Privacy Policy

Last updated: June 2, 2026 · Effective: June 2, 2026

Decydo ("we", "us", or "our") operates the Decydo mobile application (the "Service"). This Privacy Policy explains how we collect, use, and protect information about you when you use our Service.

1. Information We Collect

Account Information

Email address (when you sign up with Email/Password or Google Sign-In)
Display name and profile photo (from your Google account, if applicable)
A unique user identifier assigned by Firebase Authentication

Usage Data

Swipe preferences and voting actions within group lobbies
Saved locations, trip proposals, and planning history
App settings and preferences stored locally on your device

Location Data

We request approximate or precise location to surface nearby recommendations. Location is used only while the app is in the foreground.
Location data is not stored on our servers and is not shared with third parties for advertising.

Camera & Receipt Data

When you use the receipt scanning feature, your camera is used to capture a photo of your receipt.
Receipt images are sent to our secure AI processing service to extract expense data, then discarded immediately after processing. We do not store your receipt images.

2. How We Use Your Information

To create and authenticate your account
To display your profile within group lobbies you join
To save trip proposals and decision history
To send push notifications (you can disable these in your device settings)
To improve the quality of recommendations and app performance

3. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Google Firebase – Authentication, Cloud Firestore, Cloud Storage, Push Notifications, and Crashlytics for crash reporting
Google Maps / Places API – To surface nearby place recommendations
RevenueCat – To manage in-app subscriptions and purchases
Google Sign-In – Optional social authentication

4. Data Sharing

We do not sell, trade, or rent your personal information to advertisers or data brokers. We share data only with the third-party services listed above that are necessary to operate the app, and only to the extent required to deliver the Service.

5. Data Retention

Account data is retained as long as your account is active.
Group lobby data is automatically deleted after 30 days of inactivity.
You may request full data deletion at any time (see Section 7).

6. Data Security

All data transmitted between the app and our servers is encrypted using TLS/HTTPS. Firebase Security Rules restrict database access so that users can only read and write their own data. Billing fields (subscription status, credits) are protected from client-side modification and are only written by our secure backend Cloud Functions.

7. Your Rights & Account Deletion

You have the right to access, correct, or delete your personal data at any time.

To delete your account and all associated data, go to Settings → Delete Account within the Decydo app.
Alternatively, you can email us at decydo2415@gmail.com and we will process your request within 30 days.
For more details on what is deleted, see our Account Deletion page.

8. Children's Privacy

Decydo is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with a new "Last updated" date. Continued use of the Service constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
decydo2415@gmail.com