PRIVACY POLICY

Last updated: June 2026

1. INTRODUCTION

Dwely ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights. By using Dwely, you agree to this policy.

2. INFORMATION WE COLLECT

a) Information you provide:

- Account information: email address, display name, password (stored as a secure hash)

- Household data: asset names, descriptions, photos, maintenance tasks, service records, warranty details

- Payment information: billing details are processed by Stripe — we never store your full card number

b) Information collected automatically:

- Device identifiers (FCM token) for push notifications

- App usage analytics via Firebase Analytics (screen views, feature usage, subscription events)

- Crash reports via Firebase Crashlytics

- Performance data via Firebase Performance Monitoring

c) Photos and files:

- Photos and documents you upload are stored in Firebase Cloud Storage, scoped to your account only

3. HOW WE USE YOUR INFORMATION

We use your information to:

- Provide and operate the Dwely service

- Process subscription payments via Stripe

- Send push notifications for maintenance reminders and warranty expiry alerts (Firebase Cloud Messaging / FCM)

- Send transactional emails (account creation, payment receipts, invitation emails) via SendGrid

- Improve the App through aggregated, anonymised analytics

- Respond to support requests

- Detect and prevent fraud or abuse

4. THIRD-PARTY SERVICES

Dwely uses the following third-party services which may collect data as described in their own privacy policies:

- Firebase (Google): Authentication, Firestore database, Cloud Storage, Cloud Messaging (FCM), Analytics, Crashlytics, Performance Monitoring, App Check. Privacy policy: https://policies.google.com/privacy

- Stripe: Payment processing and subscription management. Privacy policy: https://stripe.com/privacy

- SendGrid (Twilio): Transactional email delivery (welcome emails, receipts, invitations). Privacy policy: https://www.twilio.com/en-us/legal/privacy

5. DATA SHARING

We do not sell your personal data. We share data only:

- With the third-party services listed above, as necessary to operate the App

- If required by law or legal process

- To protect the rights and safety of Dwely and its users

6. DATA STORAGE AND SECURITY

Your data is stored on Google Firebase servers (Google Cloud Platform). We implement industry-standard security measures including:

- Firebase App Check to prevent unauthorised API access

- Firestore and Storage security rules scoped to authenticated users only

- Encrypted data in transit (HTTPS/TLS)

- Stripe handles all payment data under PCI-DSS compliance

7. HOUSEHOLD MEMBERS

If you invite household members to your Dwely home, they can view your household data (assets, tasks, contacts, records). You control membership and can remove members at any time. Members' email addresses are used solely to send invitation emails.

8. PUSH NOTIFICATIONS

We send push notifications for maintenance reminders and warranty expiry alerts using Firebase Cloud Messaging (FCM). Your device's FCM token is stored in your account and is never shared with third parties. You can disable notifications at any time in your device settings.

9. DATA RETENTION

We retain your data for as long as your account is active. When you delete your account (Settings → Delete Account), all your personal data, household data, photos, and documents are permanently deleted. Stripe may retain billing records as required by financial regulations.

10. CHILDREN'S PRIVACY

Dwely is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. YOUR RIGHTS

Depending on your location, you may have the right to:

- Access the personal data we hold about you

- Request correction of inaccurate data

- Request deletion of your data (via Settings → Delete Account)

- Object to or restrict processing of your data

- Data portability

To exercise these rights, contact us at support@dwely.app.

12. CALIFORNIA RESIDENTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a request, contact support@dwely.app.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or email. The "Last updated" date at the top reflects the most recent revision.

14. CONTACT

For privacy questions or requests, contact us at:

Email: support@dwely.app