ForeDue Privacy Policy

1. Introduction & Privacy Commitment

This Privacy Policy explains what data ForeDue processes, the limited circumstances where network communication occurs, and how you maintain complete control over your records. By using ForeDue, you acknowledge the data handling practices described in this document.

2. Information We Process & Where It Is Stored

2.1 On-Device Local Data (Core App)

When using ForeDue, the following data is created and saved strictly on your local device:

• Commitment Records: Service name, category (e.g. Subscription, Utility Bill, Membership, Trial, Contract Expiry), billing frequency (Monthly, Yearly, One Time, etc.), price amount, currency code, next due date, start date, and contract end / expiration date.
• Payment History: Dates of recorded payments, historical amounts, payment methods (cash/card tags), and adjustment history.
• Advisor Reviews & Decision Logs: Your self-reported responses to recurring commitment checkups (e.g. usage level, affordability) and logged audit decisions (Keep, Cancel, Downscale).
• Local Reminder Preferences: Notification lead times (e.g. 1 day before, 3 days before) and preferred daily alert times.

Storage Location: All core tracking data is saved in your device's private SQLite sandbox. We cannot view, access, or harvest this data from your phone.

2.2 On-Device Camera & Receipt Scanning (OCR)

When you utilize ForeDue's receipt and invoice capture:

• Camera and photo library access is requested solely to capture images of subscription invoices, renewal notices, or receipts.
• Optical character recognition (OCR) and currency amount extraction are performed 100% on-device.
• Zero Cloud Upload: ForeDue does not upload your receipt photos or invoice scans to remote servers. Images are processed in temporary local memory and discarded once you verify or save the details.

2.3 On-Device Notifications

Reminders and renewal alerts are scheduled and triggered locally using Android's native system schedulers (AlarmManager / NotificationManager). No remote push notification server receives the names, pricing, or dates of your bills.

2.4 Anonymous Onboarding Telemetry & Acquisition Survey

When you complete the initial setup wizard, ForeDue transmits a lightweight, anonymous onboarding telemetry event to help us localize the app and understand discovery channels:

• Anonymous Installation ID: A randomly generated client identifier (e.g. anon-4f28-98e1) stored in secure on-device storage. It is never linked to your hardware serial, IMEI, MAC address, Google Advertising ID (GAID), or real-world identity.
• General Configuration: Selected region code (e.g., ID, US, EU) and selected default currency code (e.g., IDR, USD).
• Non-Identifying Survey Responses: Estimated subscription volume bucket (e.g., 1-3, 4-7, 8+), primary user goal (e.g., prevent_surprises), and discovery channel (e.g., google_play, chatgpt, gemini, claude, shipaton, community, referral).
• Technical Metadata: Platform (Android, iOS, or Web) and application version.

Zero PII Guarantee: This event contains no names, no emails, no financial totals, and no titles of personal commitments.

2.5 Crowdsourced Catalog Price Variance Telemetry

To maintain accurate service catalog pricing for all users across volatile regional currencies:

• When a user selects a recognized service plan (e.g. Netflix Standard IDR) and enters a different price, ForeDue dispatches an anonymous price variance report (price_variance_reported).
• Transmitted Fields: serviceId, planName, currency, and reportedPrice.
• Zero PII: This report carries no user identifiers, no account credentials, and no personal notes. It is used strictly in aggregated form by administrators to flag catalog updates.

2.6 Optional Account & Cloud Backup Data (ForeDue Pro)

If you register an optional account to enable multi-device sync or encrypted cloud backups:

• Authentication Options:
  • Email & Password: We collect your email address and store a salted, cryptographically hashed representation of your password (using Argon2/bcrypt). We never store plaintext passwords.
  • Google Sign-In (OAuth): You may sign in using your Google Account. We only receive your verified email address and Google user identifier to authenticate you. We do not access your Google Drive, contacts, calendar, or any external Google data.
• Encrypted Cloud Backups: When you explicitly choose to backup or sync, ForeDue transmits a JSON snapshot of your records over an encrypted TLS connection to our secure backend. You can delete or overwrite your cloud snapshot at any time.

