Privacy Policy

Introduction

EZer ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

We collect the following types of information:

• Account Information: Email address and name when you create an account
• Financial Data: Expense and income entries you manually add to the app
• Goals Data: Savings goals and fund allocations you create
• Budget Data: Budget categories and limits you set
• Usage Data: How you interact with the app to improve our service

How We Use Your Information

We use your information to:

• Provide and maintain the EZer service
• Display your financial data within the app
• Generate analytics and insights about your spending
• Sync your data across devices (if you enable cloud backup)
• Send important service notifications

Data Storage & Security

Your financial data is stored locally on your device by default. If you enable cloud backup:

• Data is encrypted with AES-256 encryption before upload
• We use secure cloud infrastructure (Google Firebase)
• Data is encrypted both in transit and at rest
• Data on your phone is encrypted (AES-256), and the details of shared household items are encrypted on your phone before they are uploaded. Some details are stored on our servers in a form we could read: household and member names and roles, dates of shared items, AI parsing results (unless you turn the cache off) and the backup encryption key.

Crash Reporting

We collect anonymous crash reports and non-fatal error logs under our legitimate interest in keeping the app stable (GDPR Article 6(1)(f); equivalent legal bases under DPDPA and similar frameworks). These reports help us identify and fix bugs quickly. Reports include:

• Crash stack traces and error context
• Device model, operating system version, and app version
• Approximate region (derived from IP; the IP itself is not stored)

We never include your transactions, balances, names, or other personal information in crash reports. You can disable crash reporting at any time in Settings → Privacy → Crash Reporting.

What We Don't Do

Seus Direitos (LGPD)

Under Brazil's LGPD, you have the following rights:

• Confirmation: Confirm whether we process your data
• Access: Access your personal data
• Correction: Request correction of incomplete or inaccurate data
• Deletion: Request deletion of unnecessary data
• Portability: Request data portability

To exercise these rights, contact us at privacy@ezerapp.com

Data Retention

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from within the app.

Children's Privacy

EZer is intended for adults and is not intended for anyone under 18. We do not knowingly collect information from anyone under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

AI Statement Parsing (EZer Plus, optional)

AI statement parsing turns a bank or credit card statement that you choose (PDF, image or CSV) into transactions. It is off until you give consent in the app, and you can withdraw consent at any time in Settings → Privacy Dashboard. All other features work without it.

The app sends the statement to our server, which sends its content, with the country and currency codes, statement type and your category names, to our AI provider: Anthropic (Claude), in the United States. Your name, email and account ID are not sent to Anthropic, and no other AI provider receives your statement. Anthropic may keep what it receives for a limited period (for example, up to 30 days) for abuse monitoring.

The statement file is not stored on our servers. The parsed result is kept in our database, linked to your account, so the same statement is not parsed and charged again; you can turn this off in Settings → Security Settings, and Delete All Data removes it.

Household Sharing (EZer Plus, optional, Android)

In the Android app, up to 6 people can share transactions, budgets, goals and bills, split bills and settle up as a household. Every member needs EZer Plus and must sign in with Google or Microsoft, and you join only through an invite from a member. Once you join, what you record is shared with the household by default; in Settings → Household you can exclude categories, hide accounts or stop sharing single items. Only the other members of your household see your shared items.

The details of shared items are encrypted on your phone before upload: amounts, descriptions, merchants, notes, categories and other details are encrypted on your phone (AES-256-GCM) with a household key that reaches each member only in encrypted form, so our servers cannot read them under normal operation. Members' phones exchange this key automatically with any active member the server lists, and EZer does not yet offer a way for members to verify each other's keys. To run the household, our server stores the household name, each member's name, role and account ID, and the date, type and status of each shared item, in Google Cloud Firestore in India (Mumbai, asia-south1); the household server functions run in the same region. When you leave you can delete the items you shared, the owner can delete the household, and Delete All Data deletes your shared items and any household you own; bill splits, settle-ups and reimbursements with other members stay, without your name, because they are the other member's record too.

International Data Transfers

Data held on our servers is processed by Google Cloud (Firebase). Our database is in India (Mumbai, asia-south1). Household sharing functions run in India (asia-south1); AI statement parsing, subscription and purchase functions run in the United States (us-central1). AI statement parsing also sends statement content to Anthropic in the United States. Where your data is transferred outside your country, we rely on the European Commission's Standard Contractual Clauses (and, for UK users, the UK International Data Transfer Addendum) included in Google's Cloud Data Processing Addendum and Anthropic's Data Processing Addendum. You can ask for a copy at privacy@ezerapp.com.

Full details: Android privacy policy · iOS privacy policy

Automated Decision-Making (GDPR Art. 22)

You have the right not to be subject to decisions based solely on automated processing. EZer's AI categorization and parse results are recommendations; you can always review, edit, or reject them before importing. You can request human review by contacting support@ezerapp.com.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@ezerapp.com