Privacy Policy

Effective date: March 14, 2026 · Version 2.0

1. Definitions

In this policy:

• "We," "us," "our" refers to Build Kitchen Studio, the developer of DebtCrusher.
• "You," "your" refers to the individual using the App.
• "App" refers to DebtCrusher for iOS.
• "Personal data" means any data about you that is identifiable to you, as defined under the Digital Personal Data Protection Act, 2023 (India) and applicable data protection laws.
• "Processing" includes collection, storage, use, and deletion of personal data.

2. Data We Collect and Store

DebtCrusher collects and stores only data that you voluntarily enter into the App:

• Debt details (names, balances, interest rates, payment amounts, lender names, account references)
• Payment history (amounts, dates, categories)
• Profile information you optionally provide (name, income, financial goals)
• App preferences (theme, currency, strategy selection)
• Education progress (completed lessons, simulations, exercises)
• Achievement badges earned

We do not collect data automatically in the background. All data in the App exists because you entered it.

3. Purpose of Processing

Your data is processed solely to provide the App's core functionality:

• Calculating debt payoff projections and strategy comparisons
• Generating reports and visualizations based on your inputs
• Tracking your education progress and awarding achievement badges
• Syncing your data across your Apple devices via iCloud
• Managing your subscription status

We do not process your data for advertising, profiling, behavioral analysis, or any purpose beyond delivering the App's stated features to you.

4. Where Your Data Is Stored

• On your device — locally via Apple's SwiftData framework.
• In your private iCloud — automatically synced via Apple's CloudKit to your other Apple devices (iPhone, iPad). This uses Apple's private database, meaning only your iCloud account can access it.

We do not operate servers that store your data. We have no technical access to your iCloud storage. Your data does not transit through any infrastructure owned or operated by us.

5. What We Do Not Currently Do

As of this version of the App:

• We do not access your bank account or connect to any financial institution.
• We do not require account creation. Your Apple ID / iCloud account serves as your identity.
• We do not collect analytics or telemetry about your financial data or app usage.
• We do not sell, rent, or share your personal data with third parties for their own purposes.
• We do not display advertisements.

If any future version of the App introduces new data collection, integrations with external services, or changes to these practices, we will update this privacy policy before such changes take effect. Where required by law or where such changes are material, we will notify you within the App and obtain your consent before processing your data in any new way.

6. Third-Party Services

6.1 RevenueCat (Subscription Management)

We use RevenueCat to manage subscriptions. RevenueCat receives:

• An anonymous subscriber ID (generated by Apple, not linked to your name or email)
• Purchase and subscription status information

RevenueCat does not receive any of your debt data, payment history, profile information, or financial figures. See RevenueCat's Privacy Policy.

6.2 Apple CloudKit (Data Sync)

CloudKit handles data sync between your Apple devices using your iCloud account. Apple's privacy practices govern this data. See Apple's Privacy Policy.

6.3 Exchange Rate Services (Optional)

If you tap "Update Rates" in Settings → Currency Exchange, the App makes a network request to a public exchange rate API (currently open.er-api.com, with frankfurter.app as a fallback) to fetch current currency conversion rates. The only data sent in this request is your default currency code (e.g., "INR" or "USD") as a URL parameter. No personal data, debt information, financial figures, or device identifiers are transmitted. This request is initiated only when you explicitly tap the button — it does not happen automatically or in the background.

6.4 Future Third-Party Services

If we integrate additional third-party services in the future, we will update this policy to disclose what data is shared, with whom, and for what purpose, before any such integration goes live. Where such integration involves personal data or financial information, we will obtain your consent before enabling it.

7. Biometric Authentication

DebtCrusher uses Face ID, Touch ID, or your device passcode to optionally protect the App on launch. Biometric data is handled entirely by Apple's LocalAuthentication framework on your device. We do not access, store, process, or transmit biometric data. This feature can be disabled in Settings.

8. Document Import

When you import a loan document (PDF), the file is processed entirely on your device using Apple's PDFKit framework. If the PDF is password-protected, the password is used once in memory and immediately discarded — it is not stored, written to disk, transmitted, or logged. The imported document itself is not retained by the App. Only the field values you explicitly review and confirm are saved to your debt record.

9. Sharing Features

DebtCrusher allows you to share achievement badges and milestone cards via the system share sheet. By default, shared content does not contain debt amounts, balances, interest rates, or any specific financial figures. If you choose to include financial information in a share card (via an opt-in toggle on the share preview), you do so voluntarily and at your own discretion. Sharing is always initiated by you — the App does not share data automatically.

10. Data Retention

Your data is retained on your device and in your iCloud account for as long as you use the App. We do not impose a retention period because we do not store your data on our systems. When you delete data (see Section 11), it is removed from local storage and, upon iCloud sync, from your iCloud account.

11. Data Deletion and Your Rights

You can delete all your data at any time through any of these methods:

• In-app: Settings → Erase All Data (requires typing "DELETE" to confirm)
• Delete the app: Removes all local data from your device
• iCloud data: Go to iOS Settings → Apple Account → iCloud → Manage Storage → DebtCrusher → Delete Data

Under applicable data protection laws, including India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data (all your data is visible to you within the App at all times)
• Correct inaccurate data (you can edit any entry in the App at any time)
• Erase your data (via the methods described above)
• Withdraw consent for data processing (by deleting your data or uninstalling the App)
• File a grievance with us (see Section 16) or with the relevant data protection authority in your jurisdiction

Because your data resides on your device and your private iCloud — not on our servers — you have direct, immediate control over all your personal data at all times.

12. Children's Privacy

DebtCrusher is not directed at children under the age of 18. We do not knowingly collect or process personal data from children. If you believe a child has provided personal data through the App, please contact us and we will assist with deletion.

13. Data Breach Notification

Because your data is stored locally and in your private iCloud account (not on our servers), the risk of a data breach on our end is minimal. However, if we become aware of any incident that may have compromised the security or confidentiality of your personal data through our third-party service providers (RevenueCat), we will notify affected users and the Data Protection Board of India as required by applicable law.

14. International Users

DebtCrusher is available globally. Your data is stored on your device and in your iCloud account, which may be hosted in data centers in your region or elsewhere, as determined by Apple's iCloud infrastructure. We do not independently transfer your data across borders. If you are located in the European Economic Area, United Kingdom, or other jurisdictions with data protection laws, your use of the App is governed by this policy and Apple's data handling practices for CloudKit.

15. Changes to This Policy

We may update this privacy policy to reflect changes in the App's features, applicable laws, or our practices. When we make changes:

• The updated policy will be posted on this page with a new effective date and version number.
• For material changes (such as new data collection, new third-party integrations, or changes to how your data is processed), we will provide notice within the App before the changes take effect.
• Where required by law, we will obtain your consent before processing your data in materially new ways.

We encourage you to review this policy periodically. Continued use of the App after a non-material update constitutes acceptance. Material changes require affirmative consent where mandated by applicable law.

16. Contact

For questions, concerns, or grievances about this privacy policy or your data, email debtcrusher@buildkitchen.studio.