Privacy Policy

1. Who We Are

MyDebtFlip™ is owned and operated by Maseba's, a sole proprietorship based in Texas, United States. When this policy refers to "we," "us," or "our," it means Maseba's. When it refers to "you," it means any person who accesses or uses MyDebtFlip.

2. Information We Collect

We collect information in two ways — information you give us directly, and information collected automatically.

Information you provide:

• Your name and email address when you create an account
• Financial data you enter — expenses, debts, savings goals, bills, loans, and net worth entries
• Messages you send to the AI Financial Coach
• Payment information processed by Stripe (we never see or store your card details)

Information collected automatically:

• Basic usage data such as which features you use and how often
• Device type and browser for compatibility purposes
• IP address for security and fraud prevention

3. How We Use Your Information

We use your information solely to:

• Provide, operate, and improve MyDebtFlip
• Authenticate your identity and keep your account secure
• Process your subscription payments through Stripe
• Power the AI Financial Coach with your financial context
• Send essential service emails such as payment receipts and security alerts
• Respond to your support requests

We do not use your data for advertising. We do not build advertising profiles. We do not sell or rent your data to any third party.

4. Third-Party Services

We use a small number of trusted third-party services to operate MyDebtFlip:

• Supabase — Our database and authentication provider. Your financial data is stored securely on Supabase servers. Supabase is SOC 2 compliant.
• Stripe — Payment processing. Stripe handles all card data and is PCI-DSS Level 1 certified. We never see your full card number.
• Google — Optional sign-in via Google OAuth. If you use Google Sign-In, Google shares your name and email address with us.
• Anthropic — Powers the AI Financial Coach. When you use the AI Coach, your financial summary and message are sent to Anthropic's API to generate a response. Anthropic does not store or train on your data per their API usage policy.

5. Data Storage and Security

Your data is stored in Supabase's secure cloud infrastructure. We implement industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Row-level security so you can only access your own data
• Secure authentication via Supabase Auth

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

6. Your Rights

You have the right to:

• Access — Request a copy of all data we hold about you
• Correction — Ask us to correct inaccurate data
• Deletion — Request deletion of your account and all associated data
• Portability — Request your financial data in a portable format
• Opt-out — Unsubscribe from non-essential emails at any time

To exercise any of these rights, email [email protected]. We will respond within 10 business days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal and financial data within 30 days, except where we are required by law to retain certain records (such as payment records for tax purposes, retained for 7 years).

8. Children's Privacy

MyDebtFlip is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes we will notify you by email at least 14 days before the change takes effect. Continued use of MyDebtFlip after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or requests, contact us at:

[email protected]