Privacy Policy for DueTrace

Last Updated: February 04, 2026

Effective Date: January 8, 2026

This Privacy Policy governs the manner in which N.T.S I.T SOLUTIONS LTD ("Company", "we", "us", or "our") collects, uses, maintains, and discloses information collected from users (each, a "User") of the DueTrace mobile application ("App").

By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

A. Information You Provide Directly

• Account Registration: Phone number (for authentication via OTP), Name, and Email address.
• Transaction Data: Amounts, currencies, dates, descriptions, categories, and proof of transaction (if attached).
• User Content: Profile pictures uploaded from your gallery or camera.

B. Information Collected Automatically & Permissions

• Contacts List (READ_CONTACTS): We collect phone numbers from your address book only locally or via hashed (anonymized) methods to connect you with other DueTrace users. We do not sell your contact list.
• Camera & Gallery: Accessed only if you choose to upload a profile picture or attach an image to a transaction.
• Device Information: Device model, OS version, unique device identifiers, and mobile network information for crash reporting and security.
• Usage Data: Logs regarding application crashes (via Firebase Crashlytics) and performance metrics.

2. How We Use Your Information

We use the collected data for the following purposes:

• To provide the core functionality: syncing ledgers between friends and calculating balances.
• To verify your identity using phone number authentication.
• To generate PDF account statements upon your request.
• To improve App stability by analyzing crash reports and bugs.
• To enforce our Terms of Service and prevent fraud.

3. Data Storage and Sharing

We do not sell, trade, or rent Users' personal identification information to others. We share data only with:

• Service Providers: We use Google Firebase (Google LLC) for secure cloud hosting, authentication, database management, and analytics.
• Legal Compliance: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

4. Data Retention & Account Deletion (Right to be Forgotten)

We retain your data only as long as your account is active. In compliance with Apple App Store guidelines and GDPR:

You have the absolute right to delete your account and all associated data at any time.

• In-App Deletion: Go to Settings > Delete Account (located at the bottom of the list). This action is immediate and irreversible.
• Request via Email: You may contact us at support@duetrace.com with the subject "DELETE ACCOUNT".

Upon deletion, all your personal data, transaction history, and contact associations will be permanently erased from our servers within 30 days, except where retention is required by law.

5. LIMITATION OF LIABILITY

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW:

1. NO WARRANTY: THE APP IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. WE DISCLAIM ALL WARRANTIES OF ACCURACY, RELIABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.
2. FINANCIAL DISPUTES: THE COMPANY SHALL NOT BE LIABLE FOR ANY DISPUTES, DISAGREEMENTS, OR NON-PAYMENT OF DEBTS BETWEEN USERS. YOU ARE SOLELY RESPONSIBLE FOR VERIFYING THE ACCURACY OF YOUR LEDGERS.
3. DATA LOSS: WE SHALL NOT BE LIABLE FOR ANY LOSS OF DATA, CORRUPTION OF RECORDS, OR UNAVAILABILITY OF THE SERVICE. WE RECOMMEND USERS MAINTAIN EXTERNAL BACKUPS (E.G., EXPORTED PDFS).
4. INDIRECT DAMAGES: IN NO EVENT SHALL THE COMPANY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF YOUR USE OF THE APP.

6. Security

We utilize industry-standard security measures, including SSL/TLS encryption for data in transit and AES encryption for data at rest via Google Cloud Platform. However, no internet transmission is 100% secure.

7. Children's Privacy

Our Service does not address anyone under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personally identifiable information from children. If we discover that a child has provided us with personal data, we delete it immediately.

8. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. By using the App, you consent to this transfer.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date".

10. Contact Us