ONALA: Expense & Budget Tracker Privacy Policy

Last Updated: March 2026

Effective Date: March 2026

Introduction

Welcome to ONALA: Expense & Budget Tracker ("ONALA," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

By downloading, installing, or using ONALA, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

Company Information

Company: ONALA House LLC Location: Clinton, Maryland, United States Contact Email: onala.business@gmail.com

Information We Collect

Information You Provide Directly

When you use ONALA, you may voluntarily provide the following information:

Account Information: Email address and password when you create an account (managed through Google Firebase Authentication)

Financial Data: Transaction details, account balances, budgets, goals, categories, and other financial information you choose to enter into the App

Profile Information: Profile picture (if you choose to upload one), display name, and preferences

Information Collected Automatically

When you use the App, certain information may be collected automatically:

Device Information: Device type, operating system version, unique device identifiers

Usage Data: App features used, interaction patterns, crash reports, and performance data

Log Data: Access times, pages viewed, and other system activity

This automatic data collection is facilitated through Google Firebase services for the purpose of app functionality, authentication, and improving user experience.

How We Use Your Information

We use the information we collect for the following purposes:

To Provide the Service: Enable you to track expenses, manage budgets, set financial goals, and use all App features

To Maintain Your Account: Authenticate your identity and manage your account settings

To Sync Your Data: Allow you to access your financial data across multiple devices

To Improve the App: Analyze usage patterns to enhance features, fix bugs, and improve performance

To Communicate: Respond to your inquiries, provide customer support, and send service-related notifications

To Ensure Security: Detect, prevent, and address technical issues and security threats

Data Storage and Security

Where Your Data is Stored

Your data is stored using Google Firebase services, including:

Firebase Authentication: For secure account management

Cloud Firestore: For storing your financial data and preferences

Google Firebase employs industry-standard security measures and is compliant with major privacy regulations. Data may be stored on servers located in the United States or other countries where Google operates data centers.

Data Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

Secure authentication protocols

Encrypted data transmission (HTTPS/TLS)

Access controls and authentication requirements

Regular security assessments

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Sharing and Disclosure

We Do NOT:

Sell your personal information to any third party

Share your financial data with advertisers or marketing companies

Use your data for advertising purposes

Provide your information to data brokers

Limited Sharing

We may share your information only in the following circumstances:

Service Providers: With Google Firebase for authentication, data storage, and app functionality. Google's privacy practices are governed by their own privacy policy.

Legal Requirements: If required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent: We may share information with third parties when you explicitly consent to such sharing.

Your Rights and Choices

Access and Control

You have the right to:

Access: View all personal and financial data stored in your account through the App

Correct: Update or modify your information at any time within the App

Delete: Delete your account and all associated data permanently

Export: Export your financial data through the App's export feature

Account Deletion

You can delete your account and all associated data at any time by:

Going to Profile > Account Settings

Selecting "Delete Account"

Confirming deletion

Upon deletion, all your personal information and financial data will be permanently removed from our systems within 30 days, except where retention is required by law.

Opt-Out Options

Push Notifications: You can disable push notifications through your device settings

Data Sync: You can choose to use the App in offline mode without syncing to the cloud

Children's Privacy

ONALA is not intended for use by individuals under the age of 17. We do not knowingly collect personal information from children under 17. If we become aware that we have collected personal information from a child under 17, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at onala.business@gmail.com.

International Data Transfers

ONALA is operated from the United States. If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where Google maintains data centers.

By using the App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than your country.

Third-Party Services

The App uses the following third-party services:

Google Firebase Purpose: Authentication, data storage, analytics Privacy Policy: https://firebase.google.com/support/privacy Data Processing: https://firebase.google.com/terms/data-processing-terms

Apple App Store / Google Play Store Purpose: App distribution, in-app purchases, subscription management Apple Privacy Policy: https://www.apple.com/legal/privacy/ Google Privacy Policy: https://policies.google.com/privacy

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the App's services. Upon account deletion:

Immediate: Your data becomes inaccessible

Within 30 days: All personal data is permanently deleted from our active systems

Backup Systems: Data may persist in backup systems for up to 90 days before complete removal

We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request information about the categories and specific pieces of personal information we have collected

Right to Delete: Request deletion of your personal information

Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at onala.business@gmail.com.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right of Access: Request access to your personal data

Right to Rectification: Request correction of inaccurate data

Right to Erasure: Request deletion of your personal data

Right to Restrict Processing: Request restriction of processing your data

Right to Data Portability: Request transfer of your data to another service

Right to Object: Object to processing of your personal data

Right to Withdraw Consent: Withdraw consent at any time

Legal Basis for Processing:

Contract: Processing necessary to provide the App's services

Consent: Where you have given explicit consent

Legitimate Interests: For app improvement and security

To exercise these rights, contact us at onala.business@gmail.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the new Privacy Policy in the App

Updating the "Last Updated" date at the top of this policy

Sending a notification through the App (for significant changes)

Your continued use of the App after changes become effective constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

ONALA House LLC Clinton, Maryland, United States Email: onala.business@gmail.com

We will respond to your inquiry within 30 days.

Consent

By using ONALA: Expense & Budget Tracker, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use the App.

© 2026 ONALA House LLC. All rights reserve