The data controller is:

DRĂGOI S.E. MARIA PERSOANĂ FIZICĂ AUTORIZATĂ

Address: Pitești, România

Tax ID (CUI): 55055739

Email: privacy@ecolucphi.com

Phone: +40 799 528 752

This policy applies to the Eco LucPhi web and mobile application.

Email — from your Google account at sign-in

Name — from your Google account

Receipt images — photos you scan, including text extracted by AI

Financial transactions — entered manually or extracted from scanned receipts

Subscription data — Stripe plan info (Pro €5/mo, Elite €10/mo), no card details stored

Device info — Android version, app version, for compatibility and support

Contract performance (Art. 6(1)(b) GDPR) — email, name, transactions, receipt data, subscription info needed to provide the service

Legitimate interest (Art. 6(1)(f) GDPR) — device info for security, fraud prevention, and app stability

Consent (Art. 6(1)(a) GDPR) — marketing emails (optional, you can opt out anytime)

We share data with the following processors:

Active account: we keep your data as long as your account is active.

After account deletion: we delete all data within 30 days (backup retention period), then permanently erase it. No data is recoverable after this period.

Access — know what data we hold about you

Rectification — correct inaccurate data

Erasure — "right to be forgotten" (Settings → Delete Account)

Portability — receive your data in JSON format (Settings → Download My Data)

Restriction — limit processing in certain situations

Objection — to processing for marketing or legitimate interest

Withdraw consent — at any time, without affecting prior lawful processing

Email us at privacy@ecolucphi.com with your request.

We respond within 30 days, as required by GDPR.

Right to complain to ANSPDCP:
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro
Phone: +40 318 059 211

Encryption in transit: all data uses TLS (HTTPS).

Encryption at rest: database encryption provided by Supabase.

Authentication: Google Sign-In — we never see your password.

Internal access is restricted to authorized personnel. We never sell or rent your data.

We use only essential cookies for app functionality (session authentication). No tracking cookies, no advertising, no third-party trackers.

The service is for users aged 16 and older, in accordance with GDPR and Romanian law. We verify age at registration. If you are under 16, you cannot create an account.

We will notify you in-app 30 days before any material changes take effect.

Last updated: 13 July 2026