Privacy Policy

Last updated: 5 October 2026

Who is responsible

Meraki Softworks Ltd, company number 14223666, registered in England and Wales. Our registered office is Flat 518, 101 Blackwall Way, London, England, E14 9QX. Email: contact@merakisoftworks.com.

We are the controller for the ClearDebt information described below. For website browsing, enquiries and support, also read our website privacy notice. This notice is information about processing, not blanket consent to every feature.

Local storage and online features

ClearDebt stores personal entries on your device, but using the app is not necessarily an offline or anonymous activity. Sign-in, subscriptions, diagnostics, analytics, AI requests and shared features can communicate with online providers separately from cloud backup.

Cloud backup can turn on automatically when you sign in with an active Pro entitlement. It is not always a separate opt-in step. Where sync is enabled, records are uploaded to Supabase to provide backup and synchronisation. Turning sync off or signing out does not by itself delete records already uploaded. Use the available data controls or contact us for deletion.

Information collected, sources and uses

Financial planning records: debts, creditor names, balances, interest rates, payments, income, expenses, budgets, notes, dates, repayment plans and progress records that you enter or import. These are stored locally and can be uploaded when cloud backup is enabled.
Statements and AI requests: a cloud statement-import or AI feature can send the selected file, extracted statement text, transaction descriptions, amounts, dates, your question and relevant financial context to our Supabase service and Google Gemini. A statement can contain names, addresses or account numbers even if those fields are not needed for a calculation. Local parsing features process files on the device; choosing a cloud import has a different data flow. Do not upload other people's statements without authority, and remove unnecessary sensitive information where possible.
Account and purchase information: account identifiers, email and sign-in-provider information, subscription entitlement, transaction identifiers and an app-user identifier used by RevenueCat. We do not receive your full store payment-card details.
Usage and diagnostics: Firebase Analytics events, app and device identifiers, device/OS and app version, and approximate location derived by the provider; Firebase Crashlytics and Sentry error traces and technical context. Ordinary service requests expose an IP address to their recipient.
Notifications and abuse prevention: push notification tokens, installation or device identifiers, job status, request timestamps and usage counters used to deliver requested updates and enforce feature limits.
Support: messages and attachments that you choose to send us. Website activity is covered by the website privacy notice.

Providers and disclosure

Supabase: authentication, database/storage, server functions, sync, feature requests, usage controls and notification records.
Google Gemini: AI prompts, relevant context and files or images sent for the AI/import feature. Generated responses and job results can be stored in our service as well as on your device. Google can retain requests for service operation and abuse monitoring under the applicable service terms. Its use of content also depends on the API service and billing configuration. See the Gemini API terms.
Google Firebase: Analytics and Crashlytics, plus Cloud Messaging for usage measurement, crash diagnosis and push delivery. Sentry supplies error reporting. These services can process technical identifiers and diagnostic context even if cloud backup is off.
RevenueCat, Apple and Google Play: subscription validation, app-user identifiers, entitlement and transaction information. Apple and Google process payment details and purchases under their own store policies.
Other recipients: relevant support/communications providers and, where legally necessary, professional advisers, authorities or a business successor subject to appropriate safeguards. We do not offer your financial records for sale.

Why we process information and legal bases

Contract and steps towards a contract: delivering the feature you request, account access, sync, subscription access, AI/import processing, calculations and plans. Information needed for a chosen online feature must be processed to supply it; you can choose not to use that feature.
Legitimate interests: securing the service, preventing fraud, applying usage limits, responding to support and diagnosing technical faults, subject to balancing our interests with your rights.
Consent where required: device access, non-exempt analytics/tracking and any processing or disclosure for which the applicable law requires consent. Device permission or Apple's tracking prompt is not blanket consent to unrelated processing. You can withdraw consent for future processing.
Legal obligations: statutory records, legally binding disclosure requests and other applicable legal duties.

AI provides automated suggestions or extracted information for you to review. We do not use those outputs to decide whether you receive credit, insurance or employment. AI can produce inaccurate results; the relevant app terms explain the limits.

International processing

We operate in the United Kingdom. Our hosting, diagnostics, subscription and AI providers also operate internationally, including in the United States and the EEA. The location of processing can depend on the service, hosting region and provider support arrangements; data is not necessarily kept in your country.

For a transfer restricted by UK/EEA data-protection law, a recognised adequacy decision or appropriate safeguards are required. Provider data-processing terms may supply EU Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement where applicable. Other countries can require different safeguards or separate consent. Ask contact@merakisoftworks.com for the countries and transfer mechanism relevant to your information and a copy of the applicable safeguards, with confidential commercial information removed. This notice does not itself give consent to an international transfer.

