Privacy Policy

1. Who we are

Finflo is a personal finance tracking application available at finflo.app. The service is operated as an independent project. For any privacy-related questions, contact us at info@finflo.app.

2. What data we collect

We collect only what is necessary to provide the service:

• Email address — used for authentication via magic link. We do not store passwords.
• Display name — optional, set by you in profile settings.
• Transaction data — amounts, categories, dates and descriptions that you manually enter. We have no connection to any bank or financial institution.

3. How we use your data

Your data is used solely to provide the Finflo service — to authenticate you and to display your transactions. We do not sell, share, or use your data for advertising or analytics profiling.

4. Data storage

All data is stored in a secure cloud database provided by Supabase, hosted in the European Union. Each user's data is strictly isolated — no other user can access your transactions.

5. Third-party services

We use the following third-party services, each with their own privacy policies:

• Supabase — authentication and database hosting.
• Resend — used to send magic link sign-in emails. Your email address is transmitted to Resend solely for this purpose.
• Vercel — hosting and infrastructure. Vercel Analytics and Speed Insights collect anonymised, cookieless usage data (page views, performance metrics) with no personal identifiers.
• Cloudflare Turnstile — bot protection on the login form. No personal data is stored by Turnstile.

6. Cookies and local storage

Finflo uses a session cookie strictly necessary for authentication. No tracking or advertising cookies are used. Because we only use technically necessary cookies, no cookie consent banner is required.

7. Your rights

Under GDPR you have the right to access, correct, or delete your personal data at any time.

• Delete your account — email us at info@finflo.app and we will permanently delete all your data.
• Access or correct your data — contact us at the same address.

8. Data retention

Your data is retained for as long as you use Finflo. Upon a deletion request, all personal data and transactions are permanently removed.

9. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email. Continued use of Finflo after changes constitutes acceptance of the updated policy.