Privacy Policy

Account information. When you register, we collect your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your name, email address, and profile picture from Google in accordance with your Google account permissions.

Financial and usage data. You may enter or import financial information including transactions, categories, budgets, and financial goals. If you use shared or family contexts, certain data may be visible to other members you invite to your household workspace.

Technical and analytics data. We automatically collect limited technical information such as browser type, device type, operating system, and general usage metrics through our analytics provider to understand how the Service is used and to improve reliability and performance.

Payment information. If you purchase lifetime access, payment processing is handled by Razorpay. We do not store your full card or bank details on our servers; Razorpay collects and processes payment data according to its own privacy policy.

We use the information we collect to:

• Create and manage your account and authenticate your sessions
• Provide core features such as expense tracking, transactions, goals, and shared household views
• Send transactional emails (verification, password reset, invitations, and service notices) via our email provider
• Process one-time payments for lifetime access through Razorpay
• Monitor performance, diagnose issues, and improve the Service
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use your financial data for third-party advertising.

We use cookies and similar storage mechanisms that are essential to operating the Service. These include:

• Session cookies to keep you signed in and maintain your authenticated state
• Context cookies to remember your selected personal or family workspace
• OAuth and invitation cookies to complete Google sign-in flows and process household invitations securely
• PWA and service worker storage to support installation and offline shell behavior when you add the app to your device

Our analytics provider may use cookies or similar technologies to collect aggregated usage statistics. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using parts of the Service.

We share information only in the following circumstances:

• Service providers who help us operate the Service, including cloud hosting (database infrastructure), email delivery (Resend), analytics (Vercel Analytics), and payment processing (Razorpay)
• Household members you explicitly invite to a shared context, according to the permissions of that workspace
• Legal requirements when required by law, regulation, legal process, or to protect the rights, safety, and security of Duojar, our users, or others
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to continued protection of your data

We retain your account and financial data for as long as your account is active or as needed to provide the Service. If you delete your account or request deletion, we will remove or anonymize your personal data within a reasonable period, except where retention is required for legal, accounting, or fraud-prevention purposes.

We implement administrative, technical, and organizational measures designed to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls on our infrastructure. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your login credentials and for activity that occurs under your account.

Depending on your location, you may have the right to:

• Access, correct, or update personal information in your account settings
• Request deletion of your account and associated data
• Withdraw consent where processing is based on consent, subject to contractual limitations
• Opt out of non-essential communications where applicable

To exercise these rights, contact us at hello@duojar.com. We will respond within a reasonable timeframe.

Your information may be processed and stored in India and in other countries where our service providers operate. By using the Service, you consent to the transfer of information to locations that may have different data protection laws than your jurisdiction, subject to appropriate safeguards where required.

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may be communicated via email or in-app notice. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact: