We are committed to protecting your privacy. This policy explains how DebtDone (หนี้หมด) collects, uses, and safeguards your personal data in accordance with Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

1.1 Information You Provide Directly

• Name and email (when signing up or contacting us)
• Debt data: name, type, balance, interest rate, monthly payment, due day
• Payment history (for Pro subscribers)

1.2 Automatically Collected Information

• Usage data: Features used, time spent
• Device data: Operating system, device model
• Purchase data: Pro subscription records for entitlement management

2. How We Use Your Information

• Calculate and display your personalized debt-free date
• Sync debt data across devices via Supabase
• Manage Pro subscription entitlements
• Send payment due reminders you have opted into
• Improve the app experience

3. Sharing Data with Third Parties

We do not sell your personal data. We may share data with:

• Supabase — for data storage and sync
• Google Play / Apple App Store — for payments and subscriptions
• Google Sign-In — for authentication (optional)

4. Data Retention

We retain your personal data for as long as necessary to provide the service, or until you delete your account.

5. Your Rights Under PDPA

• Access: Request to view your data
• Rectify: Request correction of inaccurate data
• Erase: Delete your account and all data from the Account screen in the app
• Object: Object to data processing
• Withdraw consent: Withdraw consent at any time
• Data portability: Request a copy of your data

6. Data Security

Your data is stored on Supabase servers with encryption at rest and in transit. We use Row Level Security (RLS) to ensure you can only access your own data.

7. Policy Changes

We may update this policy from time to time. Changes take effect immediately upon publication.