Privacy Policy

Who we are

Barya is made by Barya ("we", "us"). We are responsible for the personal data described here: the "controller" under the EU and UK GDPR, the "business" under US state privacy laws, and the "personal information controller" under the Philippine Data Privacy Act. Barya is available worldwide, and this policy applies wherever you use it. For any privacy question or request, email support@barya.app.

What we collect

Account information

You sign in with Google. Google shares your name, email address and profile photo with us, which we use to create your account and show your profile. We never see your Google password.

Budget information you enter

Everything you type into Barya: expenses and notes, daily and monthly budgets, income, savings goals, loans, subscriptions, your categories, end-of-day cash counts (Z-readings) and your profile picture choice.

Technical information

Like any online service, our servers and providers keep short-lived technical logs (such as IP address, device and browser type, and error reports) to keep the service secure and working.

What we don't collect

• Bank or e-wallet logins. Barya never connects to your bank.
• Card numbers. Paid plans are bought through the App Store or Google Play, which handle payment.
• Your contacts, location, photos, microphone or camera.
• Advertising identifiers. We don't show ads or use third-party ad trackers.

How we use it

• To run the app: show your balance, daily budget, savings, bills and history.
• To sync or back up your data, if your plan includes it.
• To manage your free trial and plan.
• To answer support requests and keep the service secure.

We don't sell your personal data, share it for cross-context behavioral advertising, or use it to make automated decisions that have legal or similarly significant effects on you.

Legal bases (EEA, UK and similar laws)

• Contract: to provide the app and the plan you chose.
• Legitimate interests: to keep the service secure, fix problems and answer support requests.
• Consent: where we ask for it, which you can withdraw at any time.
• Legal obligation: where the law requires us to keep or disclose information.

Where your data is stored

• On your phone. During the free trial and on the Own it plan, your budget data stays on your device.
• In the cloud. With Live Sync or Scheduled Backup, and when you use Barya on the web, your data is stored with our database provider so it can reach your other devices or be restored. It is encrypted in transit and protected so only your account can read it.

International transfers

Our providers may process data in countries other than the one you live in, including the United States. When the law requires it (for example, for data from the EEA, UK or Switzerland), we rely on approved safeguards such as the European Commission's Standard Contractual Clauses.

Who we share it with

We share data only with service providers that help us run Barya, and only as needed:

• Supabase, for sign-in and the cloud database.
• Google, for Sign in with Google.
• Our website hosting provider, to serve the website.
• Apple and Google, who process plan purchases through their stores.

We may also disclose information if the law requires it.

How long we keep it

We keep your data while your account is active. When you delete your account, your login and every record you created are deleted right away, on every device. Copies in our providers' routine backups are removed as those backups expire, within 30 days. Purchase records kept by Apple or Google follow their own policies.

Deleting your account and data

In the app, go to Settings → Delete account. You can also ask us to delete it from the web; see Delete your account.

Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you and give you a copy (including in a portable format);
• correct data that is wrong;
• delete your data, or your whole account;
• stop or limit some processing, or object to it.

Email support@barya.app from the email you sign in with. We reply within 30 days (or sooner if your local law requires) and won't treat you differently for using your rights. Depending on where you live, you also have these rights:

• EEA, UK and Switzerland (GDPR): the rights above plus restriction of processing, withdrawing consent, and complaining to your local data protection authority.
• California and other US states: the right to know, delete and correct, and to opt out of the sale or sharing of personal data. We don't sell or share personal data, so there is nothing to opt out of.
• Philippines (Data Privacy Act of 2012): the rights to be informed, access, object, erasure or blocking, rectification and data portability, and to complain to the National Privacy Commission.
• Elsewhere: any rights your local privacy law gives you. Ask us and we'll help.

Security

Data is sent over encrypted connections, and cloud records are locked to your account. No system is perfectly secure, so we also keep collection to a minimum. If a breach affects your data, we will notify you and the relevant authorities as the law requires.

Children

Barya is not meant for children under 13, or under the minimum age for consent to online services where you live (up to 16 in some countries). We don't knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy, we'll update the date above and, for important changes, tell you in the app before they take effect.

Contact

Barya · support@barya.app