Privacy Policy

1. Information We Collect

• Account: Name, username, email, profile picture; Google or Apple sign-in details if you use those; hashed password, session tokens, email one-time codes, and App Check tokens
• Finance data you enter: Expenses, income, savings, investments, budgets, targets, held funds, debts, loans, recurring items, and settings
• Referrals: Referral codes and points
• Device and usage: Device type, OS, browser, app version, usage events (may include your user id), performance logs, push tokens, and timezone
• Location: We do not use GPS. Approximate location may come from IP, timezone, or ads/analytics
• Support: Subject, message, screenshots, and device info
• Payments: Plan and transaction details via Stripe (web cards), CinetPay (web mobile money), or Apple / Google Play / RevenueCat (mobile). We do not store full card numbers
• Email: Transactional messages (verification, resets, codes, support)

2. How We Use It

We use this information to run the Service, sign you in, process Premium and referrals, send account and reminder notifications, handle support, measure usage, show ads to free users, and meet legal and security needs.

3. Storage and Security

Account and finance data are stored in Firebase (Authentication, Firestore, Storage, Functions). A copy may be kept on your device for offline use.

Sensitive fields (typically titles/source/location and amounts) are encrypted on your device (AES-256 client side encryption) before upload. Other fields, such as categories and dates, often are not. Passwords are hashed. Traffic uses HTTPS. You are responsible for your password and sign-in account.

4. Sharing

We do not sell your personal information. We share data with providers that operate the Service:

• Google / Firebase (auth, database, storage, analytics, performance, push, App Check)
• Google AdMob (ads for free users)
• Google Sign-In and Sign in with Apple
• RevenueCat, Apple, and Google Play (mobile Premium)
• Stripe and CinetPay (website Premium)
• SendGrid or a similar provider (email)
• ip-api.com (approximate location on support requests)

We may also share data if required by law, in a sale of the business, or if you ask us to. Providers have their own privacy policies.

5. Your Choices

• Edit profile and finance data in the app. For other copies (such as support emails), email [email protected]
• Delete your account in Settings or Profile → Account Info
• Delete all your data in Settings (removes your finance data while keeping your account)
• Share PDF reports from Analysis. We do not offer a JSON or CSV export
• We send transactional and product notifications, not marketing email. Turn off push in device settings

6. Retention and Deletion

We keep your information while your account is active. When you delete your account, we remove your Auth account, profile, photo, and finance data promptly.

Support emails, payment records, analytics/ads logs, referral history on other accounts, and records we must keep by law may remain. Email us to request support-record removal. We aim to handle requests we control within 30 days.

7. Children

Finnatrak is not for children under 13. We do not collect age. If a child under 13 has an account, contact us and we will delete it.

8. International Transfers

Finnatrak is operated from Cameroon. Providers such as Google, Apple, RevenueCat, and Stripe may process data in the United States and other countries.

9. Changes

We may update this policy by posting it here and changing the "Last Updated" date. We do not send a separate notice. Continued use means you accept the update.

10. Contact

Email: [email protected]
Website: https://finnatrak.com

11. Consent

By using Finnatrak, you agree to this Privacy Policy.