Privacy Policy

Preamble

This policy explains which personal data we process, for what purposes, on what legal basis and for how long, when you use the website Diatypis (diatypis.com) and the Android app Amerimnia. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).

In short: we do not sell data, we do not do advertising or profiling, and we use no third-party analytics or advertising SDKs. Amerimnia also works without an account, in which case your data stays on your phone.

Table of contents

• Controller
• Overview of processing
• Legal bases
• Security measures
• Disclosure of data and service providers
• Transfers outside the EU
• Retention and deletion
• Your rights
• Website provision and hosting
• Cookies and browser storage
• Automatic language selection
• Registration, sign-in and account
• Sign-in with external services (Single Sign-On)
• Google user data
• Amerimnia: data stored on your device
• Amerimnia: sync
• Amerimnia: Groups and Spaces
• Amerimnia: AI assistant and receipt scanning
• Bug reports
• Public website chat
• App permissions
• Children
• Changes to this policy
• Definitions

Controller

Taras Huzii, who develops and operates Diatypis and Amerimnia
Tax code: HZUTRS98P08Z138T
Reggio Calabria, Italy
Email: tarasmyhuzii@gmail.com

No data protection officer (DPO) has been appointed, as one is not required given the nature and scale of the processing.

Overview of processing

Legal bases

• Consent (Art. 6(1)(a) GDPR) — for optional features you enable yourself, such as the AI assistant.
• Performance of a contract (Art. 6(1)(b) GDPR) — to provide the account and the features you asked for: sign-in, sync, Groups and Spaces.
• Legal obligation (Art. 6(1)(c) GDPR) — where the law requires us to keep or disclose data.
• Legitimate interests (Art. 6(1)(f) GDPR) — for the security of the service, fixing defects and choosing the language, always within what you would reasonably expect.

In addition to the GDPR, the Italian Personal Data Protection Code applies (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).

Security measures

We apply technical and organisational measures appropriate to the risk, in particular:

• all connections are encrypted (HTTPS/TLS);
• passwords are stored only as salted hashes, never in plain text;
• the website session is a signed cookie, not readable by page scripts (httpOnly) and sent only over HTTPS;
• synced data has per-document permissions: only the account that created it can read it, except what you share in Groups and Spaces;
• operations involving more than one account go through a server function that verifies identity before every read or write;
• in the app, the lock PIN is stored only as a hash, and biometrics are handled by Android, which returns only the result to the app;
• we collect only the data needed for the features you use.

Disclosure of data and service providers

Data is processed by the following providers, acting as processors on our behalf, each with its own contractual safeguards:

• Vercel Inc. — Website hosting and storage of uploaded files (news images, screenshots attached to bug reports) (United States, with EU edge locations).
• Neon Inc. — Database for website accounts and bug reports (European Union).
• Appwrite (Appwrite Cloud) — App accounts, sync, Groups and Spaces, reached through the domain auth.diatypis.com (Frankfurt, Germany).
• Google Ireland / Google LLC — Gemini model for the assistant (text, photos and voice notes) and receipt scanning (European Union and United States).
• Supabase Inc. — Messages in the website's public chat (company based in the United States).

In shared features, some data is visible to other participants by your choice (see Groups and Spaces). Apart from that, we do not disclose your data to third parties, unless required by law or by a public authority.

Transfers outside the EU

The app database (Appwrite Cloud) is located in Frankfurt and the website database (Neon) in the European Union. Some providers are based in the United States (Vercel, Supabase, Google): in those cases transfers rely on the European Commission's Standard Contractual Clauses (Art. 46 GDPR) and, where the provider takes part in it, on the EU-US Data Privacy Framework (Art. 45 GDPR).

Retention and deletion

• Account data and synced data: as long as the account exists. After deletion they are erased within 30 days; backup copies are overwritten within 90 days.
• Spaces: until their creator deletes them, even after expiry. Groups: as long as the group exists.
• Bug reports and chat messages: as long as needed (to fix the defect or for the conversation); you can ask for their deletion at any time.
• Hosting provider technical logs: according to the provider's retention periods.
• Download counter: an aggregate number that identifies no one, kept indefinitely.

We keep data longer only where the law requires it.

Your rights

Under Articles 15–22 GDPR you have the right to:

• access your data;
• rectification of inaccurate data;
• erasure;
• restriction of processing;
• data portability in a readable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting processing already carried out.

Write to tarasmyhuzii@gmail.com: we reply within 30 days. To delete your Amerimnia account there is a dedicated page, diatypis.com/elimina-account, also reachable from the app (Settings → Data → Delete account) and usable without the app installed. Expenses that are part of other participants' accounts are made no longer attributable to you instead of disappearing, so their balances are not altered.

