Privacy Policy

1. Our position

Cardinale Group makes software that people trust with personal data — in some cases the most sensitive data they have. We treat it that way across everything we build.

We do not sell your personal data. We do not share it with advertisers. We do not use the data you give one of our apps to target you with advertising anywhere.

We also hold no credentials for your bank or any other third-party account, because our Services do not connect to them.

2. What we collect

Across the Services we collect the following categories of data. Not every app collects every category — each one asks only for what it needs to do its job.

• Account data — your name, email address, password hash, and settings.
• App data — what you enter into an app, and anything you choose to import into it. You decide what goes in; nothing is collected from a third party on your behalf.
• Usage data — how you interact with the product, such as features used and pages viewed, so we can find faults and decide what to improve.
• Device and log data — IP address, device and browser type, and timestamps, recorded for security and diagnostics.
• Support data — what you tell us when you contact us.

3. Why we use it

We use your data only for these purposes:

• to provide the Service you asked for, and to produce the output it exists to produce
• to keep your account secure and to detect fraud and abuse
• to provide support when you contact us
• to improve our products, using aggregated or de-identified data wherever that is sufficient
• to meet legal, tax, and regulatory obligations

4. Automated processing and AI

Several of our Services use automated systems, including large language models, to organise your data and generate observations from it.

Where a third-party model provider processes your data on our behalf, we do so under a contract that prohibits them from using it to train their general-purpose models.

Automated output is informational. It does not produce legal effects for you and it is not a substitute for professional advice. You can ask us to review an automated result by writing to [email protected].

5. Who else sees your data

We share data only with processors that help us run the Services, each under contract and only to the extent they need it:

• cloud hosting and storage providers
• model providers, for the automated features described above
• analytics and error-monitoring providers
• payment processors, if you buy a paid plan — they receive payment details, and we do not store your full card number

6. International transfers

Your data may be processed in countries other than your own. Where it is, we rely on a lawful transfer mechanism such as standard contractual clauses or an adequacy decision.

7. How long we keep it

We keep your data for as long as your account is open. When you delete your account we delete or irreversibly anonymise your personal data within 90 days, except where we must retain records longer to meet a legal, tax, or accounting obligation.

Backups are purged on their own rotation, which may extend this by a short period.

8. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive a portable copy.

Exercise any of these by writing to [email protected]. We will respond within the period required by applicable law. If you are unhappy with our response you may complain to your local data protection authority.

9. Security

We encrypt data in transit and at rest, restrict internal access to those who need it, and log administrative access.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as required by law.

10. Cookies

We use cookies that are strictly necessary to run our sites and keep you signed in. Where we use any non-essential cookie, we ask for your consent first and you can withdraw it at any time.

11. Children

The Services are not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, write to [email protected] and we will delete it.

12. Changes and contact

We will post any change to this policy here and, if the change is material, tell you directly before it takes effect.

Data controller: Cardinale Group, V/43, Spinning Mill Road, Kerala 670672, India. Contact: [email protected].