Privacy Policy

Last updated: November 2026

This translation is provided for convenience. In case of any discrepancy, the Spanish version prevails.

At Pru-dentia (developed by Multisoftware), we take the protection and privacy of your data with the utmost seriousness. This document explains what information we collect, how we protect it and the rights you have over it when you use our mobile apps (Android and iOS) and our web portal.

1. Who we are

Pru-dentia is a personal and collaborative financial management platform developed by Multisoftware. This policy governs the processing of information collected through all our access channels (Google Play Store, Apple App Store and the web version). This policy explains how we process data. Where applicable law requires consent or authorization, it will be requested separately before processing; use of the Service is also subject to our Terms of Use.

2. Information we collect

To ensure security and cloud synchronization, access is provided through secure delegated authentication:

• Google Sign-In: We receive your unique Google user identifier, public name, email address and public profile photo URL.
• Apple Sign-In: We receive your unique Apple user identifier, name and email address (including Apple's anonymous private email relay if you choose to enable it).
• Personal finance data you enter: Transactions (income, expenses, transfers), custom categories, payment methods/wallets, budgets, contacts for debts or splits, and receipt photos you choose to attach.
• Technical device information: Push notification tokens (Firebase Cloud Messaging / APNs) for sending operational notices and synchronization. For installation metrics, a random UUID stored locally and the broad operating system category; we do not collect hardware identifiers, model or device name.

Technical and usage metrics: while you are signed in we collect permitted events of app opens and feature use (widget, form, camera, dictation and recurrences), platform (iOS, Android or web), version, date and time of the last daily event, general origin of transactions and the state of three preferences: direct dictation, direct recurrences and display of the original currency. On native clients we also count known installations by broad system category when the app is opened. If you use the artificial intelligence features, we also record how much they consume per day (number of tokens and requests for chat and for dictation or camera), to measure their cost.

We associate these records with a pseudonymized identifier derived from your account's internal ID. They do not directly send your email or name, but they allow activity from the same account to be linked, which is why they are not described as anonymous data. The random installation UUID is hashed before being stored; we do not collect hardware identifiers, model or device name. They do not include amounts, descriptions, audio, transcriptions, images or free text.

We use them to measure activity and adoption in aggregate and to operate and improve the Service; they are not sold or used for behavioral advertising. Access to metrics is restricted. We also compute global counts of active recurrence rules and current Pro subscriptions from their states, without including transactions or financial amounts. Records are kept in Firebase for up to 400 days, plus the daily purge interval (up to one additional day), and are deleted when the account deletion is processed. This does not extend the retention of your financial data. Processing may be subject to additional rights and notices depending on your country of residence.

We do not collect or request: plain-text passwords, full credit or debit card numbers, online banking credentials, real-time geographic location or your full contact list.

3. How we use your information

We use the data collected strictly for operational and service purposes:

• To authenticate you securely and associate your finances with your account identifier privately and individually.
• To synchronize your financial records in real time and in offline mode (offline-first) across your authorized devices.
• To enable collaboration in shared lists exclusively with the participants you voluntarily invite.
• To send you relevant operational notifications (budget reminders, recurrences or confirmation of transaction proposals).
• To manage the status and validity of your Pru-dentia Pro subscription.
• To measure activity and feature adoption in aggregate, operate the Service and guide product improvements, through the technical metrics described above.

4. Voice Dictation, WhatsApp Channel and Artificial Intelligence Assistant

If you choose to use dictation or analyze a receipt, the app sends the selected audio or images over an encrypted connection to our Cloud Functions and to Gemini on Google Cloud Vertex AI to prepare a draft transaction. You review and confirm the draft. If you link the WhatsApp bot, what you send it is processed in the same way to record the transaction.

• Audio: the recording is kept temporarily on the device so it can be sent, and the app attempts to delete that local file after reading it. The audio is processed on Vertex AI; Google may temporarily retain request data to operate and protect the service, in accordance with the applicable configuration and terms. Google's documentation describes in-memory caching of up to 24 hours and possible logging for abuse monitoring; for this reason we do not promise that the provider's processing is instantaneous or zero-retention (Vertex AI retention details).
• Receipt photos: they are processed to extract information and may be kept as attachments to the transaction you confirm. When synchronized, they are uploaded to Firebase Storage so you can view the receipt alongside the transaction. If the transaction belongs to a shared list, authorized participants can access its attachments according to that list's rules. There is no single retention period stated for these attachments.
• WhatsApp channel (Meta Cloud API): if you voluntarily link your number to the official Pru-dentia bot, we store that number associated with your account to recognize your messages and apply your logging preferences. The text messages, voice notes and images you send arrive through the WhatsApp Cloud API infrastructure (Meta Platforms, Inc.) and are sent to Vertex AI to extract the transaction; we do not store that audio or those images on our servers. We keep the identifier of each message, without its content, so it is not processed twice. You can unlink the number from the app, and deleting your account removes the link.
• Limited use: Pru-dentia does not use audio or images for advertising or to train public models. They are used to provide the requested feature; temporary processing by Google is also governed by the terms and practices of Google's service.

