1. Information We Collect

We collect information you provide directly to us, as well as information generated through your use of the F-Cube (stylized as F³) platform.

Account Information

Name and email address (provided during sign-up or via OAuth)
Profile picture (if provided via OAuth or uploaded by you)
Authentication credentials managed securely through Supabase Auth

User-Entered Content

Expenses, splits, and payment records you enter
Group and circle memberships and related activity
Documents, goals, reminders, and to-do items you create
Notes and any other content you voluntarily submit

Usage and Technical Data

Log data such as IP address, browser type, and pages visited
Device information including operating system and screen size
Error and crash reports (via Sentry) to help us improve stability
Push notification tokens (if you enable notifications)

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the F-Cube platform
Authenticate your identity and manage your account
Process and display expenses, balances, and shared data within your circles
Send transactional notifications related to your activity (e.g., expense added, settlement requested)
Respond to your support requests and communications
Detect and prevent fraud, abuse, and security incidents
Comply with applicable legal obligations

We do not use your data for advertising and do not sell your personal information to third parties.

3. Data Sharing and Disclosure

We share your information only in the following limited circumstances:

With other users in your circles: Expenses and related data you enter into a shared circle are visible to all members of that circle.
Service providers: We use Supabase (database and authentication), Sentry (error monitoring), and Razorpay (payment processing for F-Cube Pro subscriptions). These providers process data on our behalf under strict data processing agreements. Razorpay receives your payment method details and billing information solely to process subscription payments.
Legal requirements: We may disclose your information if required by law, court order, or to protect the rights, property, or safety of F-Cube, our users, or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our platform.

4. Data Storage and Security

Your data is stored securely using Supabase infrastructure, which provides encrypted storage at rest and in transit (TLS). We implement row-level security (RLS) policies to ensure that users can only access data they are authorized to see.

We apply security best practices including:

HTTPS enforcement across all platform endpoints
CSRF protection on all state-changing API requests
Content Security Policy (CSP) headers to mitigate XSS
Regular security reviews of our codebase and infrastructure

No method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have the following rights with respect to your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Deletion: Request deletion of your account and associated data. You can initiate this from your account settings or by contacting us.
Portability: Request an export of your data in a machine-readable format.
Objection: Object to certain types of processing, such as marketing communications.

To exercise any of these rights, please contact us at hello@f-cube.io. We will respond within 30 days.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, financial record-keeping obligations).

Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement purposes.

7. Cookies and Tracking

F-Cube uses cookies and similar technologies to operate the platform:

Session cookies: Used by Supabase Auth to maintain your authenticated session. These are essential for the platform to function and cannot be disabled.
CSRF token cookie: A security cookie used to protect against cross-site request forgery attacks.

We do not use advertising cookies, third-party tracking pixels, or analytics cookies that track you across other websites.

8. Children's Privacy

F-Cube is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information promptly. If you believe a child under 13 has submitted personal information to us, please contact us at hello@f-cube.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, sending a notification via email or within the platform.

Your continued use of F-Cube after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

F-Cube (Oronzo LLP)

Email: hello@f-cube.io

You may also reach us through the contact form at f-cube.io.