Privacy Policy
Last updated: June 2025
1. Introduction
This Privacy Policy explains how ULK ("Cliffy", "we", "us", or "our") collects, uses, stores, and protects your information when you use the Cliffy mobile application and related services. We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.
2. Information We Collect
2.1 Information you provide
- Account information: phone number, name, business name
- Business data: transactions, party names, amounts, dates
- Images: photos of handwritten notes, bills, or receipts you capture for AI processing
- Product catalog information
- Business card details you create
2.2 Information collected automatically
- Device information: model, OS version, app version
- Device fingerprint: a hashed identifier derived from your device (we do not store your raw device ID) for fraud prevention
- Signup location: captured once when you open the app (with your permission) and stored for our internal records only; it is not shown in the app or shared with third parties
- Usage analytics: features used, session duration
- Crash reports and performance data
3. How We Use Your Information
- To provide AI-powered transaction capture and processing
- To maintain and sync your business ledgers
- To generate reports and statements
- To improve our AI models and service quality
- To provide customer support
- To send important service updates
4. Data Storage & Security
Your data is stored securely on cloud servers powered by Supabase. We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest
- Row-level security policies on all database tables
- Regular security audits
- Access controls and authentication
5. Third-Party Services
We use the following third-party services to provide our features:
- Google Gemini AI:For processing images and extracting transaction data from handwritten notes. Images are sent to Google's servers for AI processing.
- Supabase: For secure cloud data storage and authentication.
- Google Analytics: For anonymous usage analytics.
6. Data Sharing
We do not sell, rent, or trade your personal or business data to third parties. We only share data with the third-party services listed above, solely for the purpose of providing our services to you.
7. Your Rights Under DPDP Act
As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access: Request a summary of your personal data and processing activities
- Correction: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Grievance Redressal: Raise concerns about data processing
- Nominate: Nominate another person to exercise your rights
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete all your personal and business data within 30 days, except where retention is required by law.
9. Children's Privacy
Cliffy is intended for business use and is not directed at children under 18. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via the contact information you provide. Continued use of Cliffy after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at: