PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Wizlab ("we," "us," or "our") collects, uses, and protects information when you use Bento (the "App"). We designed Bento with privacy at its core — your financial data stays on your device.

TL;DR: Your subscription data is stored locally on your device. We use privacy-friendly analytics. We do not sell your data.

2. Information We Collect

2.1 Data Stored On Your Device

Bento stores the following data locally on your device using Apple's SwiftData framework:

• Subscription names, prices, billing cycles, and renewal dates you enter
• Categories, colors, and notes you assign to subscriptions
• Notification preferences and reminder schedules
• App settings and display preferences

This data is stored entirely on your device. We do not have access to it and cannot retrieve it.

2.2 Optional iCloud Sync

If you enable iCloud on your device, your subscription data may be synced across your Apple devices through Apple's encrypted iCloud infrastructure. This sync is managed by Apple, not by us. We do not have access to your iCloud data.

2.3 AI-Powered Import (Pro Feature)

When you use the AI import feature to scan receipts or parse confirmation emails, the content is sent to our secure server-side processing (via Supabase Edge Functions and OpenAI API) to extract subscription details. The extracted data is returned to your device and the original content is not stored on our servers after processing is complete.

2.4 Purchases and Subscriptions

In-app purchases and subscriptions are processed by Apple through StoreKit 2. We use RevenueCat to manage subscription entitlements. We receive anonymous purchase identifiers and entitlement status — we do not receive your payment card details, Apple ID, or billing credentials.

2.5 Analytics

We use TelemetryDeck for privacy-friendly, anonymized analytics. TelemetryDeck does not use cookies, does not track users across apps, and does not collect personally identifiable information. We use this data solely to understand aggregate app usage patterns and improve the App.

2.6 Diagnostics

We may review crash reports and diagnostic data made available by Apple through Xcode Cloud to improve app stability. These reports do not contain your subscription data.

3. How We Use Information

We use information solely to operate and improve the App:

• Display your subscriptions, spending insights, and renewal reminders
• Process AI-powered subscription detection from receipts/emails (Pro)
• Validate and restore your Pro subscription entitlements
• Deliver local notifications for upcoming renewals
• Fix crashes and improve app reliability
• Understand aggregate usage to prioritize features

4. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with the following service providers as necessary to operate the App:

• Apple — StoreKit/App Store for purchase processing
• RevenueCat — Subscription entitlement management
• Supabase — Server-side processing for AI import feature
• OpenAI — Receipt/email parsing (data is not retained by OpenAI for training)
• TelemetryDeck — Privacy-first anonymized analytics

5. Data Retention

Local app data remains on your device until you delete it or uninstall the App. Data processed through the AI import feature is not stored on our servers after processing is complete. Purchase records are retained by Apple and RevenueCat according to their respective policies.

6. Data Security

We implement appropriate technical measures to protect your information:

• Local data is stored using Apple's SwiftData with device-level encryption
• iCloud sync uses Apple's end-to-end encryption
• AI import requests use HTTPS/TLS encryption in transit
• Server-side processing uses Supabase's secure edge function infrastructure

7. Your Choices

• You can delete individual subscriptions or all data within the App at any time
• You can uninstall the App to remove all local data from your device
• You can manage iCloud sync in your iOS Settings
• You can choose not to use the AI import feature — manual entry is always available
• You can manage notification permissions in iOS Settings
• You can request purchase refunds through Apple at reportaproblem.apple.com

8. Children's Privacy

Bento is not directed at children under 13. The App does not require account creation and does not knowingly collect personal information from children. If you believe a child has provided personal data to us, please contact us and we will address the issue promptly.

9. International Users

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights regarding your personal data. Since we store data locally on your device and use privacy-friendly analytics, our data practices are designed to be compliant with GDPR and similar regulations by default.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, contact us:

• Email: [email protected]
• Website: https://wizlab.app