Privacy Policy

1. Who We Are

Zifin ("we", "our", "us") is a personal finance tracking application available at zifin.app. We help individuals track spending by scanning receipts and importing bank statements.

2. Information We Collect

• Account information: First name, last name, date of birth, email address, phone number, and password (stored as a bcrypt hash — never in plain text).
• Financial data: Transaction records, categories, budgets, and receipt images you upload. This data is associated only with your account.
• Usage data: Standard server logs (IP address, browser/device type, pages visited) for security and performance monitoring.

3. How We Use Your Information

• To provide and operate the Zifin service.
• To verify your identity via email and SMS one-time codes (OTP).
• To process receipt images using AI-powered OCR.
• To send transactional communications (verification codes, account alerts). We do not send marketing messages.
• To detect and prevent fraud or abuse.

4. SMS Messaging

By providing your phone number during registration or in your profile settings, you consent to receive SMS messages from Zifin containing one-time verification codes. These are transactional messages only — we do not send promotional or marketing SMS.

Message and data rates may apply. You can remove your phone number at any time from your Profile settings. For help, contact support@zifin.app.

5. Data Storage and Security

All data is stored on Microsoft Azure infrastructure. Data is encrypted in transit via HTTPS (TLS 1.2+) and at rest. Passwords are hashed using bcrypt and are never stored or transmitted in plain text. We retain your data for as long as your account is active. You may request deletion at any time by contacting support@zifin.app.

6. Data Sharing

We do not sell your personal data. We share data only with the following service providers, strictly to operate the service:

• Microsoft Azure — cloud hosting, database, and SMS delivery (Azure Communication Services).
• OpenAI / AI provider — receipt image processing (images are not retained by the provider after processing).

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your Profile settings.
• Request deletion of your account and associated data.
• Withdraw consent for SMS messages by removing your phone number.

To exercise any of these rights, email support@zifin.app.

8. Cookies

We use a single session cookie to keep you logged in. We do not use tracking or advertising cookies.

9. Children

Zifin is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of Zifin after changes take effect constitutes acceptance.