🔒

Privacy Policy

How we handle your data

Last Updated: Version 1.0

This Privacy Policy describes how Aeterna ("we", "our", or "us") collects, uses, and protects your personal information when you use our website and mobile application. By using Aeterna, you agree to the practices described in this policy.

📊 Information We Collect — Website

When you visit our website, we collect minimal information necessary for operation and security:

  • Cookies: We use a session cookie to manage admin authentication. No tracking cookies, analytics cookies, or third-party cookies are used. The session cookie is strictly necessary for the admin panel to function.
  • Feedback Form Data: When you submit feedback, we collect your name, email address, message content, and optionally a screenshot. This data is stored in our database and used solely to respond to your feedback.
  • Server Logs: Standard server logs automatically record your IP address, browser user-agent string, and the timestamp of your visit. These logs are used exclusively for security monitoring and troubleshooting. They are not shared with any third party.

📱 Information We Collect — App

The Aeterna mobile application is designed to be offline-first. All your financial data is stored locally on your device. The app collects:

  • Financial Transactions: Income, expense, and transfer records you enter manually. These never leave your device unless you explicitly back up to Google Drive.
  • Account Information: Bank accounts, credit cards, and investment accounts you create for tracking. All stored locally.
  • Budgets & Goals: Budget allocations, savings goals, and progress data you set up. Stored locally.
  • User Profile: Your name, date of birth, retirement age, salary, and financial preferences — all optional and stored locally.
  • SMS Data (Android, Optional): With your explicit permission, the app can read SMS messages to auto-detect bank transactions. This data is processed entirely on your device and is never transmitted anywhere. You can revoke this permission at any time through Android settings.
  • Receipt Photos (Local): Photos you take or select for transaction receipts are stored locally on your device. They are never uploaded to any server.

📕 How We Use Information

Website

  • To respond to your feedback, questions, and support requests
  • To monitor and improve website security
  • To maintain and improve the website experience

App

  • To provide expense tracking, budget management, and financial reporting features
  • To calculate net worth, generate financial projections, and track goal progress
  • To create PDF reports and CSV exports at your request

🗃 Data Storage

Website Feedback Data: Feedback submissions are stored in our MySQL database. This includes your name, email, message, and any optional screenshot. Screenshots are stored as files on our server. We retain this data as long as needed to respond to and resolve your feedback.

App Data: All app data is stored 100% locally on your device in an SQLite database. No app data is ever stored on our servers. The app does not have any cloud backend — your financial data belongs entirely to you.

🔎 Why We Store What We Store

Every piece of data collected serves a specific purpose. Here is a detailed breakdown:

  • Name & Email (Feedback): Required to respond to your feedback. Without these, we cannot reply to your inquiry or acknowledge your submission.
  • Screenshot (Feedback): Optional — helps us understand visual issues or bugs you may be experiencing.
  • IP Address (Logs): Used for security monitoring, rate limiting, and preventing abuse. Automatically deleted from active logs over time.
  • Transaction Data (App): Stored so you can track your spending, generate reports, and analyze your financial habits. This is the core functionality of the app.
  • SMS Data (App): Used only to auto-populate transaction fields — saving you manual entry time. Processing is 100% on-device with no data transmission.
  • Receipt Photos (App): Stored so you can attach visual proof to transactions for your own reference.

📸 App Permissions Explained

  • SMS (Read): Used solely for auto-detecting bank transaction SMS. The app reads incoming SMS, identifies transaction patterns, and pre-fills the transaction form. All processing happens on-device. No SMS data is ever sent anywhere. You can deny this permission and the app will still work fully.
  • Camera/Gallery: Used to capture or select receipt photos to attach to transactions. Photos are stored locally in the app's data directory. They are never uploaded.
  • Biometric (Fingerprint/Face): Used for the optional app lock feature. Biometric data is handled entirely by your device's secure hardware — the app never receives or stores biometric data.
  • Internet: Required only for the optional Google Drive backup feature. The app works fully offline without internet access. Internet is never used for tracking, analytics, or data collection.

★ Google Drive Backup

Aeterna offers an optional Google Drive backup feature. If you choose to enable it:

  • Your encrypted database file is stored in Google Drive's hidden appDataFolder — a private area that only the Aeterna app can access. It is not visible in your main Google Drive file list.
  • Backups are user-initiated. The app never backs up automatically without your explicit action (except for the configurable auto-backup timer you can enable in settings).
  • You can delete your backup at any time from the app's backup settings.
  • We have no access to your Google Drive or your backup files — they are stored under your personal Google account.

🛡️ Data Security

We take data security seriously. Here are the measures we employ:

  • Website: All database queries use PDO prepared statements to prevent SQL injection. Passwords are hashed using bcrypt. Admin forms are protected with CSRF tokens. All user output is escaped with htmlspecialchars(). Login attempts are rate-limited (5 attempts triggers a 15-minute lockout). Sessions use HTTP-only, SameSite=Strict cookies with a 30-minute timeout.
  • App: The app database is stored in your device's private app data directory, inaccessible to other apps. Optional biometric/PIN lock adds an extra layer of protection. No data is ever transmitted over the network unless you explicitly use Google Drive backup (which uses OAuth 2.0 and HTTPS).

✋️ Your Rights

You have full control over your data:

  • Access: You can view all your app data directly within the app at any time. For website feedback data, contact us and we will provide what we have stored.
  • Export: The app allows you to export your data as CSV or PDF at any time, with no restrictions.
  • Delete: For app data, simply uninstall the app — all local data is removed. For website feedback, contact us and we will delete your feedback data from our systems.
  • Withdraw Consent: You can revoke app permissions (SMS, camera, etc.) at any time through your device settings without affecting core functionality.

📅 Data Retention

Website Feedback: We retain feedback data indefinitely or until you request its deletion. Server logs are retained for up to 90 days for security purposes.

App Data: App data remains on your device until you delete it within the app or uninstall the application. We do not have access to your app data and cannot delete it — it is entirely under your control.

👷 Children's Privacy

Aeterna is not intended for children under the age of 13. We do not knowingly collect any personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete the information.

📝 Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated version number and date. We encourage you to review this policy periodically. Continued use of the website or app after changes constitutes acceptance of the updated policy.

📧 Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

info.kartikkumar@gmail.com