Privacy Policy

Account information: email address.

Trip data: destinations, dates, budgets.

Expense data: store names, amounts, categories, dates, memos.

Receipt images: photos you upload for AI parsing.

Receipt data may include partial payment card numbers (last 4 digits) if visible on the receipt.

Device information: app version, OS version (for crash reporting and troubleshooting).

To provide and improve the expense tracking service.

To parse receipts using AI technology.

To convert currencies using exchange rate APIs.

To sync your data across devices.

To diagnose crashes and errors via Sentry crash reporting.

We process your personal data on the following legal bases:

(a) Contract Performance: Processing necessary for providing the core expense tracking service, including data storage, synchronization, and currency conversion.

(b) Consent: Processing based on your explicit consent for AI-powered receipt parsing via Google Gemini. You may withdraw consent at any time (see Section 12).

We share data with the following third-party processors to operate our service:

Supabase (AWS infrastructure, US/Singapore regions) — stores account data, trip and expense records, and receipt images. Protected by Row-Level Security (only you can access your own data).

Google LLC (United States) — Gemini AI service processes receipt images for automatic text extraction. Under the Gemini API terms of service, Google does not retain submitted images after processing is complete.

Sentry (United States) — crash and error monitoring. Receives app and user identifiers including email address and user ID for error attribution and diagnostics.

RevenueCat (United States) — purchase and subscription management. Receives purchase history and subscription status to manage your HOBOS Pro subscription.

Your data may be transferred to and processed in countries outside your country of residence:

Account and expense data: Stored on Supabase servers (AWS infrastructure, US/Singapore regions).

Receipt images for AI parsing: Sent to Google Gemini servers (United States) for processing.

Crash and error data: Sent to Sentry servers (United States) for diagnostics.

Subscription data: Processed by RevenueCat (United States).

These international transfers are protected by standard contractual clauses and other appropriate safeguards in accordance with applicable data protection laws.

Your data is stored securely on Supabase (cloud database hosted on AWS infrastructure in US and Singapore regions).

Receipt images are stored in Supabase Storage.

All data is protected by Row-Level Security (only you can access your data).

Your data is retained as long as your account is active.

You can delete your account at any time from within the app. After you request deletion, you have a 30-day recovery window — logging back in during this period will restore your account and data.

After the 30-day window, all personal data (account information, trips, expenses, receipt images) is permanently and irreversibly deleted.

We may, however, retain de-identified price records indefinitely for our price-reference service. These records contain only: the expense amount and currency (and its converted amount in a home currency), store name, item names and amounts, spending category, the month of the expense, and the city and country — each tagged with a random identifier that cannot be linked back to you, your account, or your email. They never include your account or email, personal memos, receipt images, exact dates or times, or location/GPS data.

Access: You can view all your data within the app.

Export: You can export your expense data in machine-readable format (CSV).

Deletion: You can delete your account and all associated personal data from within the app.

Correction: You can edit any expense or trip data.

Restriction: You can request restriction of processing.

Portability: You can request your data in a portable format.

Objection: You can object to processing based on legitimate interests.

To exercise these rights, contact us at hobosubiquitous@gmail.com.

Session tokens are stored in encrypted device storage.

All network communication uses HTTPS encryption.

Access to your data is protected by Row-Level Security on the database level.

This service is not intended for users under 14 years of age.

Name: Seok Lyu

Email: hobosubiquitous@gmail.com

You may contact our Data Protection Officer for any questions or concerns regarding the processing of your personal data.

We will notify users of significant changes through the App.

You can withdraw your consent at any time by deleting your account from within the app, or by emailing hobosubiquitous@gmail.com.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

For privacy inquiries, contact us at hobosubiquitous@gmail.com.