Privacy Policy

Lira collects two kinds of information, and nothing else:

• Account information. If you sign in with Google, Lira receives your name, email address, and profile picture from your Google account. If you sign up with an email address and password instead, Lira stores your email address and a securely hashed password.
• The data you enter. The transactions, categories, budgets, bills, debts, and accounts you create in the app, including any amounts, dates, and notes you type.

Lira does not use analytics or advertising trackers, and does not build a profile of you for any purpose beyond running the app.

• Your account information is used to create your account, sign you in, and show you which account you are signed in as.
• The data you enter is used to display your own budgets, balances, and summaries back to you. That is its only use.
• Your email address may be used to send account-related messages, such as confirming your address or resetting your password. Lira does not send marketing email.

Lira uses Google Sign-In for authentication only. It requests the basic sign-in scopes covering your name, email address, and profile picture. Lira does not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google service, and it never creates, modifies, or posts anything in your Google account.

Lira's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Lira from your Google account at any time from your Google account permissions page. Doing so stops future sign-ins but does not delete the data already in Lira — use the deletion steps below for that.

Account information and app data are stored in a Postgres database hosted by Supabase, and the app itself is hosted by Vercel. Both act as service providers to Lira and process the data only to keep the service running. Access to your rows is restricted at the database level so that a signed-in user can read and write only their own records.

Lira does not sell, rent, or trade your personal information, and does not share it with advertisers or data brokers. Information is shared only with the hosting providers named above, and where the law requires disclosure.

Your data is kept for as long as your account exists. You can delete individual records at any time inside the app.

To remove everything, open Dashboard → Settings → Delete account. This permanently deletes your account together with every transaction, budget, bill, debt, and account record attached to it. The deletion is immediate and cannot be undone. If you would rather have it done for you, email the address below and it will be handled manually.

Traffic to Lira is encrypted in transit over HTTPS, passwords are stored hashed rather than in plain text, and database access rules keep each account's records separate. No service can promise perfect security, but data is not kept beyond what the app needs to work.

Lira is not directed at children under 13 and does not knowingly collect their information. If you believe a child has created an account, contact the address below and it will be deleted.

If this policy changes, the updated version will be posted on this page with a new date at the top. Continuing to use Lira after a change means the revised policy applies.

Questions about this policy, or about the data held about you, can go to patrickrivera.dev@gmail.com.