Operational document
Data Handling
Last updated: October 29, 2026
1. Purpose
This policy defines how Cuadre collects, stores, uses, protects, retains and deletes user data.
2. Scope
It applies to the Cuadre mobile app, Supabase, backend functions, external providers such as Apple, Google, Supabase and RevenueCat, and anyone with administrative access to the project.
3. Categories of data processed
- Account data: email, internal identifier and creation date.
- Financial data: transactions, accounts, categories and budget settings.
- Subscription data: status and technical identifiers from Apple, Google Play and RevenueCat.
- Text of messages and dictations the user sends to log transactions with AI (audio is not stored), tags, goals and learned merchants.
- Usage counters for AI features.
- Strictly necessary technical and security data.
Cuadre does not and will not connect to banks, does not query real bank balances and does not store banking credentials.
4. Purposes
Data is used to create accounts, log and display transactions, calculate balances and budgets, sync information, validate subscriptions, provide support, fix errors, maintain security and comply with legal obligations.
5. Principles
- Data minimization.
- Use limited to stated purposes.
- Transparency.
- Security.
- Confidentiality.
- Limited retention.
- Accountability.
6. Internal access
Administrative access must be limited to the minimum necessary. User transactions must not be reviewed except for support, security, debugging or legal compliance. Data must not be exported to external tools without a justified reason.
7. Technical security
- Authentication through Supabase Auth.
- Row Level Security on tables with user data.
- Separation per user.
- HTTPS/TLS.
- Sensitive keys kept out of the source code and the mobile bundle.
- Service role key only on a secure backend.
8. Local data
Cuadre may store local data for caching or offline use. This data must be limited to what is necessary and cleared on sign-out or account deletion where technically appropriate.
9. External providers
Before adding a provider, we must assess what data it receives, for what purpose, in which country it processes it, what security it offers and whether it must be mentioned in the Privacy Policy.
9 bis. Artificial intelligence
The message and voice features send only the text and category names to the AI (Anthropic), without email, name or balances. Limits apply per user, per feature and globally, plus a pause switch. Calls are made from Edge Functions using the user's session; the provider key is never in the app. The submitted texts are not stored, only usage and cost counters.
10. International transfers
Some data may be stored or processed outside Ecuador by cloud providers. New providers or countries require reviewing the Privacy Policy.
11. Retention
Data is kept while the account is active. If the user deletes their account, the data is removed from the active database except for legal, anti-fraud, billing, security or claims-defense obligations. Backups may keep temporary copies until their normal rotation.
12. Account deletion
Deleting the account removes the authentication user and associated data. The Apple subscription is not cancelled automatically.
13. User rights
Cuadre must provide a support channel for requests for access, rectification, deletion, objection, portability, withdrawal of consent and information about processing.
14. Incidents
In an incident we must contain the problem, identify the affected data and users, review logs, fix the cause, document measures and notify when the law requires it.
15. Product changes
Features such as analytics, new AI features, CSV, attachments or push notifications require reviewing data handling before launch. Bank connection is not part of Cuadre's product direction.
16. Controller
Data controller: JinKun Chen
ID number: 0151233681
Address: Guayaquil, Ecuador
Email: soporte@cuadrefinanzas.com