Privacy Policy

This policy describes how Bill Organizer collects, uses and shares information when you use the app. The short version: no bank logins, and we never sell your data.

Who we are

Bill Organizer is operated by JussAYawdie ("the developer"). For any privacy or support questions, contact jussayawdie@gmail.com.

What we collect

We deliberately collect as little as possible.

• Email and password you provide to create and authenticate your account. Passwords are never stored in plaintext — they are hashed with bcrypt.
• Bill data you enter: name, amount, due date, type (payable / receivable), category, recurrence, optional notes, paid/unpaid status and custom categories.
• Optional preferences: currency, lookahead window, notification time and lead time, weekly-totals visibility, app-lock preferences and starting-tab.
• Anonymous device info used by Google Play Billing for in-app purchase validation (purchase token, product SKU, order ID).

What we do NOT collect

• We never ask for or store bank credentials, card numbers, ACH details or banking access tokens.
• We do not access your contacts, photos (beyond what you explicitly pick), SMS, calendar or location.

How we use your information

• To authenticate you and keep your bill data scoped to your account.
• To deliver core features: on-device due-date reminders, recurring expansion, charts, search/filter.
• To recover your account via a one-time code emailed to you when you request a password reset.
• To validate Google Play purchases so we can grant Pro features.
• To reply to support emails you send us.

Where your data lives

• Account credentials and bill records are stored in a managed MongoDB database hosted in the United States.
• Local notifications are scheduled on your device and never traverse our servers.
• Backups you create are written to your device or shared by you via the Android share-sheet — we never see their contents.

In-app purchases

Pro features are sold through Google Play Billing. Google handles the payment itself (your card details never reach us). We receive a purchase token which our backend forwards to Google's verification API to confirm the purchase, then store it against your account so you can restore Pro on reinstall.

AI Spending Insights

AI Spending Insights is an optional, opt-in feature. The first time you use it you must explicitly allow AI analysis, and you can turn it off anytime in Settings → AI Insights.

• When enabled, a summary of your bills (names, amounts, due dates, categories, recurrence and paid/unpaid status) is sent over an encrypted connection to our AI provider to generate the insights.
• Your data is used only to generate your insights — it is not used to train AI models and is never shared for advertising.
• Insights are AI-generated suggestions for information only and are not financial advice.

Your rights

• View and edit any bill, category or preference inside the app.
• Export a complete JSON backup of your data from Settings.
• Reset your password using the Forgot password flow.
• Delete your account and all associated data from Settings → Account → Delete account. This is permanent and immediate.
• Email jussayawdie@gmail.com with the subject "Delete account" if you prefer the manual route — we delete your data within 7 days.

Data retention

• While your account is active we keep your data so the app works.
• After you delete your account, all your bills, categories, settings, reset codes and the user record are immediately removed.
• We may notify and remove accounts that have been unused for 24 consecutive months.

Transient & ephemeral data

Some data is only processed briefly and is never kept as part of your profile:

• Your password is processed in memory only to create a bcrypt hash — the plaintext is never written to storage.
• When you use AI Spending Insights, a summary of your bills is sent to our AI provider, processed to generate the result, and not retained by us beyond the short generated text.
• Your IP address is used only to rate-limit sign-in / sign-up / password-reset attempts and is auto-deleted within ~2 hours. It is never linked to your profile.
• Email verification and password-reset codes are stored hashed and auto-expire within 15 minutes.

Security

• All traffic between the app and our backend is encrypted with TLS 1.2+.
• Passwords are hashed with bcrypt at high cost.
• JWTs are short-lived and signed server-side.

Children's privacy

Bill Organizer is intended for adults (18+) managing personal finance. We do not knowingly collect data from anyone under 13. If you believe we have, contact jussayawdie@gmail.com and we will delete it.