Privacy Policy

Where Did It Go...

Effective Date: September 6, 2025 Last Updated: September 6, 2025

---

1. Introduction

AutoCreation Studio ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Where Did It Go... mobile application ("App" or "WDIG").

Important: This Privacy Policy specifically addresses the handling of financial data and personal information in our loan tracking application, which is subject to enhanced privacy protections under applicable laws.

---

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

Account Information:

• Email address (for account creation and support)
• Display name or username
• Profile information (optional)

Device Information:

• Device type, model, and operating system
• App version and usage statistics
• Device identifiers (anonymized)
• Crash reports and performance data

Contact Information:

• Contact names and phone numbers (from your device's contact list, with permission)
• Email addresses of contacts (if you choose to link them to loans)

2.2 Financial Information

Loan Data:

• Loan amounts, interest rates, and payment schedules
• Borrower and lender information
• Payment history and transaction records
• Loan status and notes

Financial Calculations:

• Payment calculations and projections
• Interest calculations and amortization schedules
• Financial summaries and reports

Important: All financial data is stored locally on your device with optional cloud synchronization. We do not access or process your financial data for any purpose other than providing the App's functionality.

2.3 Usage Information

App Usage:

• Features used and frequency of use
• Time spent in the App
• User interface interactions
• Error logs and crash reports

Analytics Data:

• App performance metrics
• Feature usage statistics (anonymized)
• User engagement patterns (anonymized)

---

3. How We Use Your Information

3.1 Primary Uses

App Functionality:

• Provide loan tracking and payment management features
• Synchronize data across your devices (when enabled)
• Generate reports and financial summaries
• Send payment reminders and notifications

Account Management:

• Create and maintain your user account
• Authenticate your identity
• Provide customer support
• Communicate important updates

3.2 Secondary Uses

App Improvement:

• Analyze usage patterns to improve features
• Identify and fix bugs or performance issues
• Develop new features based on user needs
• Optimize user experience

Security and Compliance:

• Monitor for fraudulent or suspicious activity
• Ensure compliance with applicable laws
• Maintain system security and integrity
• Conduct security audits and assessments

3.3 What We Do NOT Do

We do NOT:

• Sell, rent, or trade your personal or financial data
• Use your data for advertising or marketing to third parties
• Share your financial information with lenders or financial institutions
• Use your data for credit scoring or financial analysis
• Access your data for any purpose other than providing the App's functionality

---

4. Data Storage and Security

4.1 Local Storage

Device Storage:

• All financial data is primarily stored locally on your device
• Data is encrypted using device-level encryption
• Access is protected by device authentication (PIN, biometrics)
• Data remains under your direct control

4.2 Cloud Synchronization

Optional Cloud Sync:

• Cloud synchronization is optional and can be disabled
• Data is encrypted before transmission using industry-standard encryption
• Cloud storage uses secure infrastructure (Firebase/Google Cloud)
• Data is encrypted at rest in cloud storage

Security Measures:

• End-to-end encryption for data transmission
• Secure authentication and authorization
• Regular security audits and updates
• Compliance with industry security standards

4.3 Data Protection

Technical Safeguards:

• Encryption in transit and at rest
• Secure authentication mechanisms
• Regular security updates and patches
• Access controls and audit logging

Administrative Safeguards:

• Limited access to personal data by authorized personnel only
• Regular security training for staff
• Incident response procedures
• Regular security assessments

---

5. Data Sharing and Disclosure

5.1 No Sale of Data

We do not sell, rent, or trade your personal or financial data to third parties for any purpose.

5.2 Limited Sharing

We may share your information only in the following limited circumstances:

Service Providers:

• Cloud storage providers (Firebase/Google Cloud) for data synchronization
• Analytics providers for app improvement (anonymized data only)
• Customer support tools for assistance
• All service providers are bound by strict confidentiality agreements

Legal Requirements:

• When required by law or legal process
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users
• In connection with a business transfer or acquisition

User Consent:

• When you explicitly consent to sharing
• When you choose to export or share your own data
• When you request assistance that requires data access

5.3 Aggregated Data

We may share aggregated, anonymized data that cannot identify you:

• App usage statistics for industry analysis
• Performance metrics for service improvement
• General trends and patterns (no personal information)

---

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

• Access all personal data we have about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Export your data in a portable format
• Restrict or object to certain data processing

6.2 Data Portability

Export Your Data:

• Download all your data in CSV, JSON, or other standard formats
• Transfer your data to other services
• Maintain copies of your data for personal use
• Request assistance with data export if needed

6.3 Data Deletion

Delete Your Data:

• Delete individual loans or payment records
• Delete your entire account and all associated data
• Request confirmation of data deletion
• Ensure data is removed from all systems within 30 days

