Privacy Policy

Effective Date: January 26, 2026
Last Updated: February 12, 2026

FulCent (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”) and related services (collectively, the “Services”).

By using FulCent, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: You may provide additional information such as a profile picture and display name.
• Workspace Data: Information about workspaces you create or join, including workspace names, descriptions, types (personal or business), and settings.
• Transaction Data: Financial transactions, notes, bills, budgets, inventory items, and related metadata you create within workspaces.
• Communication Data: Messages, notes, and other content you share within the App.
• Payment Information: When you purchase a subscription, payment processing is handled by Apple (via App Store) or Google (via Google Play). We do not store your credit card or payment details directly.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: How you interact with the App, including features used, screen views, and time spent in the App.
• Log Data: IP address, browser type, access times, and pages viewed (for web-based features).
• Location Data: We do not collect precise geolocation data. Any location-related features are optional and require your explicit consent.

1.3 Information from Third Parties

• Social Sign-In: If you sign in using Apple, Google, or other third-party authentication services, we receive basic profile information (name, email, profile picture) as permitted by that service.
• Analytics Services: We use third-party analytics tools (such as Expo Analytics) to understand usage patterns and improve our Services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: To operate the App, manage your account, and deliver the features you request.
• Process Transactions: To record, track, and manage financial transactions, bills, budgets, and inventory within workspaces.
• Communication: To send you service-related notifications, verification codes, updates, and customer support responses.
• Personalization: To customize your experience, including theme preferences and workspace settings.
• Security and Fraud Prevention: To detect, prevent, and address technical issues, unauthorized access, and fraudulent activity.
• Analytics and Improvement: To analyze usage trends, improve App performance, and develop new features.
• Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of our users.
• Marketing (with consent): To send promotional materials about new features, updates, or offers (you can opt out at any time).

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

3.1 With Your Consent

We may share your information with third parties when you explicitly consent, such as when you invite other users to join a workspace.

3.2 Within Workspaces

Information you share within a workspace (transactions, notes, bills, etc.) is visible to other members of that workspace. You control who you invite and what information you share.

3.3 Service Providers

We work with trusted third-party service providers who assist us in operating the App, including:

• Supabase: Database and authentication services (data stored securely with encryption).
• RevenueCat: Subscription and in-app purchase management. Handles payment validation and subscription status across iOS and Android platforms.
• Resend: Email delivery for verification codes and notifications.
• Apple: Payment processing for in-app subscriptions (App Store). If you use Apple Sign-In, we receive your name and email as permitted by their authentication service.
• Google: Payment processing for in-app subscriptions (Google Play). If you use Google Sign-In, we receive your name, email, and profile picture as permitted by their OAuth service.
• Expo: Mobile app development and analytics tools.

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Protect the rights and safety of our users

3.5 Business Transfers

If we undergo a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change and provide options regarding your data.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest using AES-256 encryption.
• Secure Authentication: Passwords are hashed and salted; we support multi-factor authentication.
• Access Controls: Role-based permissions ensure only authorized users can access workspace data.
• Regular Audits: We conduct security audits and monitor for vulnerabilities.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained until you delete your account.
• Transaction Data: Retained for the duration of the workspace’s existence, or until you delete specific transactions (where deletion is allowed by workspace policies).
• Archived Workspaces: Data is retained but not actively accessible. You can restore or permanently delete archived workspaces.
• Backup Data: Backups may be retained for up to 90 days for disaster recovery purposes.
• Legal Compliance: Some data may be retained longer if required by law (e.g., financial records).

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Correction

You can access and update your account information and workspace data directly within the App under Settings.

6.2 Data Portability

You can export your workspace data (transactions, bills, budgets, inventory) in CSV or JSON format from the App.

6.3 Deletion

You can delete your account and associated data at any time by contacting us at support@fulcent.com. Note:

• Deleting your account will remove your personal data, but some data may persist in backups for up to 90 days.
• If you are a member of a workspace, your contributions (transactions, notes) may remain visible to other members unless you delete them before leaving.

6.4 Opt-Out of Marketing

You can opt out of promotional emails by clicking “Unsubscribe” in any marketing email or by adjusting your notification settings in the App.

6.5 Do Not Track

We do not currently respond to “Do Not Track” signals from browsers, as there is no universal standard for handling such requests.

6.6 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@fulcent.com.

6.7 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes:

• Performance of a contract (to provide the Services)
• Legitimate interests (to improve and secure our Services)
• Consent (for optional features and marketing)
• Legal obligations (to comply with applicable laws)

7. Children’s Privacy

FulCent is not intended for use by individuals under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

If you believe your child has provided us with personal information, please contact us at support@fulcent.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have data protection laws that differ from those in your jurisdiction.

We ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Compliance with frameworks like the EU-U.S. Data Privacy Framework (where applicable)
• Encryption and secure data transfer protocols

9. Third-Party Links and Services

The App may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or App features. We will notify you of significant changes by:

• Posting the updated policy in the App with a new “Last Updated” date
• Sending an in-app notification or email (for material changes)

Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

12. Additional Information

12.1 Local NLP Processing

FulCent uses on-device natural language processing (NLP) to suggest transaction types, categories, and amounts based on your input. This processing happens locally on your device and does not send your text to external servers.

12.2 Biometric Authentication

If you enable biometric authentication (Face ID, Touch ID, or fingerprint), this data is stored securely on your device and is never transmitted to our servers. We only receive a confirmation that authentication was successful.

12.3 Workspace Audit Logs

For business workspaces with approval workflows enabled, we maintain audit logs of transaction approvals, rejections, and modifications. These logs are visible to workspace admins and are retained for compliance and accountability purposes.

---

Thank you for trusting FulCent with your financial data. We are committed to protecting your privacy and providing a secure, reliable service.