Privacy Policy

1. Introduction

Rayma AI ("we," "us," "our," or "Company") operates the Rayma AI app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using the Service, you agree to this Privacy Policy. If you disagree, please do not use the Service.

2. Information We Collect

Account Information

• Name, email address, password (hashed)
• Profile customization (display name, avatar, preferred language, currency, timezone)
• Account preferences (theme, compact mode, pay schedule)

Financial Data

• Loans: name, lender, balance, interest rate, payment amount, due dates, category
• Bills: name, amount, frequency, due dates, category, merchant names
• Bank accounts: name, institution, account type, balance (NOT full account numbers — only last 4 digits if at all)
• Transactions: date, description, amount, category, type (debit/credit)
• Income: weekly/monthly income amounts and dates
• Payments: payment history linked to loans/bills
• Savings goals, assets, net worth snapshots
• Scanned documents and uploaded receipts

Payment Data (Stripe)

• Token purchase history (amounts, dates, payment status)
• Promo code redemptions
• Stripe does NOT share credit card details with us

Usage Analytics

• Pages visited, features used, time spent
• Errors encountered (for debugging)
• Device type, browser, operating system

3. How We Use Your Data

• Service Delivery: Track loans, bills, income, and net worth
• Rayma AI Advisor Analyze your financial data to provide personalized insights and suggestions
• Recurring Payment Detection: Identify recurring transactions and suggest bills for your approval
• Account Security: Prevent fraud, enforce our Terms of Service
• Service Improvement: Analyze usage to fix bugs and improve features
• Legal Compliance: Comply with tax, financial, and data protection laws
• Communication: Send you service updates, password resets, support responses (no marketing without consent)

We do NOT: Sell personal data to advertisers or data brokers. Share financial data with third parties (except as required by law or for service delivery via Plaid/Stripe).

4. Data Retention & Deletion

• Active Accounts: Data is retained as long as your account is active.
• Deleted Accounts: Upon account deletion, all personal, financial, and transactional data is permanently removed within 30 days.
• Backups: Deleted data may persist in encrypted backups for up to 90 days for disaster recovery, then permanently destroyed.
• GDPR Right to Erasure: EU residents can request data deletion at any time. Use the "Delete My Account" feature in Settings or email support.
• CCPA Right to Deletion: California residents can request deletion via the app. We will confirm deletion within 45 days.

5. Your Rights

For all users:

• Access your data: View all your financial records in the app
• Update your data: Edit loans, bills, profile information anytime
• Delete your account: Remove all personal data via Settings → Delete My Account
• Opt-out of analytics: Adjust tracking preferences (where applicable)

For GDPR users (EU):

• Right to Access: Request a copy of all your data
• Right to Erasure ("Right to be Forgotten")
• Right to Rectification: Correct inaccurate data
• Right to Data Portability: Export your data in machine-readable format (CSV)
• Right to Object: Opt out of certain processing

For CCPA users (California):

• Right to Know: What personal information is collected
• Right to Delete: Request deletion of collected data
• Right to Opt-Out: Opt out of "sale or sharing" of personal information
• Right to Correct: Correct inaccurate personal information
• Right to Non-Discrimination: No penalty for exercising rights

To exercise these rights, email rayma.app2026@gmail.com with your request. We will respond within 30 days.

6. Security

• All data is transmitted using HTTPS encryption
• Passwords are hashed and never stored in plain text
• Bank credentials are never stored on our servers
• We conduct regular security audits and penetration testing
• If a breach occurs, affected users will be notified within 30 days

No system is 100% secure. While we use industry-standard protections, we cannot guarantee absolute security. Use a strong password and enable two-factor authentication if available.

7. Third-Party Services

We may share data with trusted partners to provide the Service:

• Stripe (Payments): Processes token purchases. Stripe Privacy Policy
• Base44 (Backend Infrastructure): Hosts our database and authentication. Base44 complies with GDPR and uses encrypted storage.
• Analytics (Optional): We use aggregated, non-personal analytics to understand usage patterns.

We do not sell, trade, or rent your personal information to any third party for marketing purposes.

8. Children's Privacy

Rayma AI is not intended for users under 13 years old (COPPA) or under 16 in the EU. We do not knowingly collect data from children. If we discover we've collected data from a child, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email or in-app notification. Your continued use of the Service after changes constitutes acceptance.

10. Contact Us

For privacy questions, data requests, or complaints, contact:

Financial Disclaimer