EMI Daddy ("we", "our", "us") is committed to protecting your personal data and ensuring transparency about how we collect, use, and safeguard your information. Our mission is to help users make smarter financial decisions, and we take data privacy seriously—especially because many insights are generated from sensitive financial inputs. This Privacy Policy explains: • What information we collect • How we use and protect it • Your rights and choices • How to contact us By using EMI Daddy, you acknowledge and agree to the practices described in this Privacy Policy.

We collect different types of information depending on how you use EMI Daddy: 2.1 Information You Provide Directly: • Account Registration: When you create an account, we collect your email address and name • Authentication: When using Google OAuth, we receive your name and email from Google • Profile Information: Any additional information you add to your profile (optional) • Preferences: Your subscription tier, calculator usage preferences, and saved scenarios • Contact Information: When you reach out via email or contact forms 2.2 Information Collected Automatically: • Device Information: Device type, operating system, browser type • Usage Data: Pages visited, calculators used, time spent on site • Log Data: IP address, access times, referring URLs • Analytics: Aggregated data about how features are used • Cookies: To enhance user experience and remember preferences

We use the information we collect for: • Providing and maintaining EMI Daddy services • Personalizing your experience • Sending service updates and security notices • Improving our calculators and tools • Analytics and usage statistics • Responding to your inquiries • Detecting and preventing fraud • Complying with legal obligations We do NOT use your data for: • Selling or marketing financial products • Spam or unsolicited marketing (without your consent) • Sharing with third-party advertisers (beyond analytics)

Your data security is our priority: • Encryption: All data transmitted to our servers is encrypted using HTTPS/TLS • Database Security: We use Supabase, a secure PostgreSQL provider with industry-standard security • Access Control: Only authorized team members have access to user data • Regular Audits: We perform security assessments and updates • Password Security: We use bcryptjs for password hashing Important Note: While we implement robust security measures, no system is 100% secure. We cannot guarantee absolute security of your data.

We share data with the following third parties: • Google OAuth: Your name and email are shared with Google for authentication • Supabase: Your data is stored on Supabase's secure servers • Analytics Tools: Aggregated, anonymized usage data • Payment Processors: Email and subscription info if you purchase premium plans • Legal Authorities: If required by law or legal processes We do NOT sell your personal data to anyone.

You have the following rights: • Access: Request a copy of your personal data • Correction: Update or correct inaccurate information • Deletion: Request deletion of your account and data • Opt-out: Unsubscribe from marketing communications • Data Portability: Request your data in a portable format To exercise these rights, contact us at privacy@emidaddy.com. We will respond within 30 days.

If you have questions about this privacy policy or our practices: Email: privacy@emidaddy.com Website: www.emidaddy.com We will respond to all inquiries within 30 business days.