Privacy Policy

1. Information We Collect

When you use DuesFam, we collect the following types of information:

Account Information

• Your email address (required for sign-in)
• Your full name (optional, used for personalization)
• Your Google account ID (if you sign in with Google)
• Authentication tokens (managed by Supabase, our auth provider)

Group & Member Data

• Group name, type (family, church, club, etc.), and configuration
• Member names you add to your group
• Member phone numbers / WhatsApp numbers (optional, for invite links)
• Payment records you log — amounts, dates, payment methods
• Subscription details (if you upgrade to Pro or Premium)

Usage Information

• Pages visited within the DuesFam app
• Device type, browser, and operating system
• IP address (used for security and abuse prevention)
• Login times and session duration

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the DuesFam service
• Allow you to track group dues, log payments, and generate reports
• Send transactional emails (sign-in links, subscription confirmations)
• Process subscription payments via Paystack
• Improve our service based on usage patterns
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations under Ghanaian law

3. What We Do NOT Do

DuesFam will never:

• Touch, hold, or process your group's actual dues money. All money flows directly between members and your treasurer through cash, Mobile Money, or bank transfer — outside of DuesFam entirely.
• Sell or rent your personal data to advertisers
• Share member information with anyone outside your group
• Use your group's data to train AI models
• Read or access your group's data for purposes other than providing the service

4. Data Sharing & Service Providers

We use trusted third-party services to operate DuesFam:

• Paystack — Payment processing for Pro/Premium subscriptions only (not your group's dues). Your billing information is handled entirely by Paystack.
• Google — OAuth sign-in (only if you choose "Sign in with Google"). We receive only your name and email address.
• Anthropic AI — When you use the AI document import feature (scanning a dues ledger image), the image is sent to Anthropic's API for text extraction. Images are not stored by Anthropic.
• WhatsApp / Meta — If you use automated reminders or send summaries via our WhatsApp integration, member phone numbers are passed to Meta's WhatsApp Cloud API to deliver messages. Only numbers of members in your group are used.
• Secure cloud infrastructure — We use industry-standard cloud providers for hosting, database, and email delivery. Data is encrypted in transit and at rest.

We never sell your data. We only share what is strictly necessary for each feature to work.

5. Data Security

We protect your data through:

• Industry-standard encryption in transit (HTTPS/TLS)
• Encryption at rest on Supabase database servers
• Row Level Security (RLS) ensuring each group only accesses their own data
• Optional password protection on Excel exports (Pro plan)
• Secure authentication via Supabase Auth with Google OAuth and magic links
• Regular security audits and updates

6. Your Rights

You have the following rights regarding your data:

• Access — View all data we hold about you
• Correction — Update inaccurate information
• Deletion — Request deletion of your account and all associated data
• Export — Download your group data as Excel files at any time
• Withdraw consent — Cancel your subscription and stop using the service

To exercise any of these rights, please use the contact buttons in the Contact Us section at the bottom of this page.

7. Member Phone Numbers & WhatsApp

When you add a member's WhatsApp number to your group, it is used for:

• Generating personalized invite links you can share with the member
• Displaying clickable WhatsApp buttons so you can contact them directly
• Sending payment receipt messages (initiated manually by the group treasurer)
• Sending automated dues reminders and group summaries, if you enable the Auto-Reminders feature (Pro/Premium plan only)

Automated messages are only sent when the group owner explicitly enables the scheduled reminder feature. Group owners are responsible for informing members before their numbers are added and before automated messages are enabled. Members may request removal of their number from the group at any time.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• All your groups, members, and payment records are permanently deleted within 30 days
• Anonymized usage data may be retained for analytics
• Backup copies are deleted within 90 days

9. Children's Privacy

DuesFam is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Our database is hosted in Frankfurt, Germany on Supabase infrastructure. If you access DuesFam from outside the European Economic Area, your data will be transferred to and processed in Germany under standard data protection safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last updated" date at the top of this page
• Notify active users via email for material changes
• Post a notice in the DuesFam dashboard

12. Contact Us

For privacy questions or concerns, use our contact form or reach us directly:

We're real people. Most messages get a reply within a few hours during business days.

DuesFam is a product of Breezy ArtDrop Studios Ltd., based in Accra, Ghana, West Africa. This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of Ghana.