Privacy Policy

1. Data Protection & GDPR Compliance

Kamiara, a service provided by Pavly Boules (Independent Developer), based in Ravenna (RA), Italy, operates in strict accordance with the Italian "Garante Privacy" and the EU General Data Protection Regulation (GDPR). We are dedicated to ensuring the highest standards of data integrity and user privacy.

2. Your Rights Under GDPR

In accordance with the European Union's GDPR, you are entitled to the following rights regarding your personal information:

• Right to Access: You may view and verify your profile data within the application at any time.
• Right to Erasure: You have the right to permanently delete your account and all associated financial history via the application settings.
• Data Portability: Users may export their financial transactions and data in a structured format through the export features provided in the settings menu.

3. Data Security

Cloud Security: Your data is secured and stored using industry standard AES-256 encryption at rest by Google Firebase.

Account Protection: Your account is protected by strict authentication rules ensuring only you can access your data.

Local Protection: On mobile devices, sensitive authentication tokens and key materials are stored using Hardware-Backed Encryption (Expo SecureStore/Keychain), ensuring that credentials never exist in plain text on your device's storage.

Data Isolation: We implement server-side Firestore Security Rules. This technical barrier ensures that your data is logically isolated; no user, regardless of technical ability, can access, read, or modify data belonging to another user.

4. Incident Response & Transparency

In the unlikely event of a data breach, Kamiara adheres to a strict 72-hour notification commitment. We will notify any affected users via their registered email address within 72 hours of confirming an incident, detailing the nature of the breach and the steps taken to mitigate it.