Your privacy is our priority

Welcome to Finyo ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Services").

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.

We collect information you provide directly to us when you:

• Create an account — name, email address, and password.

• Use the app — financial data you enter, including wallet names, transaction amounts, categories, descriptions, and dates.

• Upload images — receipt photos or wallet cover images you choose to upload.

• Contact us — any messages or feedback you send us.

We also collect certain information automatically:

• Device information — device type, operating system, and unique device identifiers.

• Usage data — features you use, pages you visit, and actions you take within the app.

• Crash reports — error logs and performance data to help us improve stability.

We use the information we collect to:

• Provide, maintain, and improve our Services.

• Process transactions and manage your account.

• Generate AI-powered financial insights based on your data (Pro subscribers only).

• Send you technical notices, updates, and support messages.

• Respond to your comments and questions.

• Monitor and analyse usage patterns to enhance user experience.

• Detect and prevent fraudulent or harmful activity.

We do not sell your personal information to third parties. We do not use your financial data for advertising purposes.

Your data is stored securely using Google Firebase, a cloud platform that employs industry-standard security measures including encryption at rest and in transit.

Receipt images are stored via Cloudinary, a secure cloud media service.

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your financial data is private to your account and is never visible to other users.

We use the following third-party services to operate Finyo:

• Google Firebase — authentication, database storage, and cloud functions.

• Cloudinary — image storage and delivery.

• RevenueCat — subscription management and in-app purchase processing.

• OpenRouter / AI providers — for generating AI financial insights (Pro feature). Only anonymised, aggregated financial summaries are sent; no personally identifiable information is shared.

• ExchangeRate-API — for fetching live currency exchange rates.

Each third-party service has its own privacy policy. We encourage you to review them.

Finyo Pro subscriptions are processed through Apple App Store (iOS) and Google Play Store (Android). We do not directly handle or store your payment card information.

Subscription management is handled by RevenueCat. By subscribing, you agree to the terms of the relevant app store and RevenueCat's privacy policy.

You can cancel your subscription at any time through your device's subscription settings.

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.

• Correction — request that we correct inaccurate or incomplete data.

• Deletion — request that we delete your account and associated data.

• Portability — request your data in a portable format.

• Objection — object to certain types of processing.

To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.

You can delete your Finyo account directly within the app from your Profile settings. Account deletion permanently removes all your financial data from our systems.

We retain your personal data for as long as your account is active or as needed to provide Services. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.

Anonymous, aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

Finyo is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. These countries may have different data protection laws.

By using Finyo, you consent to the transfer of your information to these countries. We take steps to ensure your data receives appropriate protection.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, by sending a notification through the app.

Your continued use of Finyo after changes become effective constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@finyo.app

We aim to respond to all privacy-related inquiries within 30 days.