Privacy Policy

Last Updated: August 2026

Welcome to Divizzy! We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

We collect several types of information to provide and improve our service:

  • Personal Information: Name, email address, and profile picture (if provided through sign-in services).
  • Trip Information: Trip details, expenses, and participant information you enter into the app.
  • Usage Data: Information about how you use the app, including app interactions and feature usage.
  • Device Information: Device type, operating system, and other technical data.

How We Use Your Information

We use the collected information for various purposes:

  • To provide and maintain our service
  • To notify you about changes to our service
  • To allow you to participate in interactive features of our app
  • To provide customer support
  • To gather analysis to improve our service
  • To monitor the usage of our service
  • To detect, prevent, and address technical issues

Legal Basis for Processing (GDPR Art. 6)

Our legal basis for processing personal data depends on the specific purpose:

Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following situations:

  • With Your Consent: We may share information when you have given us permission to do so.
  • For Trip Sharing: Information about trips and expenses is shared with other participants you invite.
  • Service Providers: We may employ third-party companies to facilitate our service, provide the service on our behalf, or assist us in analyzing how our service is used. These providers are bound by confidentiality agreements.
  • Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.

Service Providers

We use the following third-party services that may process data:

  • Firebase: Authentication, Analytics, Crashlytics, Remote Config (Google LLC, USA)
  • Google AdMob: Personalized and non-personalized advertising (Google LLC, USA)
  • GitHub: Code hosting and version control (Microsoft Corporation, USA)

All service providers process data on our behalf and are subject to strict confidentiality and security obligations.

Data Security

We implement appropriate security measures to protect your personal information. Your data is encrypted both in transit and at rest using industry-standard encryption protocols (TLS 1.3, AES-256). However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security. We recommend you also take precautions on your end (e.g., device passcode, secure network connections).

Your Data Protection Rights

You have the following data protection rights under GDPR and applicable law:

  • The right to access, update, or delete your information
  • The right to rectification (to correct inaccurate data)
  • The right to object to our processing of your personal data
  • The right to restriction (to request we limit processing of your data)
  • The right to data portability (to receive a copy of your data in a structured, commonly used format)
  • The right to withdraw consent (where consent is the legal basis)

To exercise any of these rights, please contact us at contact@duncled.com.

Children's Privacy

Our service is not directed to anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us at contact@duncled.com so that we can take necessary actions.

International Data Transfers

Your data may be processed by service providers located outside your country of residence, including in the United States. When data is transferred internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Google's Data Privacy Framework adequacy decision for US transfers
  • Binding corporate policies for internal transfers

Data Retention Schedule

We retain your data only as long as necessary for the purposes outlined in this Privacy Policy:

Data Category Retention Period Deletion Trigger
Account data Duration of account + 30 days Account deletion
Trip and expense data Duration of trip + 2 years Manual deletion or account deletion
Analytics events 14 months Auto-expiry (Firebase retention policy)
Crashlytics logs 90 days Auto-expiry and rotation
AdMob/AAID 14 months User opt-out or account deletion
Server logs 30 days Auto-rotation and purging

Account Deletion

You can permanently delete your Divizzy account and all associated data. You have two options:

Method 1: In-App Deletion (Recommended)
  1. Open the Divizzy app on your device
  2. Tap the menu icon () in the top-left corner
  3. Scroll down to the Support section
  4. Tap Delete Account
  5. Read the confirmation message carefully
  6. Tap Delete to confirm

Your account will be immediately marked for deletion, and you will be signed out immediately.

Method 2: Email Request

If you cannot access the app, email contact@duncled.com with the subject line "Account Deletion Request - DELETE", sent from the email address registered with your account (or include it in the message).

We process deletion requests within 7 days. Your data will be permanently deleted, and backups containing your data are purged within 30 days.

Important: Account deletion is permanent and irreversible. All your trips, expenses, settlements, and personal data will be permanently deleted and cannot be recovered.

CCPA "Do Not Sell/Share" Disclosure

Under the California Consumer Privacy Act (CCPA), you have the right to opt-out of the sale or sharing of your personal information. Divizzy does not sell your personal information to third parties. However, we may share data with the following third parties for business purposes:

  • Firebase (for analytics and authentication)
  • Google AdMob (for personalized advertising)

To exercise your CCPA right to opt-out, please contact us at contact@duncled.com or visit your app settings to manage your advertising preferences.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Any updates will become effective when posted.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at contact@duncled.com.

Data Protection Officer: privacy@duncled.com

Back to Home