5. Subscriptions and Payment Data

For Pru-dentia Pro plans:

• Payments on the web platform are handled by Polar, which acts as our authorized reseller (merchant of record): it sells you the subscription, collects the payment and calculates, collects and remits any applicable taxes (such as VAT). We send Polar your email and an internal account identifier to link the payment to your account; Polar processes your billing and payment-method details as an independent controller.
• Purchases in the mobile apps are handled through Google Play Billing (Android) or Apple StoreKit (iOS).
• Pru-dentia does not process or store credit card numbers or security codes (CVV) on its servers; we only receive subscription status confirmation tokens to enable the corresponding benefits.

6. Security and Storage

We implement rigorous technical and organizational security standards:

• Encryption in transit: All communications between the client apps and our servers take place over secure HTTPS / TLS connections.
• Database security rules: Firestore rules limit direct client access to the owner or to authorized members of shared lists. Aggregated metrics are only queried through server functions with restricted administrative authorization; they are not published for direct reading.
• Secure on-device storage: Session tokens and local encryption keys are protected using the operating system's native secure storage (Expo SecureStore / Keychain / Keystore).

7. Third-Party Providers and Services

We work with industry-leading technology infrastructure providers that meet international privacy and security standards:

• Google Firebase / Google Cloud Platform: Authentication, Firestore database, Cloud Functions and storage (Firebase privacy).
• International processing: the Firestore database is configured in the North America multi-region (nam5) and the metrics functions run in the United States (us-central1). As a result, data may be processed outside your country; the transfer safeguards required by the relevant regulations will apply.
• Google Sign-In & Apple Sign-In: Secure sign-in services.
• Polar: Authorized reseller (merchant of record) for web subscriptions: payment, invoicing and taxes (Polar privacy).
• Google Cloud Vertex AI: Natural language processing with Gemini for transaction assistance.
• Meta Platforms, Inc. (WhatsApp Cloud API): Channel for messages, voice notes and images when you choose to record transactions through WhatsApp (WhatsApp Privacy Policy).

8. Retention and Permanent Deletion of Data

We keep each category of data only for as long as necessary for the stated purpose or as required by law. Metrics are kept for up to 400 days from when they are recorded; the daily purge may add up to one day. Deleting the account also deletes the associated metrics, without prejudice to information we must keep due to legal obligations or to resolve claims. You can request deletion of your account by either of these means:

1. From the app: Go to Settings → Account → Delete account. On confirmation, the process of deleting the profile and its associated data, including usage metrics, is carried out.
2. By email: If you do not have access to the app, you can send a request to prudentia.app@gmail.com from your registered email address with the subject "Delete account". After verifying your identity, we will process the request within the applicable legal time limits; where relevant, we will let you know if a rule requires limited information to be kept.

9. Minors

The Service is not directed at children or anyone under 13, and we do not knowingly collect personal data from them. The minimum age to create an account or authorize data processing may be higher depending on the country (for example, up to 16 in some European Union countries). You must not use the Service if you have not reached the applicable minimum age, unless local law allows use with the authorization of your parent or legal guardian. If you are a parent or guardian and believe a minor has provided us with data, write to us at prudentia.app@gmail.com and we will delete it. If we detect processing of a minor's data without the required authorization, we will take steps to delete that data.

10. Changes and Contact

Nothing in this policy limits mandatory protections. Depending on the laws applicable in your country, you may have the right to request access, a copy, correction, deletion, restriction of or objection to processing, to withdraw an authorization where applicable and to lodge a complaint with the competent authority. To exercise the rights available to you, contact us at the address below; we may verify your identity before responding.

We reserve the right to update this privacy policy when necessary due to regulatory or product changes. Changes will be published on this page with the date of the last update.

For questions, requests about your data or privacy concerns, contact us at: prudentia.app@gmail.com