Legal
Privacy Policy
Effective date: 24 October 2026
The short version
This policy explains what personal information Groundline collects, why, who processes it for us, how long we keep it, and the rights you have. It covers the Groundline website, web app and mobile apps.
1. Who we are
Groundline is provided by Cyberdyne Investments CC, Namibia. Cyberdyne Investments CC decides how your personal information is used.
Privacy questions and requests: support@cyberdyne.com.na.
2. What we collect
- Account: email address, password (stored only as a one-way hash), and, if you add them, first and last name, photo, date of birth and country.
- Your money figures: the income, expenses, budgets, assets, debts, goals and monthly closes you enter or import. We never ask for bank logins and never connect to your bank.
- Subscription: your plan and its status, from Paddle for purchases on the web, or from RevenueCat and the App Store or Google Play for purchases in the apps. We never see your card number.
- Security: two-step sign-in settings, and for each signed-in device the IP address, device type, browser or phone model and system, and last active time, so you can recognise and sign out your devices.
- Technical: error reports and server request logs (time, address, page).
3. Why we use it
- To run the service: your dashboard, score, plans, statements and reports.
- To keep your account secure and let you sign in.
- To send emails you need, such as verification, password reset and security notices.
- To manage your subscription with Paddle and the app stores.
- To find and fix errors and to prevent abuse.
- To meet our legal obligations.
We do not sell your information, show you advertising, or share your money figures with anyone for their own use.
4. Who processes it for us
These companies process information on our behalf, under contract, only to provide the service.
| Processor | What for | Where |
|---|---|---|
| Hetzner | Hosting for our servers | Germany |
| Vercel | Hosting for the website and web app | Global network |
| MongoDB Atlas | Database (your data is encrypted) | MongoDB cloud |
| RevenueCat | Subscription status | United States |
| Apple App Store, Google Play | Payments, renewals and refunds | United States |
| Paddle (Paddle.com Market Ltd) | Payments for web subscriptions, as merchant of record | United Kingdom |
| Our email delivery provider | Sending account and security emails | — |
| Sentry | Error reports (no money figures) | United States |
| Sign in with Google, and website analytics, each only if you choose it | United States |
Some of these are outside Namibia, so your information may be processed in other countries. Each processor works under its own terms of service and data-processing terms.
5. How long we keep it
| Information | Kept for |
|---|---|
| Account and money figures | While your account is open |
| After you delete your account | Removed from live systems within 30 days |
| Backups | Overwritten within 90 days |
| Server request logs | 30 days |
| Payment records | Kept by Paddle (web) or the app store, which sell Pro, under their own policies; we delete our copies with your account |
Delete your account in the app under Settings, Your data, or follow the steps on the data deletion page.
6. Your rights
- See and take your data: download everything you entered from Settings, Your data.
- Correct it: edit your details and figures in the app at any time.
- Delete it: delete your account in the app, or ask us by email.
- Object or restrict: ask us to stop or limit a use of your information.
- Complain: you can complain to the data-protection authority where you live.
Email support@cyberdyne.com.na to use any of these rights. We aim to reply within 30 days and may first confirm that the request comes from you.
7. Security
Your money figures are encrypted on our servers and travel over encrypted connections. Passwords are stored only as a one-way hash. You can turn on two-step sign-in and sign out other devices in Settings. No system is perfectly secure, so we also limit who on our side can reach your data.
8. Children
Groundline is for people aged 18 and over. If you think a child has an account, email support@cyberdyne.com.na and we will delete it.
10. Changes
If we change this policy in a way that matters, we tell you by email or in the app at least 14 days before it takes effect.
11. Contact
Privacy contact, Cyberdyne Investments CC: support@cyberdyne.com.na.