Retention and deletion

Device records: remain until you delete or clear them. Uninstalling normally removes app-local storage, but device or operating-system backups and exported copies can remain.
Cloud account and feature records: remain while needed for your account, enabled service, saved results or an outstanding request. Disabling sync, signing out, uninstalling or cancelling a subscription does not automatically erase server records.
AI/import jobs and results: may include submitted content, extracted information, responses and processing status. We retain them to complete or resume a job, retrieve results, investigate failures and apply feature limits; saved results can remain with your account. Provider-held request data follows the relevant service's retention terms and configuration.
Diagnostics, analytics and abuse records: use provider-configured retention and the period needed to diagnose faults or investigate a particular incident. Purchase/support records may be retained for applicable accounting, tax, refund or legal-claim periods.
Deletion exceptions: relevant information may remain for a specific legal requirement, unresolved claim or limited backup recovery cycle. Where an exception applies to your request, we will explain the category and reason. Copies you exported, shared with others, or retained in your own backups are outside our control.

How to request account or data deletion

Use the account-deletion option where available in the app, or our account-deletion instructions to email contact@merakisoftworks.com. Identify ClearDebt and the address used for your account. The website link prepares an email; opening it does not submit or complete deletion. We may need to verify your request. A request for full account deletion covers the account and associated personal information, including synced records and relevant AI/import data, subject to any lawful retention exception we explain. You do not need to list every data category.

Account or data deletion does not cancel an Apple/Google subscription. Cancel it separately in the store. A deletion request also does not guarantee that every third-party billing or legally retained record can immediately be erased.

Device choices, analytics and diagnostics

You can manage camera, photo, location, notification and tracking permissions in device settings where applicable. Permissions affect the relevant feature; they do not necessarily disable authentication, subscription checks or every diagnostic SDK. ClearDebt uses Firebase Analytics, Firebase Crashlytics and Sentry; this notice does not imply that a single in-app switch disables them all.

For an objection or a request to stop optional processing, contact contact@merakisoftworks.com. Declining an online feature avoids the information needed by that feature but does not itself stop other service requests. App SDKs are separate from website cookies, and we do not promise that browser Do Not Track or Global Privacy Control signals are carried into the mobile app. Where local law requires a consent or opt-out control, that requirement still applies.

Your privacy rights

Ask for access to your information, correction, deletion, or a portable copy, and information about its sources, purposes and recipients.
Where the law provides, restrict processing, object to processing based on legitimate interests, withdraw consent, or request review of a qualifying automated decision. Withdrawing consent does not affect earlier lawful processing.
Where applicable, opt out of sale, sharing for cross-context behavioural advertising, or targeted advertising; limit qualifying uses of sensitive information; use an authorised agent; or appeal a refused request. We will explain any applicable exception and appeal route. We will not discriminate against you for exercising your rights.

Email contact@merakisoftworks.com with the product name and your request, or write to our registered office above. You do not need to buy anything or create an account to contact us. We may ask for proportionate information to verify identity or an agent's authority before disclosing or deleting records. Do not send passwords or a full identity document unless we explain why it is needed and provide a suitable way to send it.

We respond within the time required by the law that applies to your request. UK/EEA requests normally have a one-month deadline; applicable California access and deletion requests normally have a 45-day deadline. We will explain any permitted extension or refusal. These rights depend on the applicable law and are not all absolute.

Complaints

For a privacy complaint, contact contact@merakisoftworks.com and describe the issue. We will investigate, explain our response, and tell you about any further review available. You can also complain to the UK Information Commissioner's Office (ICO) or the relevant authority in your country, including your EEA supervisory authority, Canada's privacy commissioner, Australia's OAIC, Brazil's ANPD, or the applicable US state authority. Contacting us first does not remove your right to go directly to an authority.

Security and children

We use authenticated services, access controls and HTTPS for online processing. Your device and any copies you export also need protection. We cannot guarantee absolute security or recover records that exist only on your device.

Our apps are intended for adults aged 18 and over, and are not directed to children. Do not use the cloud or AI services if you are under 18. If you believe a child has supplied personal information, contact contact@merakisoftworks.com so we can investigate and take the action required by law, including deletion where appropriate. An age statement does not replace any parental-consent or child-protection requirement that applies.

Changes

We update the date above when this notice changes. Where a change materially affects how existing information is used, we will provide the notice and obtain any fresh consent required by law before that new use. Continued use of a website or app is not consent to unrelated processing.