Privacy Policy

1. Who we are

Faiyr is operated by Birch Digital Inc., a company incorporated in British Columbia, Canada. Our registered address is Birch Digital Inc., 264‑329 Howe St, Vancouver, BC, Canada.

When this policy refers to "Faiyr", "we", "us", or "our", it means Birch Digital Inc. When it refers to "you" or "your", it means you as a user of the Faiyr mobile application, web application, or website.

For privacy inquiries, contact us at: hello@faiyr.app

2. Data we collect

Account data

When you create an account, we collect your email address and a display name. You may optionally add a profile photo. We do not collect your phone number unless you provide it during sign-up.

Group and transaction data

We store the expense and payment records you and your group members create, including amounts, dates, descriptions, categories, and who paid. This data is necessary for the core functionality of the app.

Device and usage data

We collect standard technical information including your device type, operating system, app version, IP address (used to protect against abuse), and push notification tokens. We may log aggregate usage statistics to understand how the app is used and to improve it.

Communications

If you contact us via email, we keep a record of that correspondence to resolve your query.

3. How we use your data

• To provide the service: calculate balances, process group membership, send notifications, and authenticate your account.
• To maintain security: detect and prevent fraud, abuse, and unauthorized access.
• To improve the app: understand which features are used and diagnose errors.
• To communicate with you: send balance reminders, important service updates, and respond to support requests.
• To comply with the law: meet legal obligations applicable to us as a Canadian company.

We do not use your financial transaction data for advertising, profiling, or sale to third parties.

4. Sharing and disclosure

We do not sell your personal data. We share data only in the following limited circumstances:

Within your group

Other members of a group you belong to can see that group's expenses, balances, and your display name and profile photo. They cannot access expenses in groups they don't belong to.

Service providers

We use Google Firebase (Alphabet Inc.) to store data and run backend functions. Google processes data on our behalf under a Data Processing Addendum and does not use your data for its own purposes. All data is stored in Google's US data centres.

Legal requirements

We may disclose data when required by applicable law, court order, or government request, or where we believe in good faith that disclosure is necessary to protect the rights or safety of Faiyr, our users, or others.

Business transfers

If Faiyr is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you via email and an in-app notice before any such transfer and give you the opportunity to delete your account.

5. Data retention

We retain your personal data for as long as your account is active. When you delete your account, we permanently remove your profile, private data, and authentication credentials within 90 days.

Expense and balance records that involve other group members may be retained in anonymized form (attributed to a deleted user identifier) to preserve the accounting integrity of groups you participated in. Comments you posted on shared transactions are retained for the same reason, but your display name on them is replaced with “Deleted user”. Your profile photo and any data-export files you generated are deleted. Push notification tokens and session data are deleted immediately on account deletion.

We retain records required for tax, legal, or fraud-prevention purposes for up to 7 years as required by Canadian law.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Portability: export your data in a machine-readable format (GDPR Article 20). Use Settings → Export My Data in the app.
• Correction: update inaccurate personal data via your profile settings.
• Erasure: permanently delete your account and associated data via Settings → Delete Account, or by contacting us at hello@faiyr.app.
• Restriction / Objection: request that we limit or stop processing your data in certain circumstances.
• Withdraw consent: where processing is based on consent (e.g. marketing emails), you may withdraw it at any time.

To exercise any of these rights, contact us at hello@faiyr.app. We will respond within 30 days. Residents of the European Economic Area, the United Kingdom, or California may have additional rights under GDPR, UK GDPR, or the CCPA respectively.

7. Security

We use industry-standard security measures including TLS encryption in transit, encryption at rest via Google Firebase, Firebase Authentication for identity verification, and server-side security rules that prevent unauthorized data access. Point-in-time recovery is enabled for disaster recovery.

No system is completely secure. If you believe your account has been compromised, contact us immediately at hello@faiyr.app.

8. Children

Faiyr is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@faiyr.app and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify active users via email or an in-app notification at least 14 days before the changes take effect. Continued use of Faiyr after that date constitutes acceptance of the updated policy.

10. Contact us

For privacy-related questions or to exercise your rights:

Email: hello@faiyr.app

Mail: Birch Digital Inc., 264‑329 Howe St, Vancouver, BC, Canada

We aim to respond to all inquiries within 30 days.