Privacy Statement

Your finances are personal. This statement explains what DCM Don't Count Me Out ("DCM") collects on Definitely Count Me In and DCM Accounting & Tax, and how we use it. We never sell your information.

DCM Don't Count Me Out is the data controller for personal data processed to operate this service.

What we collect

• Account details: name, email, profile information and your referral code.
• Documents and photos: receipts, statements and forms you upload, including photos you take with the in-app camera.
• Financial records: transactions read from your documents or added by you, and tax-prep information.
• Conversations: your chats with Count and messages with other members.
• Sign-in and security: protected credentials, sign-in sessions, device/browser information, request metadata and contact attempt counts used for authentication, fraud prevention and troubleshooting. Support communications are used to respond to your requests.

Legal bases

We process account, financial and conversation data to perform our service contract; use necessary security and support information for our legitimate interests in protecting and operating the service; meet applicable legal obligations; and rely on consent for optional device permissions such as camera access. You can withdraw camera permission in your browser settings.

Camera access

DCM only uses your camera when you tap "Take photo" and give your browser permission. We don't record video or access your camera in the background. Only the photo you choose to use is uploaded.

How we use it

• To organize your books, show your transaction history and prepare tax summaries.
• To have AI read your documents and answer your questions. Document contents are sent to our AI provider only to process your request.
• To run your membership, billing and referral discounts.

Who can see your data

The authorized DCM owner can review financial transactions, open and manage uploaded documents, and export membership and usage records for accounting support and service administration. Other customers cannot access these records. Owner actions are logged; private member message bodies and contact PINs are not included in the owner dashboard.

Your documents and transactions are private to your account. Other members see only your public profile and messages you send them. Service providers we rely on — secure hosting and storage, AI processing, sign-in (including Google, if you choose it) — receive only what they need to provide their service. Paddle.com, our Merchant of Record, receives your purchase details to sell your membership, manage your subscription, take payments, handle tax compliance and send invoices. We may also share information with professional advisers or authorities where required by law.

Site analytics

We use Lovable's built-in visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. Page visits, time on page, page speed, errors and clicks are recorded for every visitor, without cookies and without identifying anyone.

Your sign-in on this device

When you sign in, your browser stores a sign-in session so you stay signed in. Signing out removes it.

Your choices

• Delete documents from the Documents page while you have member access; deleting a receipt keeps its ledger entries. Cancellation locks member features but retains your records until account deletion.
• Ask us for a copy of your data or to delete your account by emailing jackdastates@proton.me.

Retention and rights

We retain account and financial records while your account exists, including after membership cancellation, so you can restore access. Account deletion removes private app records and uploaded files. Service-provider backups, essential security logs and legally required billing records may remain for their applicable retention periods; Paddle retains records needed for tax and payment obligations. We delete or anonymize other data when it is no longer needed.

Subject to applicable law, you may request access, correction, deletion, portability or restriction of your data, object to processing based on legitimate interests, withdraw consent, or complain to your local privacy authority. Email jackdastates@proton.me; we respond within applicable legal deadlines.

Cookies and international processing

We use essential browser storage for your sign-in session and referral attribution. Payment checkout and sign-in providers may use their own essential cookies. DCM does not use advertising cookies; its visitor analytics is cookie-free. You can manage cookies and stored data in your browser, but disabling essential storage may prevent sign-in. Our service providers may process information internationally; where required, applicable contractual safeguards or legally recognized transfer mechanisms protect those transfers.

Security

Data is encrypted in transit and access is restricted to your account and authorized administration described above. No system is perfectly secure, so keep your password safe.

Changes

We'll update this page and notify members of significant changes.