Privacy Policy — DueGenie
1. Introduction
DueGenie ("the App", "we", "us", "our") is a personal financial reminder and due-tracking application. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, where it is stored, and what rights you have over your data.
By using DueGenie, you agree to the practices described in this policy. If you do not agree, please do not use the App.
2. Summary (Plain-Language Overview)
| What | Where it lives | Leaves your device? |
|---|---|---|
| Your dues, amounts, dates, categories | On-device only (AsyncStorage) | No |
| Your Gemini API key | On-device encrypted storage (SecureStore) | Only to Google to validate — see §7 |
| Your name, email, profile photo | On-device only (AsyncStorage) | Only during Google Sign-In — see §6 |
| Push notification schedules | On-device only (expo-notifications) | No |
| Calendar events you add | Your device's Calendar app | No (stored in your own calendar) |
| AI prompts (due titles, amounts, dates) | Sent to Google Gemini API only if you enable AI features | Yes — see §7 |
3. Data We Collect and Why
3.1 Data You Provide Directly
Dues and Financial Tasks
When you create a due (bill, subscription, salary, reminder, etc.) you enter:
- Title, icon, category, type, nature (payment / renewal / maintenance)
- Amount (optional)
- Due date, recurrence schedule, priority
- Reminder time and alert settings
This data is stored entirely on your device using AsyncStorage. It is never transmitted to our servers.
Profile Information (via Google Sign-In — optional)
If you choose to sign in with Google during onboarding, we receive:
- Your full name
- Your Google account email address
- Your Google profile photo URL
This information is stored locally on your device and is used only to personalise your experience (display your name and photo within the App). We do not receive a Google account token or password, and we do not transmit this data to any server we operate.
Google Sign-In is optional. You may skip it during onboarding without loss of App functionality.
Gemini AI API Key (optional)
If you choose to enable AI features, you paste your own Google Gemini API key. This key is stored in SecureStore (device-level encrypted storage) and is never sent to any server we operate. It is transmitted directly from your device to Google's API endpoints solely to enable the AI features you request.
3.2 Data Generated Automatically by App Behaviour
Notification Schedules
The App uses your device's local notification system (Expo Notifications) to schedule reminders based on your due dates and reminder time preferences. All scheduling happens on-device. No notification data is transmitted externally.
App Preferences and Settings
Theme choice, dark-mode preference, default reminder time, and onboarding completion status are stored locally in AsyncStorage.
3.3 Data We Do NOT Collect
We do not collect or process:
- Device identifiers, advertising IDs (IDFA/GAID), or device fingerprints
- Location data
- Usage analytics or crash reports
- Browsing history or app usage patterns
- Contacts
- Biometric data
4. How We Use Your Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Dues, amounts, dates | Display, sort, and remind you about your financial obligations | Performance of the App service you requested |
| Profile name & photo | Personalise UI within the App | Your explicit consent during sign-in |
| Default reminder time | Schedule local push notifications | Performance of the App service |
| Calendar access (when requested) | Create calendar events for specific dues | Your explicit permission at time of request |
| AI prompts (opt-in) | Generate Smart Fill, Insights, or Smart Reminder text | Your explicit opt-in to AI features |
We do not use your data for advertising, profiling, or sale to third parties.
5. Data Storage and Retention
On-Device Storage
All core App data (dues, profile, settings, notification schedules) is stored exclusively on your device using:
- AsyncStorage — standard on-device key-value store
- Expo SecureStore — hardware-backed encrypted storage (used for your Gemini API key)
This data persists until you:
- Delete the App from your device
- Use "Reset All Data" in Settings
- Manually clear App storage via your device's Settings
We have no access to on-device data and cannot recover it on your behalf.
No Proprietary Server or Database
DueGenie does not operate any backend server, cloud database, or data pipeline. We hold no copy of your personal data.
6. Google Sign-In
DueGenie offers optional sign-in with Google ("Sign in with Google"), provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When you sign in:
- Your device communicates directly with Google's authentication servers
- We receive only the user-profile fields listed in §3.1 (name, email, photo URL)
- Your Google credentials (password, tokens) are never visible to us
Google's privacy practices are governed by the Google Privacy Policy.
You may disconnect Google Sign-In at any time by editing your profile in the App or by uninstalling the App.
