1. Data Controller

The data controller of your personal data is an individual developer based in Spain. You can contact me through the contact form.

2. Data we collect

For the operation of CoreBalance, we process the following categories of data:

• Identification Data: Email address (provided through Google Auth or direct registration in Firebase).
• Session Data: Unique user identifiers, last access date, and session tokens managed by Firebase Authentication.
• Financial Data: Information about assets, holdings, purchase prices, and portfolio objectives voluntarily entered by the user.

3. Purpose of Processing

Your data is processed exclusively to:

• Allow you to access and use the CoreBalance application.
• Synchronize your portfolio across different devices.
• Perform the requested rebalancing calculations and financial projections.
• Maintain the security of your account and prevent unauthorized access.

4. Legal Basis

We process your data based on the performance of a contract (the Terms and Conditions you accept when using the app) and your explicit consent when registering and uploading your financial information.

5. Recipients and Service Providers

We do not sell or share your data with third parties. However, we use essential infrastructure providers:

• Google Firebase (Ireland/USA): Hosting, database (Firestore), and authentication. Google complies with EU Standard Contractual Clauses for international transfers.
• Vercel (USA): Application deployment.

6. Data Retention

We will retain your data as long as your account remains active. If you decide to delete your account, your personal and financial data will be deleted from our active databases immediately (except for residual backups that are deleted in automatic 30-day cycles).

7. Your Rights

As a user in the EU, you are covered by the GDPR to exercise your rights of:

• Access: Know what data we have.
• Rectification: Correct erroneous data.
• Erasure (Right to be forgotten): Request the deletion of your data.
• Portability: Download your data in a readable format.
• Opposition and Limitation: In specific cases provided by law.

To exercise these rights, use the contact form.

8. Security

CoreBalance uses advanced technical security measures provided by Firebase, including encryption in transit (SSL/TLS) and at rest.