6.4 Consent Management

Control Your Consent:

• Withdraw consent for data processing at any time
• Opt out of optional features and data collection
• Manage notification preferences
• Control cloud synchronization settings

---

7. Data Retention

7.1 Retention Periods

Active Data:

• Data for active loans: Retained until loan is marked as completed or deleted
• Account information: Retained while your account is active
• Usage data: Retained for up to 2 years for service improvement

Inactive Data:

• Completed loans: Retained for up to 7 years (for tax and record-keeping purposes)
• Deleted accounts: Data removed within 30 days of deletion request
• Backup data: Automatically purged according to retention schedule

7.2 Automatic Deletion

System-Initiated Deletion:

• Inactive accounts (no login for 2+ years): Data automatically deleted
• Completed loans older than 7 years: Automatically archived or deleted
• Temporary data: Automatically purged after 30 days
• Crash logs and temporary files: Automatically deleted after 90 days

7.3 User-Initiated Deletion

Immediate Deletion:

• Individual loan records: Deleted immediately upon request
• Account deletion: Initiated immediately, completed within 30 days
• Cloud sync data: Deleted within 24 hours of account deletion
• All associated data: Removed from all systems and backups

---

8. Children's Privacy

8.1 Age Requirements

Minimum Age:

• Users must be at least 18 years old to use the App
• We do not knowingly collect data from minors
• Age verification may be required for certain features
• Parental consent may be required in certain jurisdictions

8.2 Protection of Minors

If we discover that we have collected data from a minor:

• We will immediately delete the data
• We will notify the user and/or parent if possible
• We will take steps to prevent future collection
• We will report the incident to appropriate authorities if required

---

9. International Data Transfers

9.1 Data Location

Primary Storage:

• Data is primarily stored on your device
• Cloud synchronization uses secure data centers
• Data may be processed in different countries
• All transfers comply with applicable privacy laws

9.2 Transfer Safeguards

Protection Measures:

• Standard Contractual Clauses for international transfers
• Adequacy decisions where applicable
• Binding Corporate Rules for internal transfers
• User consent for transfers to third countries

---

10. Privacy by Design

10.1 Design Principles

Built-in Privacy:

• Data minimization: We collect only what is necessary
• Purpose limitation: Data is used only for stated purposes
• Storage limitation: Data is retained only as long as necessary
• Transparency: Clear information about data practices

10.2 Technical Measures

Privacy-Enhancing Technologies:

• Local-first data storage
• Optional cloud synchronization
• End-to-end encryption
• User-controlled data sharing

---

11. Updates to This Privacy Policy

11.1 Policy Changes

We may update this Privacy Policy from time to time:

• Material changes will be communicated through the App
• Users will be notified of significant changes
• Continued use constitutes acceptance of updated policy
• Previous versions will be available for review

11.2 Notification Methods

We will notify you of changes through:

• In-app notifications
• Email notifications (if you have provided an email)
• App store update descriptions
• Website announcements

---

12. Compliance with Privacy Laws

12.1 GDPR Compliance

European Union Users:

• Right to access, rectification, and erasure
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent

12.2 CCPA Compliance

California Residents:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights

12.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate:

• PIPEDA (Canada)
• Privacy Act (Australia)
• LGPD (Brazil)
• Other applicable local privacy laws

---

13. Data Breach Response

13.1 Incident Response

In the event of a data breach:

• We will investigate and contain the breach immediately
• We will notify affected users within 72 hours
• We will report to relevant authorities as required by law
• We will take steps to prevent future breaches

13.2 User Notification

We will notify you of data breaches through:

• Email notification (if we have your email)
• In-app notification
• Website announcement
• Direct communication if possible

---

14. Contact Information

14.1 Privacy Inquiries

For privacy-related questions or concerns:

• Email: support@autocreation.studio
• Response time: Within 48 hours
• Subject line: "Privacy Inquiry"

14.2 Data Subject Requests

To exercise your privacy rights:

• Email: support@autocreation.studio
• Subject line: "Data Subject Request"
• Include: Your account information and specific request
• Response time: Within 30 days

14.3 Data Protection Officer

For complex privacy matters:

• Email: support@autocreation.studio
• Available for consultation on privacy issues
• Can assist with data subject requests
• Provides privacy guidance and support

---

15. Acknowledgment

By using WDIG, you acknowledge that:

• You have read and understood this Privacy Policy
• You consent to the collection and use of your information as described
• You understand your privacy rights and how to exercise them
• You agree to the data practices outlined in this policy

Your privacy is important to us. We are committed to protecting your personal and financial information and being transparent about our data practices.

---

This Privacy Policy was last updated on September 6, 2025. Please check back regularly for updates.

For questions about this Privacy Policy, please contact us at support@autocreation.studio