Privacy Policy

Debtox is a spending-habit app. The data controller is the Debtox team. You can reach us at support@getdebtox.com.

• Account: email, name, language, currency and timezone.
• Plan: mode (debt/saver), monthly pace, categories and completed moves.
• Analytics (only with your consent): pageviews and product usage events.

We never ask for or store banking data, and we do not connect to your accounts.

Performance of the contract to run the app, consent for analytics and non-essential email, and legitimate interest for service security.

We use PostHog (EU-hosted) and Google Analytics 4. Neither loads until you accept analytics in the consent banner. If you reject it, no events are sent. Monetary figures are masked in session replays.

We send account email (confirmation, recovery) and, if enabled, the Sunday nudge and Monday recap. You can turn these off in Settings or from the link in any email.

We keep your data while your account exists. When you request deletion, the account is deactivated and the data is permanently erased after 30 days.

You can access, correct, delete, restrict or object to processing, and request portability of your data. Write to support@getdebtox.com. You may also complain to your local data protection authority.

Supabase (database and auth), PostHog EU (analytics), Google Analytics, Mailgun via Lovable's email infrastructure, and Cloudflare (hosting).