Privacy Policy

DollarDog ("we", "our", or "the app") is a personal finance tool that helps you track shopping spending and stay within your budget. This policy explains what data we collect, how it is used, and how it is protected.

1. Your Bank Credentials

DollarDog never sees or stores your bank username or password.

Bank account linking is handled entirely by Plaid Inc. (plaid.com), a financial data platform trusted by thousands of apps. When you tap "Add New Account", Plaid's secure interface opens — your credentials go directly to Plaid and your bank, not to DollarDog. Plaid holds SOC 2 Type II certification and uses 256-bit AES encryption.

2. What Data DollarDog Collects

• Account balance — fetched from Plaid and cached locally on your device. Never sent to third parties.
• Transaction data — fetched from Plaid to calculate how much you've spent at shopping sites in the past 30 days. Only merchant name, website, amount, and date are used.
• Shopping site visits — DollarDog uses Android's Accessibility Service to read the website address currently open in your browser. Only the domain name (e.g. "amazon.com") is checked locally. Page content is never read.
• Email address and hashed password — stored on DollarDog's backend server (hosted on AWS) to manage your account login. Passwords are one-way hashed using bcrypt.
• App settings — stored only on your device in Android's private storage.

3. What We Do NOT Collect

• Your bank username or password
• Page content, form data, or passwords entered in your browser
• Your browsing history
• Your location
• Any data shared with advertisers or third parties

4. Accessibility Permission

DollarDog requests Android's Accessibility permission solely to detect which website domain is open in your browser. We use this permission only to:

• Read the current browser tab's URL/title
• Check if the domain matches your shopping site list
• Trigger a budget reminder notification if it does

We do not use it to read passwords, form fields, page content, or any other information. The detected domain is checked locally on your device and is never transmitted to our servers.

5. Data Storage and Security

• Data stored on your device is stored in Android's private app storage — inaccessible to other apps.
• Data stored on our server (email, hashed password, Plaid access token) is held on an AWS server protected by security groups and encrypted at rest.
• Communication between the app and our server uses HTTPS/TLS.
• Your Plaid access token is stored only on our server — never on your device.

6. Your Rights

You can delete your account at any time by contacting us at apirbadian@gmail.com. This removes your email, hashed password, and Plaid access token from our server. Uninstalling the app removes all locally stored data.

7. Contact

Questions about this privacy policy? Email us at apirbadian@gmail.com