Welcome to Ozzy. Your privacy is important to us. This Privacy Policy explains how we collect, use, protect, and handle your personal and financial information when you use our iOS application ("App").

This policy is a legally binding agreement between you ("User," "you," or "your") and the developers of Ozzy ("we," "us," or "our"). By downloading, accessing, or using our App, you agree to the terms of this Privacy Policy.

To deliver personalized financial insights, we collect certain types of information. We gather data in three main ways:

a) Information You Provide Directly:

• Account Information: When you create an Ozzy account, we collect your mobile phone number for authentication and communication via Firebase Authentication.
• Communications: If you contact us for support or feedback, we may keep a record of that correspondence.

b) Information from Third-Party Services (With Your Explicit Consent):

• To enable core functionality, we use the Teller API to access your financial data. You provide your credentials directly to Teller, granting us secure, read-only access. We never see or store your login credentials.
• The data accessed includes:
• Account Information: Account names, types (e.g., checking, credit), and balances.
• Transaction History: Transaction details like date, amount, description, and category.
• Apple App Store: We use Apple’s StoreKit API to manage subscriptions, verify purchases, subscription status (including trial periods), and renewal dates. We do not receive or store your payment details (e.g., credit card numbers).

c) Information We Collect Automatically:

• Device and Usage Information: We collect data about your device and how you use the App to improve our service and enhance security. This includes:
• Device Identifiers: Such as your device’s unique ID and Firebase Cloud Messaging (FCM) token for push notifications.
• Usage Data: Information about your interactions with the App, such as which features you use and when. This helps us understand user behavior and improve the experience.

We use your information to:

• Provide and Maintain Our Service:
• Link your financial accounts and display transaction history and balances.
• Process transactions and generate financial insights and “nudges.”
• Manage subscriptions and provide access to premium features.
• Personalize Your Experience with AI:
• Use Google’s Gemini AI to analyze your transaction data and deliver personalized, intelligent financial advice and insights. The data sent for analysis is anonymized where possible and used solely to generate insights within the App.
• Communicate With You:
• Send important updates, security alerts, and support messages.
• Deliver push notifications with financial nudges and alerts, which you can control in your device settings.
• Improve Our App:
• Understand user interactions to enhance features, design, and performance.
• Diagnose and resolve technical issues.

We do not sell your personal or financial data. We share your information only with trusted third-party service providers under strict confidentiality agreements, as needed to provide our service.

• Firebase (Google): For backend services, including user authentication (phone number), database storage (Firestore), and push notifications (FCM).
• Teller: We share a secure token with Teller to access your financial data. We do not share your personal identification information with Teller, and your bank credentials are handled only by them.
• Google (Gemini AI): We send anonymized transaction data (such as amount, description, and category) to Google’s AI platform to generate insights. This data is not linked to your personal identity.
• Apple: We use Apple’s StoreKit API for in-app purchases and subscription management.
  
  

We may also disclose your information if required by law, such as to comply with a subpoena or legal process, or to protect the rights, property, or safety of Ozzy, our users, or the public.

We implement strict security measures to protect your data.

• Encryption: All data is encrypted in transit (using TLS) and at rest.
• Secure Proxy: We use a secure proxy for all communications with the Teller API, including mTLS (Mutual Transport Layer Security) to ensure only authorized servers communicate with Teller.
• Cloud Security: We rely on the security infrastructure of Google Cloud Platform and Firebase to safeguard our backend systems.
• No Local Credential Storage: Your financial institution login credentials are never stored on your device or our servers.
  
  

While we use commercially reasonable measures to protect your information, no method of transmission or storage is completely secure.

We retain your personal and financial data only as long as your account is active or as needed to provide our services. If you delete your account, we remove your information from our production systems according to our data retention policies, subject to legal obligations.

You have rights regarding your personal information:

• Access and Update: Review and update your account information within the App.
• Unlink Accounts: Unlink financial accounts at any time through the App’s settings to stop data fetching from those accounts.
• Push Notifications: Opt-out of push notifications by adjusting your device settings.
• Account Deletion: Request account deletion by contacting us at support@ozzy.my.

Our App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

This Privacy Policy does not cover companies we do not own or control. We encourage you to review the privacy policies of our third-party partners:

• Teller: https://teller.io/privacy
• Google & Firebase: https://policies.google.com/privacy
• Apple: https://www.apple.com/legal/privacy/

We may update this Privacy Policy occasionally. For material changes, we will notify you by email, through the App, or by presenting a new version for your acceptance. Continued use of the App after changes means you accept the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@ozzy.my