You also have the right to lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, or with the authority of the country where you live.

Website provision and hosting

To show you the website, the hosting provider receives your browser's requests and logs their technical data, including the IP address, for the operation and security of its infrastructure. We do not use this data to identify visitors. We count each app's downloads only as a total, without recording IP, device or identity.

• Data processed: log data; usage and technical data
• Data subjects: website visitors
• Purposes: providing the website; security
• Legal basis: legitimate interests (Art. 6(1)(f) GDPR)
• Provider: Vercel Inc., United States — vercel.com/legal/privacy-policy

Cookies and browser storage

The website uses only technical tools needed for it to work, which do not require consent (Art. 122 of the Italian Privacy Code). We use no profiling cookies and no analytics, which is why you see no banner.

• studio_session — keeps you signed in; technical, signed, httpOnly cookie.
• studio_lang — remembers the website language; preference cookie, lasts one year.
• Browser local storage — keeps the number of your anonymous chat name (e.g. User-12) so you don't get a new one on every visit.

• Legal basis: legitimate interests (Art. 6(1)(f) GDPR); performance of a contract for the sign-in session

Automatic language selection

On your first visit we choose the website language based on the country you connect from, which the hosting provider derives from your IP address, and on your browser's language. The country is used only for this choice: we do not store it, we do not link it to your account and we do not ask your device for its location. You can change the language at any time from the selector in the header.

• Data processed: country derived from the IP (not stored); browser language
• Data subjects: website visitors
• Purposes: showing you the website in a language you understand
• Legal basis: legitimate interests (Art. 6(1)(f) GDPR)
• Provider: Vercel Inc., United States

Registration, sign-in and account

You can create an account on the website and, separately, in the app. On the website we store your name, email and password (hash only) in the website database. In the app the account is handled by Appwrite Cloud and is needed only if you enable sync or shared features. Together with the account we keep minimal technical session data (sign-in date, device identifier).

• Data processed: account data; contact data; usage and technical data
• Data subjects: account holders
• Purposes: creating and managing the account; authentication; security
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Providers: Neon Inc. (website, EU); Appwrite Cloud (app, Frankfurt)

Sign-in with external services (Single Sign-On)

You can sign in with your Google or GitHub account instead of creating a password. The service you choose asks your permission to share some basic profile data with us; we never see your password.

• Data processed: email, email verification status, name
• Data subjects: users who choose this sign-in method
• Purposes: authentication
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — policies.google.com/privacy; GitHub, Inc. — GitHub privacy statement

Google user data

This section describes how Diatypis and Amerimnia access, use, store, share, protect and delete data received from Google through “Sign in with Google”.

Data accessed. We request only the basic scopes openid, email (https://www.googleapis.com/auth/userinfo.email) and profile (https://www.googleapis.com/auth/userinfo.profile). We use three pieces of information from them: your email address, whether Google has verified it, and your name (if it is missing, we use your email in its place). We do not access your contacts, Gmail, Drive, calendar, profile photo or any other data in your Google Account, and we do not request permission to do so.

How we use it. Only to create your account or sign you in to your existing one, and to show your name in your profile. A sign-in with an unverified email is rejected, to prevent someone from taking over another person's account. Google user data is not used for advertising, profiling, selling or training artificial intelligence models, nor for any purpose other than providing and securing sign-in.

How we store it. Your email and name are stored in your account: in the website database or, if you sign in from the app, in Appwrite Cloud (Frankfurt). On the website, the access token issued by Google is used once to read your profile and is not stored. In the app, sign-in is handled by Appwrite, which keeps the token with your session until it expires or you sign out; we do not use it to call any other Google service.

Sharing. We do not sell, rent, transfer or disclose Google user data to third parties. It is processed only by the providers that host the service (see Service providers), and only as needed to run it.

Protection. The data travels only over encrypted connections and is stored in a database accessible only to the service backend, not public and not visible to other users.

Retention and deletion. We keep your email and name as long as your account exists; if you delete your account at diatypis.com/elimina-account, they are erased within 30 days. You can revoke Diatypis's access to your Google Account at any time at myaccount.google.com/permissions.

• Data processed: email, email verification status, name
• Purposes: authentication and account management
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Providers: Google Ireland Limited; Neon Inc.; Appwrite Cloud

Diatypis's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Amerimnia: data stored on your device

By default Amerimnia works without an account. Tasks, deadlines, transactions, budgets, labels, voice notes, focus sessions, moods, profile photo and the lock PIN (hash only) are stored exclusively in the app's private storage on your phone: they do not pass through our servers and we cannot read them. If you uninstall the app without sync, this data is lost; that is why the app offers CSV export.