2.7 In-App Purchase & Subscription Data

When purchasing ForeDue Pro:

• Payment Processing: All payments are processed directly by Google Play Billing (Google LLC). ForeDue never receives, processes, or stores your credit card numbers, bank accounts, or billing addresses.
• Receipt Validation: We use RevenueCat to validate Google Play purchase tokens and verify Pro entitlement status. RevenueCat receives an anonymous app user identifier and receipt tokens generated by Google Play.

3. How We Use Information

We process information strictly for the following purposes:

1. Core Tracker Utility: Calculating payment schedules, projecting upcoming commitment costs, and triggering local renewal alerts.
2. Catalog Matching & Advisory: Comparing your entered commitments against our curated public catalog to suggest right-sizing and annual savings. (Matching occurs locally on your device).
3. Optional Cloud Backup: Storing and restoring your encrypted backup snapshots upon your explicit command.
4. Catalog Accuracy: Aggregating anonymous price variance reports to correct regional plan pricing.
5. Security & Fraud Prevention: Validating legitimate Google Play purchase tokens and defending cloud sync endpoints against abuse.

4. How Information Is Shared

We do not sell, rent, lease, or trade your personal or financial records to data brokers, advertising networks, or third parties.

Data is shared only with the following service providers strictly necessary to operate the service:

• Google Play (Google LLC): To process in-app purchase transactions in compliance with Google Play Developer policies.
• RevenueCat Inc.: To verify purchase tokens and maintain Pro entitlement status across sessions. (See RevenueCat Privacy Policy).
• Self-Hosted Infrastructure (Freightpx): Our secure servers host user authentication and optional encrypted cloud backup snapshots.
• Legal Requirements: If required by applicable court order, subpoena, or law, we will disclose information strictly to the minimum extent mandated by law.

5. Data Retention & Your Rights

5.1 Local Data Deletion

Because your tracking data resides on your device:

• You can modify or delete individual commitments, payments, or review records at any time.
• You can completely erase all local data by clearing the app data in Android Settings or uninstalling the app.

5.2 Account & Cloud Backup Deletion

If you created an optional ForeDue account:

• You can request immediate permanent deletion of your account and all associated cloud backup snapshots by navigating to Settings > Account > Delete Account or by contacting us at hello@freightpx.com or freightpixel@gmail.com.
• Upon request, all server-stored snapshots and user records will be permanently purged within 30 days.

5.3 Exporting Your Data

ForeDue provides an unrestricted JSON backup export feature under Settings > Backup & Local Storage > Create backup file. You can export, inspect, and take your data with you at any time.

6. Security

We implement rigorous technical and organizational measures to safeguard your data:

• All network communications between ForeDue and our servers use Transport Layer Security (TLS 1.3 / HTTPS).
• Local session tokens and credentials are encrypted using Android Keystore-backed secure storage (EncryptedSharedPreferences).
• Passwords stored on our servers are hashed using industry-standard cryptographic hash functions (Argon2 / bcrypt); plaintext passwords are never recorded.

7. Children's Privacy

ForeDue is not directed toward children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please notify us immediately at hello@freightpx.com, and we will promptly delete it.

8. International Data Transfers

If you choose to use optional cloud sync or backup features, your account email and backup snapshots may be processed and stored on secure cloud servers located in regions where our hosting infrastructure operates. By using optional cloud services, you consent to this transfer.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect app updates or legal requirements. When changes are made, the "Last Updated" date at the top of this document will be updated, and the new policy will be posted at https://freightpx.com/foredue/privacy.

10. Contact Us

If you have any questions, inquiries, or privacy-related requests, please contact our team:

• Publisher: Freightpx / PixelFreight
• Primary Support: hello@freightpx.com
• Alternative / Developer Contact: freightpixel@gmail.com
• Official Website: https://freightpx.com
• Application Hub: https://freightpx.com/foredue