Privacy Policy

Last updated: [DATE]

Before you publish this This policy was drafted from what the app's code actually does, but the bracketed fields below must be completed, and the whole document reviewed by you (and ideally a lawyer) before it is submitted to Google Play or the App Store. You are the data controller, not the author of this draft.

Who we are

AssetDiary (“the app”) is operated by [LEGAL NAME / SOLE PROPRIETOR], contactable at support@assetdiary.in. This policy explains what the app stores and why.

What the app stores

Everything below is entered by you. The app does not buy, import or infer data about you from any other source.

Category	Examples	Where it is stored
Account	Family ID, username, display name, role and module access	Our database (Supabase, hosted on [REGION])
Financial records	Bank balances, deposits, gold, property, vehicles, earnings and expenses	Our database
Documents	Scans and photos you attach to a record	Private file storage, reachable only through short-lived signed links
Profile photo	An avatar you choose to upload	Public file storage — see the note below
On your device only	App passcode (stored as a salted hash, never the passcode itself), theme, dashboard layout, saved game state	Your device. Never transmitted to us.

About profile photos Profile photos are currently served from a public storage URL. Anyone who has that URL can open the image without signing in. Uploaded documents are not handled this way — those use private storage and expiring links. If you would rather not have a publicly reachable photo, do not upload an avatar.

What we do not collect

No email address. The app signs you in by username within your family. It never asks for an email, and none is stored.
No analytics or tracking. There is no analytics SDK, advertising SDK or third-party tracker in the app.
No location data.
No contacts, microphone or call data.

Permissions the app asks for

Camera and photo library — only when you attach a scan or photo to a record, or set a profile photo.
Biometrics (fingerprint / Face ID) — only to unlock the app. Biometric data never leaves your device and is never visible to us; the operating system simply tells the app whether the check passed.

Who can see your data

Your records are visible to members of your family group, according to the module access your family administrator grants each member. They are not visible to other families using the app.

We do not sell your data, share it for advertising, or disclose it to third parties, except where we are legally required to do so.

Service providers

The app stores data using Supabase, which provides our database, file storage and authentication. Supabase processes this data on our behalf as a service provider. [ADD ANY OTHER PROVIDERS, e.g. hosting, crash reporting]

How long we keep it

Your records are kept until you delete them, or until your account is deleted. See Delete your account for how to request removal and what happens afterwards.

Your rights

Access — you can see all of your records inside the app at any time.
Correction — every record can be edited in the app.
Deletion — request removal of your account and its data, in-app or via the web form.
Withdrawal — you may stop using the app and request deletion at any time.

Children

A family administrator may create accounts for members of their own household, including minors, and controls what each member can see. The app is not directed at children independently of a family administrator. [REVIEW THIS AGAINST YOUR PLAY STORE TARGET-AUDIENCE DECLARATION]

Changes to this policy

If this policy changes materially, the updated date at the top will change and the new version will be published on this page.

Contact

Questions about this policy or your data: support@assetdiary.in.