Privacy Policy

Last updated: May 31, 2026

1. Introduction

This Privacy Policy explains how we collect, use, and protect your information when you use the Assets & Liabilities application ("the App"). It also describes your rights and how applicable data protection laws govern the processing of your personal data.

2. Data Controller

The data controller responsible for your personal data is:

Name: Dariusz Wiktorowski
Email: wiktorowski.dariusz.business@gmail.com

3. Information We Collect

We collect the following types of information:

3.1 Account Information

Email address
Username
Authentication credentials (passwords are stored only in hashed form)

3.2 User-Generated Data

Financial data entered into the App (e.g., assets, liabilities, balances, notes)

3.3 Technical Data

Log data (e.g. errors)

Collected technical data may include limited device-related information such as IP address and basic request metadata when necessary for diagnostics, monitoring, and security purposes. We do not use this data to uniquely identify users or perform device fingerprinting.

We process your personal data based on the following legal grounds:

Performance of a contract: to provide and maintain your account and access to the App
Legitimate interests: to ensure security, prevent fraud, and improve the App
Consent: where explicitly requested (if applicable)

5. How We Use Your Data

We use your data to:

Create and manage your account
Store and synchronize your data across devices
Provide core application functionality
Improve performance and reliability
Ensure security and prevent unauthorized access

6. Data Storage and Processing

Your data is stored on secure remote servers operated by Microsoft Azure, using servers located in the Poland Central region (European Economic Area).

Data is primarily stored and processed within the European Economic Area (EEA). In limited cases, some processing (e.g., diagnostics, support, or infrastructure operations) may occur outside the EEA through our service providers, and in such cases appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied.

7. International Data Transfers

If your data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

We do not sell your personal data.

We may share your data with:

Microsoft Azure (for cloud hosting, storage, database services, monitoring, and infrastructure),
No third-party authentication providers are currently used.

All third parties process data on our behalf and under appropriate data protection agreements.

We may share your data with:

Cloud hosting providers (for data storage and infrastructure),
Authentication providers (if you use third-party login)

All third parties process data on our behalf and under appropriate data protection agreements.

9. Data Retention

We retain your data as follows:

Account data: until your account is deleted
User-generated data: until your account is deleted
Logs and technical data: retained for a limited period (e.g., up to 90 days) for security and debugging purposes

Because the App uses Microsoft Azure SQL Database, automated backups are created and managed by Microsoft Azure. These backups are retained according to Azure’s built-in point-in-time restore policy, which typically ranges from 7 to 35 days depending on the service tier and configuration. Backup retention is fully managed by the service provider and is not directly controlled by us. As a result, some data may continue to exist in backups for a limited period after deletion requests until those backups expire according to Azure’s retention policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of data in transit (HTTPS)
Secure storage practices
Password hashing
Access controls

However, no system is completely secure.

If you are located in the European Economic Area, you have the following rights:

Right to access your data
Right to correct inaccurate data
Right to delete your data ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to lodge a complaint with a supervisory authority (e.g., President of the Personal Data Protection Office (UODO), Poland)

You can exercise your rights directly through the functionalities available within the App. If you encounter any issues doing so, please contact us at the email provided above.

12. Account Management

You can:

Update your account information within the App
Delete your account at any time

Upon account deletion:

Your account and all active user data are deleted immediately
Residual data may remain in backups for a limited period in accordance with our backup retention policy (see Section 9)

13. Children’s Privacy

The App is not intended for children. We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will inform users by updating the Privacy Policy within the App and/or publishing an updated version on our official website. We may also indicate changes in app store release notes (e.g., Google Play or Apple App Store) where appropriate.

The updated version will always include a revised "Last updated" date at the top of this document.

15. Contact

If you have any questions about this Privacy Policy or your data, contact:

Email: wiktorowski.dariusz.business@gmail.com

External Authentication Providers

The App does not currently support sign-in using third-party providers (e.g., Google, Apple). If such functionality is introduced in the future, we will update this Privacy Policy accordingly. In that case, we would receive limited account information necessary to authenticate you (such as your email address), and we would not receive your passwords from those providers.