Privacy Policy for Business Expense Management

1. Introduction

Xpert Consulting AG ("we," "us," or "our") operates the Business Expense Management mobile application ("App"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our App. By installing the App, you consent to this policy.

2. Data We Collect

a) Automatically Collected Data (Technical Data):
• Device Information: IP address, device model, OS version, unique device identifiers (e.g., IMEI, Android ID).
• Usage Data: App interactions, session duration, feature usage, crash logs, and performance metrics.
• Connection Data: Network type (Wi-Fi/mobile), approximate location (via IP address).

b) User-Provided Data:
• Account Information: If you register (e.g., via email/social login), we collect name, email, and profile data.
• Other Inputs: Data you submit in forms, surveys, or customer support requests.

3. Why We Collect Data & Legal Basis

Purpose
• App functionality (e.g., user accounts)
• Crash reporting & performance fixes
• Analytics & feature optimization
• Compliance with laws

Legal Basis
• Contract performance
• Legitimate interest (service improvement)
• Consent (via in-app prompts)
• Legal obligation

4. Third-Party Services

We use:

• Firebase (Google): For crash reporting, analytics, and performance monitoring. Firebase Privacy Policy.
• Google Analytics: Anonymized usage analytics. Google Privacy Policy. Data processed by third parties is subject to their policies. We minimize data sharing and use anonymization where possible.

5. Permissions

The App requests:

• Biometric authentication methods(if applicable): Only with consent; used for easier access without password.
• Storage/Camera/Microphone: If needed for photo uploads, document scanning. Permissions are optional and can be revoked in device settings.

6. Data Security & Retention

a) Security: Encryption, access controls, and regular audits.

b) Retention:
• Technical data: Deleted after 6 months.
• User accounts: Retained while active; deleted upon request.
• Crash/error data: 12 months (for debugging).

7. Your Rights

You may:

• Access, correct, or delete your data.
• Withdraw consent (via App Settings).
• Opt out of analytics (through device permissions or in-app options).
• Lodge complaints with your local data authority. Contact: info@xpert-group.ch for requests.

8. International Transfers

Data may be processed outside your country (e.g., via Firebase in the USA). We use GDPR-compliant safeguards (e.g., Standard Contractual Clauses).

9. Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect their data.

10. Changes to This Policy

Updates will be posted in the App and on Google Play. Continued use implies acceptance.

11. Contact

For questions or data requests:
Email: info@xpert-group.ch

Address:
Xpert Consulting AG
Albisriederstrasse 342
8047 Zürich
Switzerland