Even without an account, the app downloads the news feed from the website: it only reads public content and sends nothing that identifies you, apart from the IP address that any web request involves (see Hosting).

Amerimnia: sync

Sync is optional. If you enable it, the content you sync is stored in Appwrite Cloud, reached through our domain auth.diatypis.com, so you can find it on another device. Only your account can read it.

• Data processed: account data; content data; optional reimbursement details
• Data subjects: account holders
• Purposes: syncing across devices
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Provider: Appwrite Cloud, Frankfurt (Germany)

Amerimnia: Groups and Spaces

Groups and Spaces are for managing tasks and expenses together with other people and require an account.

• Groups (for example, a shared flat): members see each other's name, email and role, the group's tasks and the shared expenses with balances. When you search for someone to invite, their email appears only partially masked.
• Spaces (a trip, a dinner): anyone who joins with the invite code sees the Space name, participants, expenses and balances. If you created the Space and added a PayPal.me link or IBAN to your profile, participants see it so they can reimburse you; you can remove it at any time.

A Space lasts 7, 14 or 30 days, then it is archived. Amerimnia does not move money: reimbursements happen directly between participants.

• Data processed: name, email, role; shared content data; optional reimbursement details
• Data subjects: participants in Groups and Spaces
• Purposes: shared features
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Provider: Appwrite Cloud, Frankfurt (Germany)

Amerimnia: AI assistant and receipt scanning

If you use the assistant or scan a receipt, the content of the request (the text you write, attached photos and voice notes, the relevant task and expense data, the photo of the receipt) is sent to Google to be processed by the Gemini model. Photos are downscaled before sending. We do not send your email or your whole archive, only the context needed for the single request.

Both features require an account and use your personal Google Gemini key, which you create on Google AI Studio: the request goes directly from your phone to Google without passing through our servers, and your relationship with Google for that content is governed by the terms you accepted when creating the key. The key stays only on that phone: it is not synced or included in backups, and you can delete it from Settings → Security and privacy. For a small number of accounts (the developer and a test account for store review) the request instead goes through a function on our server, which does not store its content.

These features are separate from “Sign in with Google”: Google user data is never sent to the assistant.

• Data processed: content data included in the request
• Data subjects: users of the assistant or receipt scanning
• Purposes: providing answers and reading receipts
• Legal basis: consent (Art. 6(1)(a) GDPR), given by using the feature and withdrawn by no longer using it
• Provider: Google Ireland Limited / Google LLC — policies.google.com/privacy

Bug reports

If you send a report from the app, we receive the description you write, the screenshot if you choose to attach it, the app version, the operating system and the phone model; if you entered a name or email in your profile, they are attached so we can reply. The screenshot is reachable only through a random, non-indexed address. The IP address is used only for an instant, to limit repeated submissions, and is not stored.

• Data processed: content data; usage and technical data; optional contact data
• Data subjects: users who send reports
• Purposes: fixing defects
• Legal basis: legitimate interests (Art. 6(1)(f) GDPR)
• Providers: Neon Inc. (reports); Vercel Inc. (screenshots)

Public website chat

The website chat is public: messages are visible to anyone who opens it. If you have an account you appear with the name chosen at registration, otherwise with an anonymous name. Do not write personal data about yourself or others in the chat.

• Data processed: messages; display name
• Data subjects: people who write in the chat
• Purposes: running the chat; moderation
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in moderation (Art. 6(1)(f))
• Provider: Supabase Inc., United States — supabase.com/privacy

App permissions

• Notifications and exact alarms — reminders scheduled on the device; no push notifications from our servers.
• Microphone — only while you record a voice note.
• Camera and gallery — only when you pick a photo, frame a receipt or attach an image.
• Biometrics — only if you enable the app lock; the app receives only the result.
• Internet — sign-in, sync, shared features, assistant, news and bug reports.
• Start on boot — to reschedule reminders after a restart.

Children

The services are not intended for children under 14. We do not knowingly collect data from children under that age: if we become aware of it, we delete the account.

Changes to this policy

We update this policy when our processing changes. The date at the top shows the latest change; substantial changes are announced in the app or on the website before they take effect. We will never use data already collected for a new purpose without asking you.

Definitions

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any operation performed on personal data, such as collection, storage, consultation, disclosure or erasure.
• Controller: whoever determines the purposes and means of processing.
• Processor: whoever processes data on behalf of the controller, such as a hosting provider.
• Log data: technical information about requests to a system, such as date, time and IP address.
• Content data: what you create or enter in the service, such as texts, expenses and images.
• Profiling: automated processing to evaluate or predict personal aspects, such as interests or behaviour. We do not do it.