VoiceSpend Privacy Policy.

1 Introduction

Welcome to VoiceSpend ("the App"), a voice-first personal finance and expense tracking application operated by BWJ Tech Solutions Private Limited ("we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you use our mobile application and web portals (including voicespend.ai), and your rights regarding your personal information.

By downloading, installing, or using VoiceSpend on iOS or Android, you acknowledge and agree to the data collection and processing practices described in this Privacy Policy. If you do not agree, please discontinue using the App.

2 Applicability of Indian Data Protection Law (DPDP Act, 2023)

VoiceSpend strictly complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, alongside global privacy principles:

• We process your digital personal data exclusively for the specified, lawful purposes outlined in this policy.
• You maintain the fundamental rights to consent, withdraw consent, access, rectify, and erase your personal data at any time.
• We do not sell, rent, or monetize your personal or financial data to third-party advertisers, data brokers, or commercial syndicates.
• We act as the Data Fiduciary under the DPDP Act for the personal data collected within VoiceSpend.
• You have the right to nominate a representative to exercise your data rights and lodge grievances with the Data Protection Board of India.

3 Information We Collect

3.1 Information You Provide Directly

• Account Information: Name, email address, and optional avatar image when creating an account.
• Financial & Expense Data: Expense amounts, merchant names, spending categories, notes, payment types (e.g. Cash, Credit Card, UPI), timestamps, and receipts entered manually or by voice.
• User Preferences: Home currency (e.g., INR, USD, EUR, GBP), regional formatting, monthly budget thresholds, and reminder alert settings.

3.2 Information Collected Automatically

• Device Information: Device model, operating system version (iOS/Android), unique device identifier (UUID), and application version for stability and license enforcement.
• Usage & Diagnostics: Anonymized crash logs, error traces, and feature interaction metrics to optimize performance.
• Voice Input: When you tap the microphone button, audio waveforms are streamed securely and processed in real time solely to extract transaction entities (amount, category, merchant). We do not retain raw voice audio recordings on our servers.

3.3 Information from Third-Party Sign-In

If you choose to authenticate via Google, Apple ID, Facebook, or Microsoft:

• We receive your name and verified email address as permitted by your provider privacy settings.
• A unique cryptographic authentication token is exchanged to associate your account.
• We never receive or store your third-party account passwords.

3.4 Payment & Subscription Information

• In-app subscriptions (VoiceSpend Pro & Max) are securely billed and processed exclusively by the Apple App Store (In-App Purchase) and Google Play Store (Google Play Billing) through our subscription infrastructure (RevenueCat).
• We never collect, store, or process your credit/debit card numbers, UPI PINs, or banking credentials.

4 How We Use Your Information

We process your personal information only under valid legal bases under the DPDP Act 2023 and GDPR:

5 Microphone and Camera Access Permissions

• Microphone Permission: Used solely to capture your spoken sentence when you tap the voice logging button. Audio is converted into transaction data in real time and is immediately discarded. We do not maintain a repository of user voice clips.
• Camera & Photo Library Permission: Used solely when you choose to photograph a physical receipt or upload an invoice slip for optical character recognition (OCR). Captured images are processed to parse vendor, line items, and totals.
• All permissions are opt-in and requested at the moment of feature usage. You can revoke camera and mic permissions at any time via your iOS or Android device Settings.

6 Data Sharing and Disclosure

We do not sell, rent, or trade your personal or financial data. Disclosures are limited strictly to:

• Authorized Service Providers: Firebase (for reliable cloud database sync, push notifications, and crash diagnostics) and RevenueCat (for cross-platform subscription entitlement validation). These vendors are bound by strict Data Processing Agreements. Our core AI voice parsing and OCR models run on our own secure private infrastructure.
• Authentication Partners: Apple, Google, Microsoft — strictly for verifying login tokens.
• Statutory & Law Enforcement: If mandated by a court order, subpoena, or competent governmental authority under Indian law.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of BWJ Tech Solutions Private Limited, with advance notice provided to all registered users.

7 Data Retention and Account Deletion

• Your account data and transaction history are retained only as long as your account remains active.
• You have the permanent right to delete your VoiceSpend account at any time directly within the mobile application (Settings > Account > Delete Account) or by emailing support@bwjts.net.
• Upon account deletion, all personal profile information, transaction records, and cached receipts are permanently purged from our active databases within 30 days.

8 Data Security Measures

We maintain comprehensive technical, cryptographic, and operational safeguards to protect your data:

• End-to-end transport layer encryption (TLS 1.3 / HTTPS) for all data transferred between your mobile device and our cloud servers.
• Hardware-backed biometric authentication (Apple Face ID, Touch ID, Android BiometricPrompt) locking the app locally on your device.
• AES-256 encrypted local storage for cached offline transaction ledgers.
• Strict role-based least-privilege administrative access protocols.

9 Children’s Privacy

VoiceSpend is designed for personal financial management and is not directed at children under the age of 13 (or 18 where required by applicable local jurisdiction). We do not knowingly collect personal data from minors. If you discover that a child has provided us personal data without parental consent, please alert us at support@bwjts.net so we can remove the records immediately.

10 Your Rights Under DPDP Act and GDPR

Regardless of your geographic location, VoiceSpend provides you with comprehensive data control rights:

• Right to Access: Request a complete summary of the personal data and expense records we hold about you.
• Right to Correction & Rectification: Update or correct incomplete, outdated, or inaccurate personal information.
• Right to Erasure ("Right to be Forgotten"): Request immediate, permanent deletion of your profile and data.
• Right to Data Portability: Export your full transaction history anytime into standard CSV or PDF formats directly within the App.
• Right to Withdraw Consent: Revoke consent for analytics or marketing notifications at any time without penalization.
• Right to Nominate: Under the DPDP Act 2023, nominate an individual to exercise your rights in the event of incapacity or demise.

To exercise any data right, submit a request to support@bwjts.net with the subject "Data Rights Request". We resolve all verified requests within 30 days.

11 Cross-Border Data Transfers

While BWJ Tech Solutions Private Limited operates in India, certain certified infrastructure services (such as Firebase and RevenueCat) maintain distributed servers in India, the European Union, and the United States. All cross-border data transmissions comply with the standard contractual clauses and DPDP Act provisions.

12 Third-Party Links and Integrations

The App may include authentication links to Apple, Google, or Microsoft. We do not control and are not responsible for the privacy practices of external websites. We encourage you to review their terms upon interaction.

13 Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect app upgrades or statutory updates. Material changes will be accompanied by an in-app notice or email notification prior to becoming effective. Your continued use of VoiceSpend following revisions indicates your acceptance.

14 Grievance Redressal Officer

Pursuant to Section 12 of the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, 2021, the designated Grievance Officer is:

15 Contact Information

For any privacy-related questions, account deletion requests, or data protection clarifications, please contact:

BWJ Tech Solutions Private Limited
Hyderabad, Telangana, India
Official Support: support@bwjts.net
Website: https://voicespend.ai