← Back to Piggy Bong

1. Introduction and Contact Information

This Privacy Policy describes how Piggy Bong ("we," "our," or "us") collects, uses, and protects your information when you use our K-pop fan spending tracker mobile application (the "App"). We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, and password when you create an account
• Spending Data: Purchase amounts, categories (concerts, albums, merchandise), dates, and notes you add
• Budget Information: Budget limits and financial goals you set
• Profile Information: Optional profile details and preferences
• Support Communications: Messages you send to our support team

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, unique device identifiers
• Usage Analytics: App usage patterns, features accessed, session duration
• Technical Data: IP address, app version, crash reports, performance metrics
• Authentication Data: Login timestamps and authentication tokens

2.3 Third-Party Service Data

We use Supabase as our backend service provider, which may collect additional technical information for service provision and security purposes.

3. How We Use Your Information

3.1 Service Provision

• Provide and maintain the Piggy Bong app functionality
• Enable spending tracking and budget management features
• Synchronize your data across devices
• Process and store your financial tracking data

3.2 Communication

• Send important app updates and security notices
• Respond to your support requests and feedback
• Provide customer service assistance

3.3 Improvement and Analytics

• Analyze app usage to improve features and user experience
• Debug technical issues and improve app performance
• Develop new features based on user behavior

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent fraud
• Protect our rights and the rights of our users

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the App:

• Supabase: Backend services, database management, and authentication
• Cloud Storage Providers: Data backup and storage services
• Analytics Services: App performance and usage analytics

4.2 Legal Requirements

We may disclose your information if required by law, legal process, or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to government requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction. We will notify users before their information becomes subject to a different privacy policy.

4.4 Consent-Based Sharing

We may share information with your explicit consent for specific purposes not covered in this policy.

5. Your Rights and Choices

5.1 Account Access and Control

• Access: View and download your personal data through the app
• Correction: Update or correct your account information
• Deletion: Request deletion of your account and associated data
• Data Portability: Export your data in a machine-readable format

5.2 Privacy Controls

• Adjust privacy settings within the app
• Control data sharing preferences
• Manage notification preferences
• Opt out of analytics collection where possible

5.3 Communication Preferences

• Unsubscribe from marketing communications
• Control push notification settings
• Manage email preferences

6. Data Security and Protection

6.1 Security Measures

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Authentication: Secure authentication mechanisms protect your account
• Regular Audits: Regular security assessments and updates

6.2 Data Retention

• Account Data: Retained while your account is active
• Spending Data: Retained until you delete it or close your account
• Analytics Data: Aggregated and anonymized, retained for up to 2 years
• Support Data: Retained for 3 years for customer service purposes

6.3 Data Breach Response

In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by applicable law, and provide information about the breach and steps being taken to address it.

7. Children's Privacy (COPPA Compliance)

7.1 Age Restrictions

• Users must be at least 13 years old to create an account
• We do not knowingly collect personal information from children under 13
• Age verification is required during account creation

7.2 Parental Controls

• Parents can contact us to review their child's information (ages 13-17)
• Parents can request deletion of their child's account
• We provide educational resources about financial responsibility

7.3 Discovery of Under-Age Users

If we discover that we have collected personal information from a child under 13, we will immediately delete that information and terminate the account. Parents who believe their child under 13 has provided information to us should contact us immediately.

8. International Data Transfers

8.1 Cross-Border Processing

Your information may be processed and stored in countries other than your country of residence, including the United States where Supabase operates its servers.

8.2 Data Protection Safeguards

• We ensure adequate protection for international transfers
• Service providers must meet strict data protection standards
• We use contractual safeguards for data protection

9. Regional Privacy Rights

9.1 European Union (GDPR)

If you are in the EU, you have additional rights including:

• Right to object to processing
• Right to restrict processing
• Right to data portability
• Right to lodge complaints with supervisory authorities

9.2 California (CCPA/CPRA)

California residents have rights to:

• Know what personal information is collected
• Delete personal information
• Opt out of the sale of personal information
• Non-discrimination for exercising privacy rights

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will notify you through the app or via email
• We will update the "Last Updated" date
• We will provide a clear summary of changes
• Continued use of the app constitutes acceptance of changes

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Effective Date: This Privacy Policy is effective as of August 29, 2025.