Privacy Policy

1. Introduction

This Privacy Policy describes how Boris ("we," "us," or "our") collects, uses, stores, and discloses personal information obtained through the Boris mobile application (the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service, including:

• Account Information: Username, email address, and authentication credentials necessary to create and maintain your account.
• Receipt Images: Photographic images of receipts that you upload to the Service for processing.
• Transaction Data: Information derived from receipt images, including but not limited to itemized purchases, prices, tax amounts, gratuity, and other charges.
• Bill Allocation Data: User-generated information regarding the distribution of charges among multiple parties.

2.2 Automatically Collected Information

We may automatically collect certain technical information when you use the Service, including:

• Device identifiers and information
• IP addresses and general location data
• Usage data and analytics
• Log information

3. Use of Information

We use the collected information for the following purposes:

• To provide, maintain, and improve the Service
• To process receipt images using artificial intelligence and machine learning technologies
• To calculate and allocate costs, including proportional tax, gratuity, and other surcharges
• To maintain a historical record of your transactions for your reference
• To enhance the accuracy and functionality of our receipt parsing algorithms
• To provide technical support and respond to user inquiries
• To detect, prevent, and address technical issues and fraudulent activity
• To comply with legal obligations and enforce our Terms of Service

4. Data Storage and Retention

We utilize Supabase, Inc. ("Supabase") as our third-party data storage provider. All personal information collected through the Service is stored on Supabase infrastructure in accordance with their security standards and practices. For detailed information regarding Supabase's data handling practices, please refer to the Supabase Privacy Policy.

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We do not maintain additional retention policies beyond those implemented by Supabase as part of their standard operations.

You may request deletion of your personal data and account at any time through the Service interface. Upon such request, we will delete or anonymize your personal information in accordance with applicable law, subject to any legal obligations to retain certain information.

5. Data Security

We implement commercially reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using industry-standard HTTPS/TLS protocols
• Encryption of data at rest through our third-party service providers
• Regular security assessments and updates
• Access controls and authentication mechanisms

However, no method of transmission over the Internet or electronic storage is completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

6. Third-Party Service Providers

We engage the following third-party service providers to facilitate our Service:

• Supabase, Inc.: Provides database infrastructure, authentication services, and data storage.
• Google Cloud Platform: Provides artificial intelligence and machine learning services for receipt image processing and optical character recognition.
• Venmo (PayPal, Inc.): Payment request functionality is initiated solely at your direction. We do not share data with Venmo except as necessary to pre-populate payment request information when you explicitly choose to use this feature.

These third parties have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. Their use of personal information is governed by their respective privacy policies.

7. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to certain processing of your personal information.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw such consent at any time.

To exercise any of these rights, please contact us using the contact information provided in Section 11.

8. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. Your use of the Service constitutes your consent to such transfers.

9. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may provide additional notice through the Service or via email. Your continued use of the Service after such modifications constitutes your acceptance of the updated Privacy Policy.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]