Sefiro Privacy Policy

Effective Date: July 17, 2026 · Intended for users aged 17+

1. Who we are

This Privacy Policy explains how Sefiro (“Sefiro,” “we,” “us,” or “our”) handles information when you use the Sefiro mobile application and related features that let you create group activity events, set budgets, log expenses, attach photos and voice notes, review spending summaries, and optionally generate an Activity Report (the “Service”).

Contact: Sefiro Team · gmail@silverback.quest

2. Eligibility (17+)

The Service is intended for users who are at least 17 years old. We do not knowingly collect personal information from anyone under 17. If you believe a user under 17 has provided personal information, contact us at gmail@silverback.quest and we will take appropriate steps to delete it.

3. Information we collect

3.1 Information you provide in the app

• Profile information: nickname and optional avatar image you set in Profile.
• Event information: event name, template type (such as Camping, Road Trip, Dinner, or Concert), budget amount, participant count, and optional cover photo.
• Expense information: expense title/description, amount, category (Food & Drink, Transport, Accommodation, Tickets, or Other), split mode/count, optional receipt photo, and optional voice note.
• Generated reports you save: Activity Report text generated at your request and stored with the related event on your device.
• Support communications: messages and attachments you send if you contact us for help.

3.2 Information stored locally on your device

By default, event records, expense records, coin balance records, profile settings, photos, and voice notes created in Sefiro are stored locally on your device. Deleting the app or using Delete Account in Profile can permanently erase this local data.

3.3 Information processed when you use optional features

• Activity Report generation: if you choose Generate Report, we process event statistics and expense-related text (for example, event name, budget, total spent, overspend status, participant count, per-person amount, category breakdown, and expense count) to create a short written summary. Photos and voice-note audio files are not uploaded for this feature.
• Sharing: if you tap Share, content you choose to share is handed to the system share sheet under your control.
• In-app purchases: if you buy coins, Apple processes the transaction. We receive purchase validation information needed to credit coins to your balance.

3.4 Device permissions (only if you allow them)

• Camera: to capture cover photos or receipt photos.
• Photo Library: to select images already on your device.
• Microphone: to record short voice notes attached to expenses.

Sefiro’s event budget features do not require location access, and this Privacy Policy does not describe collection of precise location for those features. You can revoke permissions at any time in iOS Settings.

3.5 Information collected automatically

Depending on your device and platform settings, we or our service providers may receive limited technical information needed to operate and improve the Service, such as device model, operating system version, app version, language/time zone, basic usage diagnostics, and crash logs.

4. Photos, voice notes, and biometric information

• We do not use face recognition, biometric identification, or biometric profiling.
• We do not use your photos or voice notes to infer sensitive traits.
• Receipt photos, cover photos, and voice notes are stored locally unless you choose a feature that transmits specific content (for example, sharing via the system share sheet).
• We do not sell your photos, voice notes, or other personal information.

5. Optional AI-assisted Activity Reports

If you choose to generate an Activity Report:

• User control: generation is optional and initiated by you.
• What is processed: event and spending statistics/text described above, not your photo or audio files.
• Purpose: to produce a short English activity/budget summary you can review and share.
• Coins: report generation may consume in-app coins. Failed generations are not charged.
• Retention of inputs for generation: content sent for report generation is processed to fulfill your request and is not retained by us longer than needed for that request, subject to short-lived technical buffering, retries, or legal requirements.
• No advertising use: we do not use your event content for advertising profiling or to train third-party foundation models for unrelated purposes.

6. How we use information

We use information to:

• Provide event budgeting, expense tracking, category totals, per-person shares, timelines, charts, and history.
• Store and display your profile nickname/avatar and local records.
• Provide optional Activity Report generation and sharing.
• Manage coin balances and fulfill Apple-processed purchases.
• Respond to support requests and protect the security and integrity of the Service.
• Improve stability and performance using diagnostics where applicable.
• Comply with law and enforce our terms.

We do not sell your personal information.

7. How we share information

We share information only as needed:

• With your consent or at your direction (for example, when you share a summary).
• With service providers that help operate the Service (such as infrastructure, diagnostics, or AI processing used solely to fulfill a report you request), under obligations to protect data and process it only as instructed.
• With Apple for in-app purchase processing and validation.
• For legal reasons, or to protect rights, safety, and security.

8. International transfers

Information processed for optional online features may be handled in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

9. Security

We use reasonable safeguards designed to protect information, including access controls and encrypted transmission where appropriate. No method of transmission or storage is completely secure. You are responsible for maintaining physical control of your device and any access protections you enable.

10. Data retention and deletion

• Local event and media data: retained on your device until you delete the related content, use Delete Account, or remove the app.
• Delete Account: erases local events, expenses, profile information, and related stored media associated with the Review experience on that device.
• Support messages: retained as needed to resolve your request, and generally no longer than necessary.
• Purchase records: may be retained as required for accounting, fraud prevention, and legal compliance.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict processing, object, or withdraw consent where applicable. To make a request, email gmail@silverback.quest. We aim to respond within a reasonable period.

You can also:

• Edit or delete expenses and related media in the app where those controls are available.
• Change or revoke Camera, Photo Library, and Microphone permissions in iOS Settings.
• Choose not to generate Activity Reports or purchase coins.
• Use Delete Account to erase local app data on the device.

12. Children’s privacy

The Service is not directed to children under 17. We do not knowingly collect personal information from children under 17.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice in the Service or by other appropriate means. The Effective Date above shows when this version takes effect.

14. Contact us

Questions or requests about this Privacy Policy:
Sefiro Team
Email: gmail@silverback.quest

15. Governing law

This Privacy Policy is governed by the laws of our principal place of business, without regard to conflict-of-laws rules, except where mandatory local consumer protections apply.

Last updated / Effective Date: July 17, 2026. This document is for users aged 17+.