Privacy Policy

Last updated: June 19, 2026

This Privacy Policy explains how the FinanzaPersonal team ("we", "us", or "our") collects, uses, and protects your personal data when you use FinanzaPersonal (the "Service"). By using the Service, you agree to the practices described here.

1. Data We Collect

Account data: name, email address, password (stored only as a secure hash), and optional Google sign-in identifier.
Financial data you enter: wallets, transactions, budgets, savings goals, debts, subscriptions, and shared group expenses.
Billing data: subscription plan and payment status. Where card payments are enabled, they are processed by our payment processor; we do not store full card numbers.
Technical data: IP address, device/user-agent, and audit logs of security- relevant actions, used to keep your account safe.

2. How We Use Your Data

To provide, maintain, and improve the Service.
To process subscriptions and payments.
To secure your account, detect abuse, and maintain audit logs.
To send transactional emails (verification, security alerts, account notices).
To comply with legal obligations.

We do not sell your personal data, and we do not use your financial data for advertising.

3. Legal Bases (GDPR)

Where the GDPR applies, we process your data based on: performance of our contract with you (to provide the Service), your consent (which you give when you create an account), our legitimate interests (security and fraud prevention), and compliance with legal obligations.

4. Service Providers

We share data only with providers that help us run the Service, under appropriate safeguards. These include our payment processor (when card payments are enabled), our cloud hosting and database providers, and our transactional email provider. Each processes data only on our instructions.

5. Data Retention

We keep your data for as long as your account is active. When you request deletion, your account is scheduled for permanent removal after a 30-day grace period, during which you may cancel the request. After that period your personal data is permanently deleted or anonymized, except where we must retain limited records to comply with legal obligations.

6. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. You can export your data and request account deletion directly from your privacy settings inside the app. To exercise any other right, contact us through the Support section inside the app.

7. Security

We protect your data with industry-standard measures, including encrypted connections, hashed passwords (bcrypt), token-based authentication with session revocation, rate limiting, and audit logging of critical actions. No method of transmission or storage is completely secure, but we work to protect your information.

8. Cookies

We use strictly necessary cookies to keep you signed in and to maintain your session (for example, the authentication refresh token). We do not use third-party advertising cookies.

9. International Transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Children

The Service is not intended for individuals under 18, and we do not knowingly collect their data. If you believe a minor has provided us data, contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date above reflects the latest revision.

12. Contact

For privacy questions or requests, contact us through the Support section inside the app.