Privacy Policy

Effective: January 1, 2027 · Developer: Andrew Boiko (sole proprietor), Kyiv, Ukraine · Contact: support@debtdrop.andrewboyko.name

Summary: your debts, amounts and plans never leave your device. There is no account, no server of ours, no advertising and no advertising identifiers. With your permission (or, outside the EEA/UK/Switzerland, unless you switch it off) the app sends anonymous usage statistics to Google Analytics for Firebase. Purchases are validated by RevenueCat.

1. Data you enter

Debts, balances, interest rates, payments, plans and settings are stored only in a database on your device. They are never transmitted to the developer or to any third party.

2. Backups

If you choose “Back up to file”, the app creates a JSON file and hands it to your device’s share sheet. Where it goes (iCloud Drive, Google Drive, e-mail, etc.) is your choice and is governed by that service’s policy. The developer never receives it.

3. Purchases

In-app purchases are processed by Apple (App Store) or Google (Google Play). To unlock Pro the app uses RevenueCat, Inc. as a purchase-validation service. RevenueCat receives an anonymous, randomly generated app user ID and the purchase receipt — no name, e-mail or financial data entered in the app. If usage statistics are on, the Firebase app-instance ID is also passed to RevenueCat so that subscription renewals and cancellations appear in the same anonymous statistics. See RevenueCat’s privacy policy.

4. Anonymous usage statistics (Google Analytics for Firebase)

To learn which features are used and where people get stuck, the app can send anonymous usage statistics to Google Analytics for Firebase, a service of Google Ireland Ltd / Google LLC acting as our processor.

What is sent: the screens you open (by type, e.g. “Plan”, never the debt shown), feature events (for example “debt added”, “payment logged”, “debt paid off”, “paywall shown”, “Pro purchased”) with coarse parameters such as the debt type, the strategy (snowball / avalanche / custom) and bucketed counts (“2–3 debts”), plus standard technical data: a random app-instance ID generated on install, app version, device model, OS version, language and approximate country/region derived from the connection. Google Analytics does not log or store IP addresses for this data.

What is never sent: names of debts, balances, interest rates, payment amounts, notes, dates of your payments, backups, your name, e-mail or any contact data. The app does not use the advertising identifier (IDFA / Android Advertising ID), the vendor identifier (IDFV) or Android ID, does not register with ad networks, has Google Signals and ad personalisation disabled, and does not combine this data with data from other apps or sell it. This is not “tracking” in Apple’s sense.

Your choice: in the EEA, the UK and Switzerland nothing is collected until you tap “Allow” on the first-run prompt (legal basis: consent, GDPR Art. 6(1)(a)). Elsewhere statistics are on by default (legitimate interest in improving the app, Art. 6(1)(f)) and you can switch them off at any time in Settings → “Anonymous usage statistics”. Switching off stops collection immediately and deletes the app-instance ID from your device.

Retention and transfers: event data is kept for 14 months, then deleted automatically. Google may process data in the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses. See Google’s privacy policy and Firebase privacy information.

5. Notifications and widgets

Payment reminders are local notifications scheduled on your device. Widgets read a summary from storage shared only between the app and its widget on the same device.

6. Children

DebtDrop is intended for adults (18+) and is not directed at children.

7. Your rights and deleting your DebtDrop data

Your debts and plans: in DebtDrop open Settings → “Erase all data”, or delete the app — nothing is stored on our side. Usage statistics are not linked to your identity, so we cannot look up or hand over “your” records; switching statistics off (or deleting the app) removes the identifier and stops collection, and stored events expire after 14 months. To request deletion of any other data, or for access or objection requests, email support@debtdrop.andrewboyko.name with the subject “DebtDrop data deletion” — we reply within 30 days. Purchase records are kept by Apple, Google and RevenueCat as required for billing and tax law. You also have the right to complain to your data protection authority.

8. Changes

We will update this page and the effective date if this policy changes.