7. Google Gemini AI (Optional)
If you choose to enable AI features, the following happens:
- You supply your own Google AI Studio API key — we do not provide or manage keys on your behalf
- When you use Smart Fill, AI Insights, or Smart Reminders, the App constructs a prompt containing your due titles, amounts, and dates and sends it to Google's Gemini API endpoint (
generativelanguage.googleapis.com) directly from your device - Your API key is transmitted to Google solely to authenticate these requests
- We do not intercept, log, or store these requests or responses on any server we operate
By enabling AI features you are also subject to:
AI features are entirely optional and disabled by default. All App functionality works without them.
8. Device Calendar Access
When you tap "Add to Calendar" on a due, the App requests permission to access your device's calendar in order to create a single event. We:
- Request permission only at the moment you invoke this action
- Write only the event you explicitly request (due title, date)
- Do not read any existing calendar events
- Do not have persistent background access to your calendar
Calendar access is governed by your device OS permissions and can be revoked at any time in your device's Settings.
9. Push Notifications
Local push notifications are scheduled entirely on-device using Expo Notifications. We do not use a push notification service provider (e.g., FCM/APNs) to send server-initiated messages. All reminders are computed and fired locally.
Notification permission is requested when you enable Push Notifications in Settings. You may disable notifications at any time via your device's Settings > DueGenie > Notifications.
10. Data Export
The App provides a CSV export feature that creates a file containing your dues data and offers it for sharing via your device's share sheet. This action is entirely under your control. We do not receive a copy of exported files.
11. Screen Capture Protection
DueGenie prevents screenshots and screen recording while the App is in use, protecting your financial information from being captured by other apps or system-level screenshot tools. This is an on-device protection and does not involve any data transmission.
12. Children's Privacy
DueGenie is not directed to children under the age of 13 (or 16 where applicable under local law). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, please contact us at botleapps@gmail.com and we will take appropriate steps to address the situation.
13. Your Rights
Depending on your jurisdiction, you may have the following rights:
For all users:
- Access — You can view all your data within the App at any time
- Deletion — Use "Reset All Data" in Settings > Data & Privacy to permanently delete all dues and profile data from your device; uninstalling the App removes all remaining local data
- Portability — Use "Export CSV" in Settings > Data & Privacy to obtain a machine-readable copy of your dues
For users in the European Economic Area (EEA), UK, and Switzerland (GDPR/UK GDPR):
- Right to rectification — edit any data directly within the App
- Right to restriction of processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
For California residents (CCPA/CPRA):
We do not sell personal information. We do not share personal information with third parties for cross-context behavioural advertising. The personal information we process falls under the "service provider" exemption as described in this policy.
For Indian residents (DPDPA 2023):
As a Data Fiduciary, we process only the minimum data necessary for App functionality. You may withdraw consent for optional features (Google Sign-In, AI) at any time by removing the respective data from within the App.
To exercise any of these rights, contact us at botleapps@gmail.com.
14. Data Security
We implement the following measures to protect your data:
- SecureStore for sensitive credentials (your Gemini API key) — backed by device hardware security (Keychain on iOS, Keystore on Android)
- Screen capture prevention to block unauthorised visual capture of financial data
- No proprietary server means there is no centrally stored copy of your data to breach
- HTTPS only for all network requests (to Google APIs)
No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
15. Third-Party Services Summary
| Service | Provider | Purpose | Data Sent | Opt-in Required? |
|---|---|---|---|---|
| Google Sign-In | Google LLC | Profile personalisation | Google account name, email, photo | Yes — optional |
| Google Gemini API | Google LLC | AI Smart Fill, Insights, Reminders | Due titles, amounts, dates + your API key | Yes — optional |
| Expo Notifications | Expo / EAS | Local push notifications | None (all on-device) | Notification permission |
| Expo Calendar | Apple / Google | Create calendar events | Due title and date (written to your own calendar) | Calendar permission |
We do not integrate advertising SDKs, analytics SDKs, crash reporting services, or social media tracking pixels.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do:
- The "Last Updated" date at the top of this document will change
- For significant changes, we will notify you within the App
- Continued use of the App after changes constitutes acceptance of the updated policy
We encourage you to review this policy periodically.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Botle Apps
Email: botleapps@gmail.com
We aim to respond to all enquiries within 30 days.
DueGenie is developed and maintained by Botle Apps. All financial data you enter remains on your device and under your control.