Privacy Policy

Offline-First & Information Processed:

Budler is offline-first and requires no account. Transactions, budgets, categories, savings accounts, goals, recurring subscriptions, and currency preferences are stored locally on your device by default.

Storage & Cloud Backup:

Premium users can enable cloud sync, which stores an encrypted backup in your own iCloud (iOS) or private Google Drive app-data folder (Android). Jogoh does not operate a backend database for your transactions and cannot access either private backup.

AI Budget Coaching (Google Gemini API):

When you request an AI coaching analysis, the figures needed (such as category totals, budget amounts, and recurring bill rules) are sent ephemerally to Google's Gemini API to generate personalized feedback. Requests are not tied to your identity, and Google processes this data as a service provider without using it to train models.

Currency Exchange Rates:

For multi-currency tracking, Budler requests published reference exchange rates from frankfurter.app. Requests contain only currency codes and dates — no personal or financial data.

Analytics & Purchases:

Budler uses PostHog for product analytics (screens viewed, feature interactions, app and device information, an anonymous device identifier, and approximate country or region inferred from network information) and for crash reports (error type and stack trace, with personal details removed from error messages). If you sign in, PostHog also links this activity to your account ID, name, and email address. RevenueCat manages subscription status. Neither service receives your transactions, budgets, or payment card details.

Information Processed & Collected:

To generate Chinese BaZi destiny charts and AI-written readings, BaZi Path processes birth details (birth date, exact birth time, gender, and city/country/timezone). For compatibility readings, you may also provide names and birth details for both individuals.

Storage & Cloud Backend:

Free charts are stored locally on your device. Purchased consumable charts ($0.99 per chart/reading), reading sessions, and generated AI readings are stored in Convex (convex.dev), a third-party hosted backend, linked to your user account ID. Firebase Authentication is used exclusively for account login (Google Sign-In and Sign in with Apple). BaZi Path does not offer recurring subscriptions.

Third-Party Data Processors:

• FreeAstroAPI (api.freeastroapi.com): Receives birth date, birth time, timezone, and country to calculate astrological chart coordinates.
• Google Gemini API (generativelanguage.googleapis.com): Generative AI service receiving calculated chart data, birth details, and (for compatibility readings) names of both individuals to write destiny and compatibility interpretations.
• Convex (convex.dev): Hosted database storing purchased charts, reading sessions, and generated readings linked to your user ID.
• RevenueCat: Validates and tracks one-time consumable purchase history on iOS and Android.
• Firebase Authentication (Google): Manages user login sessions (Google Sign-In and Sign in with Apple).
• PostHog: Product analytics and crash reports. Receives screens viewed, feature interactions, app version, platform and language, an anonymous device identifier, approximate country or region inferred from network information, and, once you sign in, your account ID and email address. Crash reports include the error type and stack trace, with personal details removed from error messages. Analytics events do not include your birth details, the names you enter, or reading text.

Note: BaZi Path does NOT use any third-party advertising SDKs.

Account, Consent Revocation & Data Deletion:

You can revoke consent and remove your data at any time via Settings > Clear All Data in the app. If you are signed in and hold purchased charts, this lets you choose between deleting Device Data (local copies only) or Backup Data (your cloud records and their local copies). Note that charts you have paid for cannot be removed from the device unless you are signed in, because deleting them also removes the cloud backup that lets you restore them. You can permanently delete your account and all stored cloud data directly in-app at Settings > Delete Account, or by emailing [email protected].

Third-Party Keyboard, Screen Reading & Screenshots:

LoveDr works as a third-party keyboard with an AI reply panel and a basic typing keyboard. LoveDr only reads a chat when you ask it to: either you tap “Read this chat” and approve Android’s screen-capture prompt each time, which takes a single image of the screen above the keyboard, or you choose a screenshot through the system photo picker. LoveDr does not read other apps in the background, use Accessibility Services, or read the clipboard automatically. Captured images and screenshots are processed in memory and are not saved.

OCR & AI Processing:

Screen captures and screenshots stay on your device. Android uses Google ML Kit and iOS uses Apple Vision to extract text locally. On iOS, prepared text is held in protected on-device storage for up to five minutes for the app-to-keyboard handoff, then cleared after insertion, explicit clearing, account change, or expiry. LoveDr sends only normalized extracted text, your selected reply goal and tone, any tweak you request (for example “shorter”), app version metadata, and request metadata to our Firebase backend so Google Gemini can generate three suggested replies. We do not send images to the backend, and the backend does not store the text, prompts, or replies.

Reply History on Your Device:

On Android, up to 50 replies you choose to insert or copy are kept in on-device Reply history, excluded from backups, until you clear them or uninstall LoveDr. On iOS, up to 20 inserted replies remain in keyboard memory for the current session and are cleared when the keyboard closes, the account changes, or you clear them. Neither history is uploaded to us.

Storage, Accounts & Purchases:

LoveDr requires an account. You can sign in with Google or email on Android, and with Apple or email on iOS, using Firebase Authentication. We receive a unique account ID and the email address or name supplied by your sign-in method; Apple’s Hide My Email may provide a relay address. We use this information to keep daily free use and heart balances with your account and prevent abuse. Anonymous app IDs created by earlier test builds may be merged into your account when you first sign in. Firestore stores usage counts, request idempotency records, your heart balance, and records of heart purchases and grants (store purchase IDs, product IDs, and amounts) only. It does not store screenshots, extracted conversation text, AI prompts, or generated replies. Hearts are consumable in-app purchases; RevenueCat processes the app user ID and purchase history to validate purchases, restores, and refunds. Google Play or the Apple App Store processes payment details; we never receive card details.

Analytics, Diagnostics & Deletion:

LoveDr uses PostHog for anonymous product analytics: companion-app screens and setup steps, and Android keyboard feature use (for example, whether you chose a screenshot, picked a tone, or inserted a reply), along with the app version, device and operating-system version, coarse error codes, crash reports from the companion app (error type and stack trace, with personal details removed from error messages), and an anonymous device identifier. The iOS keyboard does not send analytics. LoveDr does not create person profiles in PostHog and turns off IP-based location lookup. Analytics never include screenshots, extracted text, prompts, replies, clipboard content, dating-app package names, or message recipient details. You can turn analytics off at any time in the LoveDr app under Settings, which stops the app and Android keyboard from sending analytics. You can delete your LoveDr account in the app under Settings → Account → Delete account. This removes your sign-in account (name, email, and account ID), your heart balance, and your usage and request records, and any unused hearts are forfeited. We keep records of heart purchases and grants (store purchase IDs, product IDs, and amounts) for purchase and refund accounting. If you no longer have the app, you can request deletion by emailing [email protected].

Child Safety & Age Rating:

LoveDr is strictly for adults aged 18 and older. We strictly prohibit child sexual abuse and exploitation (CSAE/CSAM), grooming, and sexual solicitation of minors. Please read our dedicated LoveDr Child Safety Standards for reporting procedures and contact points.