Privacy Policy

Introduction

Danali (“we,” “us”) provides a manual-first budgeting app for mobile devices. This Privacy Policy explains what information Danali handles, how it is stored, and your choices. The danali.app website is informational only—it does not provide budgeting access or a web dashboard.

Danali is local-first by design. Signed-in, cloud-backed features (accounts, shared spaces, and related sync) are implemented in current app releases. We are preparing for broader distribution (including closed beta) and continue to refine some capabilities ahead of full public launch.

Questions: privacy@danali.app or support@danali.app.

Summary

• Danali is local-first. Budget data you enter is stored on your device unless you use optional cloud features described below.
• We do not connect to banks or financial institutions, and we do not request or store bank login credentials.
• You can use Danali locally without an account, or sign in for cloud-backed account and shared-space features.
• We do not sell your personal information.
• The Danali app does not currently include third-party analytics or crash-reporting SDKs (such as Firebase Analytics or Sentry).

Information you provide

Depending on how you use Danali, this may include:

• Budget data — categories, amounts, transactions, goals, Feed notes, and labels you create (including Payment Method names such as Cash or Debit).
• Profile and preferences — display name, currency, appearance, and similar settings stored on your device.
• Account sign-in — your email address for one-time password (OTP) sign-in, your profile, and account-related settings stored with our authentication and database provider when you choose to sign in.
• Shared space — if you create or join a Family shared space, membership, invite codes, roles, and shared budget data are stored and synced in our cloud service for that space.
• Subscriptions — if you purchase a Danali plan on a supported mobile build, purchase and entitlement information is processed by the app store and our subscription partner (see Third parties).

How Danali stores data

On your device

Danali keeps your personal-space budget data in a local database on your device (SQLite via Drift). Core features work offline. The local database is not encrypted by Danali; protect your device with a passcode or biometric lock.

Privacy mode in the app only hides amounts on screen. It is visual masking, not encryption, and applies on that device only.

You may export or import data as JSON from Settings. Exports you save elsewhere are your responsibility to protect.

Sign-in and cloud (when you use an account)

Current Danali releases connect to our cloud backend (Supabase) when you sign in. In that mode we use email OTP for authentication and store account-related data needed to operate the service, including:

• Your profile and personal account record.
• Shared-space membership, invite and join flows, and shared budget entities synced for members of that space.
• Plan and subscription access state (for example Free, Solo, or Family) as enforced in the app and on our servers, including coordination with mobile store billing partners when you purchase a paid plan.
• Selected personal-space data may sync to the cloud for signed-in users. Personal sync is implemented for important categories but is not a guarantee of complete, real-time multi-device backup of every personal budget item everywhere in the app.

You may continue without an account for local-only budgeting on your device, or sign in when you want shared spaces, account recovery across devices, and related cloud features.

Cloud sync, billing, and security controls are actively maintained as we approach wider release; some operational hardening and verification work may still be in progress.

How we use information

We use information to:

• Provide budgeting, shared-space, and subscription features.
• Authenticate you and enforce membership and plan access.
• Respond to support requests.
• Improve reliability and security of the service.
• Comply with law and protect our users and the service.

We do not use your budget content for advertising.

Third parties

When you use sign-in, subscriptions, or shared spaces, we rely on:

• Supabase — authentication, database, and related cloud infrastructure for accounts and shared spaces (production is intended for Canada Central).
• RevenueCat — subscription and entitlement management on supported iOS and Android builds when API keys are configured.
• Apple App Store / Google Play — payment processing for subscriptions.

These providers process data under their own terms and privacy policies. We configure them to receive only what is needed for Danali to function.

Analytics and crash reporting

The Danali app does not currently embed third-party analytics or crash-reporting tools in production builds we ship today. We may add privacy-conscious crash reporting before a wider rollout; if we do, we will update this policy. Developers may use standard device logging during debugging; we aim to avoid logging sensitive financial details, passwords, or one-time codes.

Retention and deletion

Local data stays on your device until you delete it in Settings, reset the app’s local store, or uninstall Danali. Cloud data retention depends on your account, shared-space membership, and whether a deletion request is pending.

To remove data on this device only, use Delete local data in Settings. When signed in, Delete account and data starts staged deletion: normal app and cloud access ends immediately, and there is a 30-day recovery window before permanent removal. If you are in a shared space, you may need to leave that space first; shared-space owners may need to remove other members and dissolve the space before account deletion. Details are on our Delete Account page.

For questions or help with recovery, contact support@danali.app.

Children

Danali is not directed at children under 13 (or the minimum age in your region). We do not knowingly collect personal information from children. Contact us if you believe a child has provided information.

International users

If you use cloud features, your account and shared-space data may be processed in Canada (our intended production region) and where our service providers operate. By using Danali you understand that information may be transferred to those locations.

Changes

We may update this policy from time to time. We will post the revised version on this page with a new “Last updated” date. Continued use of Danali after changes means you accept the updated policy.

Contact

Privacy: privacy@danali.app
Support: support@danali.app