🔐 DueCatch Privacy Policy

1. Introduction

GeoLapis LTD (“we,” “us,” “our”) values your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use DueCatch, a mobile app that helps users track money-related dates such as free trials, subscriptions, renewal dates, return windows, warranties, refunds, insurance renewals, contract end dates, and price-check reminders.

DueCatch is an informational reminder and organisation tool. It does not provide financial, legal, tax, banking, insurance, or investment advice.

2. What We Collect

• Account and App Information: app settings, plan status, anonymous/private forwarding alias, preferred currency, onboarding status, and support requests.
• Money Reminder Data: merchant names, reminder titles, categories, due dates, amounts, currencies, notes, repeat settings, reminder offsets, status, and handled/discarded state.
• Forwarded Email Data: if you forward emails to your DueCatch address, we may process email subject, sender, recipient alias, text content, and metadata needed to detect money-related dates and reminders.
• Parsed Email Results: detected merchant, amount, currency, due date, reminder category, confidence score, and supporting email evidence shown for your review.
• Device and Usage Data: app version, device type, operating system, timestamps, crash logs, diagnostic logs, and feature usage needed to operate and improve the app.
• Notification Data: reminder schedules and notification preferences used to send due-date reminders.
• Biometric Lock: Face ID or biometric unlock is handled by your device. DueCatch does not receive or store your biometric data.
• Payment and Subscription Data: if paid plans are enabled, billing status and subscription entitlement may be processed by the App Store, Google Play, RevenueCat, or another payment/subscription provider. DueCatch does not store full payment card details.

3. How We Use Your Data

• Provide your Leak Feed, reminder cards, review queue, and monthly reports.
• Parse forwarded emails to detect dates, amounts, merchants, subscriptions, free trials, return windows, warranties, refunds, renewals, and other money-related events.
• Show low-confidence imported emails for your confirmation before adding them to your active Leak Feed.
• Send local or push reminders before important due dates.
• Support currency display, app preferences, privacy settings, and account/data deletion controls.
• Improve accuracy, reliability, user experience, fraud prevention, security, and abuse detection.
• Respond to support, privacy, and data-rights requests.
• Meet legal, tax, accounting, security, and dispute-resolution obligations.

4. Email Forwarding and Receipt Capture

• Each user may receive a private DueCatch forwarding address or alias.
• You may forward receipts, free trial confirmations, renewal emails, warranty emails, return/refund emails, insurance emails, and contract emails to this address.
• DueCatch uses the forwarded email content to extract likely money-related dates and details.
• If an imported email has low confidence, DueCatch may ask you to review and correct the merchant, title, amount, currency, category, or due date before approval.
• You should not forward emails containing highly sensitive information unless necessary for the reminder you want to track.

5. Third-Party Services We May Use

We use service providers only as needed to operate DueCatch.

• Email routing providers: to receive forwarded emails, parse inbound messages, and deliver them to DueCatch systems. Examples may include SendGrid, Mailgun, Postmark, or similar providers.
• Cloud hosting and databases: to host APIs, store reminder records, process sync requests, and protect service reliability.
• AI or parsing providers: to assist with extracting merchants, amounts, dates, categories, and confidence scores from forwarded emails where enabled.
• Push notification providers: Apple Push Notification service, Firebase Cloud Messaging, Expo, or similar services may be used for reminder notifications.
• Payments and subscriptions: Apple App Store, Google Play, RevenueCat, Stripe, or similar services may process payments and subscription status if paid plans are enabled.
• Analytics and crash diagnostics: to identify crashes, errors, performance issues, and reliability problems.

We do not sell your personal data. We aim to minimize data shared with third-party providers and use only what is required for requested features.

6. No Financial Advice

• DueCatch is a reminder and organisation tool only.
• DueCatch does not provide financial, legal, tax, insurance, banking, credit, or investment advice.
• DueCatch may miss dates, parse an email incorrectly, or display incomplete information.
• You remain responsible for checking merchant terms, cancellation rules, return windows, warranty terms, contract dates, and payment obligations.

7. Data Retention

• Local App Data: reminders and settings stored locally on your device remain until you delete them, clear app data, or uninstall the app.
• Forwarded Emails: production systems may retain parsed email metadata and extracted reminder details for as long as needed to provide the service or until deletion is requested, subject to legal and security requirements.
• Raw Email Content: we aim to minimize retention of raw forwarded email content. Where possible, we retain only extracted reminder details and review evidence required to support the feature.
• Logs and Diagnostics: logs may be retained for security, debugging, fraud prevention, and service reliability.
• Billing Records: subscription, tax, accounting, and payment records may be retained as required by law.
• Legal Holds: data may be retained longer where required for disputes, fraud prevention, security, or legal obligations.

8. Your Rights

Depending on your location and applicable law, including UK GDPR, EU GDPR, Canadian privacy law, and other privacy laws, you may have the right to:

• Access personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of certain personal information.
• Request export or portability of certain data.
• Object to or restrict certain processing.
• Withdraw consent for optional features such as notifications.

Contact support@geolapis.com to submit a privacy request.

9. Security

• We use HTTPS encryption in transit where production services are deployed.
• Access to systems is limited based on operational need.
• We use security practices to help protect data from unauthorized access, loss, misuse, and alteration.
• Face ID and biometric unlock are handled locally by your device.

No system is 100% secure. Avoid forwarding or entering highly sensitive financial, legal, medical, or confidential information unless necessary for the reminder you want to track.

10. Children’s Privacy

DueCatch is not intended for children under 13, or the minimum age required by local law. We do not knowingly collect personal information from children.

11. International Transfers

We may process data in the United Kingdom, Canada, United States, European Union, and other regions through vetted service providers. Where required, we use appropriate safeguards for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy to reflect product, legal, security, or operational changes. Material changes may be announced in-app, on our website, or by email where appropriate.

13. Contact

For privacy, support, or data-rights requests, contact:
support@geolapis.com