just your data rows. This permanently and immediately erases your login identity and, by automatic cascade, your profile and all associated records (transactions, recurring entries, budgets, custom categories, subscription records, and feedback). This action cannot be undone. You can also request deletion by email. Deleting your account does not cancel a subscription: you manage and cancel subscriptions in your Apple App Store or Google Play account settings.

8. Sub-processors

• Supabase: hosts our database and manages authentication.
• Apple: provides "Sign in with Apple" as the identity provider on iOS, and processes subscription purchases and billing through the App Store.
• Google: provides "Sign in with Google" as the identity provider on Android, and processes subscription purchases and billing through Google Play. Google is not used by the App for advertising or analytics.

9. Data Location and International Transfers

Your data is stored on our backend provider, Supabase, in the European Union (Ireland), so it is held within the European Economic Area (EEA). Sign-in is provided by Apple (on iOS) or Google (on Android) as the identity provider, and subscription billing is handled by Apple or Google; any limited processing of authentication or purchase data by Apple or Google that may take place outside the EEA is protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs).

10. Reminders

Transaction reminders are generated and managed entirely on your device. No reminder data or notification content is sent to our servers, and the App does not use push notifications.

11. Payments

The App offers an optional paid auto-renewable subscription ("Pro"). All purchases are processed and billed entirely by the Apple App Store (on iOS) or by Google Play (on Android), under their own terms and privacy policies. We do not receive or store your payment card or any payment instrument data. To provide the subscription we receive and store only your subscription status (whether it is active and its renewal or expiry date) and a non-financial subscription identifier from the store, linked to your account, as described in "Data We Collect".

12. Security

We protect your data with encrypted connections (HTTPS only) and database row-level security, so that each account can access only its own data.

13. Children

The App is not intended for children under 16, and we do not knowingly collect data from them.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in the App, and the "Last updated" date above will be revised.

15. Contact

For any privacy question or to exercise your rights, contact Light Cup Pix Lab at lightcuppixlab.dev@gmail.com.