1. Introduction
This Privacy Policy explains how M37 Labs ("we", "us", "our") collects, uses and protects information when you use the M37 ClaimHub mobile application (the "App"), an expense reimbursement tool used by organizations and their employees. By using the App, you agree to the practices described here.
2. Information We Collect
- Account information: When you sign in with Google, we receive your name, email address and profile photo from your Google account via Firebase Authentication.
- Claim data: Expense details you submit, such as amounts, dates, categories, descriptions, and approval status.
- Receipts and images: Photos or files you choose to attach from your camera or gallery as proof of expense.
- Device information: A push notification token (Firebase Cloud Messaging) and basic device/app details needed to deliver notifications and keep the App working.
- Biometric authentication: If you enable fingerprint or face unlock, verification happens entirely on your device. We never receive or store your biometric data.
3. How We Use Information
- To authenticate you and give you access to your organization's account.
- To create, review, approve and process reimbursement claims.
- To send notifications about claim status and approvals.
- To maintain, secure and improve the App.
4. Sharing of Information
We do not sell your personal information. Your claim data is visible to authorized people within your organization (such as managers, approvers and finance administrators) as part of the reimbursement workflow. We use trusted service providers, including Google Firebase, to operate the App. We may disclose information if required by law.
5. Data Storage and Security
Data is transmitted over encrypted connections (HTTPS) and stored on secured servers. We apply reasonable technical and organizational measures to protect your data, though no system can be guaranteed 100% secure.
6. Data Retention
We keep your information for as long as your account is active or as needed to meet your organization's accounting and legal record-keeping obligations.
7. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us or your organization's administrator. Account deletion requests will be processed subject to any legal retention requirements.
8. Children's Privacy
The App is intended for business use and is not directed to children under 13. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at it@m37labs.com.