Privacy Policy

1. Data Controller

The data controller is Javier Garcia Mateos (tax ID 07991565P), Avenida de los Tulipanes 30, 46185 La Pobla de Vallbona (Valencia), Spain, owner of Finanverso (finanverso.app). Contact: [email protected]. The server is hosted by Hetzner Online GmbH (Helsinki, Finland), within the European Union, so processing is governed by the General Data Protection Regulation (GDPR).

2. Data We Collect

To provide the service we process this data:

Name and email address (registration and authentication).

Password (stored encrypted with bcrypt; never in plain text).

Optional profile picture (an image you upload yourself).

Personal financial data: transactions (amount, description, category, date), categories, budgets and automation rules you enter.

Session tokens and preferences stored on your device (see section 8).

Subscription data: plan, status, dates and your Stripe customer id. Your card details are handled by Stripe and never reach our servers.

A record of your acceptance of the terms of sale and of your request for an immediate start (date and version).

If you sign up through an invitation link, we keep who invited you so both of you get the free month of Premium.

If you share your household with someone, that person sees and edits your movements, budgets, goals and other data while they are in the household; you can remove them at any time in Settings.

Data you add in other sections: investments, property and debts with their value, shared-expense groups (the names you type for other people and the amounts), categories marked as professional and your category rules.

If you buy Premium in the Android app: the state of the Google Play subscription (product, dates and renewal). We never receive your payment details.

Receipts and invoices you forward to your private e-mail address (optional feature): the text of the message is read to extract the amount, merchant and date; the content of the e-mail is not stored.

Notifications from your bank and payment apps (Android, optional and off by default): they are read only on your phone to suggest payments; only the payment you decide to add is sent to the server.

If you turn on push notifications: the subscription address your browser or phone generates and a log of the notices sent.

Usage data linked to your account: AI analyses per month, uses of the income tax calculator and draft reader, and clicks in "Offers".

3. Purpose and Legal Basis

We use your data for these purposes, each with its legal basis (art. 6 GDPR):

Providing the service and its features: accounts, transactions, budgets, goals, statement import, shared expenses and the private receipts address, whose e-mails we read to create the expense (performance of the contract, art. 6.1.b).

Sending you transactional e-mails: account verification, password recovery and purchase confirmation (performance of the contract).

AI (Premium): questions and analyses, only when you ask for them, and categorisation when importing statements, only if you turn on "Suggest categories with AI" in the import screen; it is off by default (consent, art. 6.1.a).

We do no marketing, we do not sell your data and we do not build profiles that affect you.

Counting clicks in the "Offers" section to settle commissions with partners (legal basis: legitimate interest, Art. 6.1.f GDPR). We do not share your identity with them.

Sending you the weekly summary by e-mail, only if you turn it on in Settings and until you turn it off (legal basis: consent, art. 6.1.a GDPR).

Sharing your household with another person and the referral programme (the free Premium month for whoever invites and whoever signs up): performance of the contract, since you turn these features on.

Push reminders (bills due, Monday summary): consent, which you give by turning them on in your browser or phone.

Reading the notifications of your banking apps on Android to suggest payments: consent; it is off by default.

Keeping the date and version of the terms you accept when paying and your request for immediate start: legal obligation under consumer law (art. 6.1.c) and legitimate interest in handling possible claims (art. 6.1.f).

Knowing which site or campaign sign-ups come from, as an anonymous counter (see section 8), and protecting the service with rate limits and technical logs: legitimate interest (art. 6.1.f).

You can withdraw your consent at any time, without affecting what was processed before: turn the feature off in the app or write to us.

4. Providers and international transfers

We do not sell or share your data for commercial purposes. To provide the service we use these providers, which process the data on our behalf unless stated otherwise:

Hetzner Online GmbH (Germany; server in Helsinki, Finland): hosting of the application, the database and the backups.

Cloudflare, Inc. (USA): all finanverso.app traffic goes through Cloudflare, which acts as reverse proxy and terminates TLS encryption, so it sees your IP address and the requests in transit. It also receives the e-mails you forward to your facturas.finanverso.app address (Email Routing and a Worker) and delivers them to us.

AI provider (Premium), Cloudflare Workers AI or Google Gemini (paid API) depending on the service configuration. When you ask the AI or request an analysis we send your question, your category names and the aggregated figures of the period. If you turn on AI categorisation when importing, we send the transaction descriptions without long digit sequences (IBAN, cards); they may include names of shops or people. Under their terms, they do not use this data to train their models.

Stripe Payments Europe Ltd. (Premium web payments): processes the payment and billing details as an independent controller. See stripe.com/privacy.

Resend, Inc. (USA): sends the verification, password recovery and purchase confirmation e-mails and, if you turn it on, the weekly summary, which includes your spending figures and category names. See resend.com/legal/privacy-policy.

Google LLC (USA): the "Continue with Google" button is only loaded on the sign-in and sign-up pages (when it loads, Google receives your IP); if you use it, Google confirms your name and e-mail to us. See policies.google.com/privacy.

Google Play and RevenueCat, Inc. (USA) (purchases in the Android app): Google charges and RevenueCat verifies the purchase and tells us the subscription status; for that it uses your Finanverso user id, without your name or e-mail. See revenuecat.com/privacy.

Frankfurter (European Central Bank exchange rates): our server asks for the rate between two currencies; none of your data is sent.

Push services of your browser or phone (Google's Firebase Cloud Messaging, Mozilla or Apple): they receive the encrypted notice to deliver it to you.

International transfers: Cloudflare, Google, Resend and RevenueCat are US companies and Stripe belongs to a US group, so some data may be processed outside the European Economic Area. These transfers rely on the EU-US Data Privacy Framework where the provider is certified and/or on the European Commission's Standard Contractual Clauses.

5. Data Retention

We keep each piece of data only as long as needed:

Your account and the data you enter: while you have the account. When you delete it, they are erased from the database at once.

Daily backups and copies taken before each database update: 14 days. After that, whatever you deleted is gone from them too.

Server technical logs: rotated automatically, at most 30 MB per service.

Clicks in "Offers", usage counters (AI, income tax) and the push notice log: while you have the account.

E-mails forwarded to your receipts address: we do not keep the e-mail, only the outcome of the last 50 (date, status, merchant and amount).

Acceptance of the terms and request for immediate start: while you have the account; erased when you delete it.

Stripe keeps the payments, invoices and your customer record for the period required by tax law, also after you delete your account.

RevenueCat and Google Play keep the record of your Android purchases (with your user id, without name or e-mail) to meet their billing obligations.

6. Security

We apply the following technical measures:

Encrypted communications via HTTPS/TLS.

Passwords hashed with bcrypt (high cost factor).

Authentication via short-lived JWT tokens with refresh token.

Technical logs store no financial data and no IP addresses; they are rotated automatically, at most 30 MB per service.

The PIN or fingerprint lock is checked on your device: the PIN is only stored there, as a salted hash, and never reaches our servers.

Receipt scanning is done on your device: the photo is not uploaded to any server.

Whatever is deleted from the database is overwritten, so it does not linger in the file.

7. Your Rights (GDPR)

As a user you have the right to:

Access: download a copy of all your data from "Settings → Your data" or ask us for it.

Rectification: correct inaccurate data from your profile.

Erasure ('right to be forgotten'): delete your account and all associated data.

Portability: export all your data as JSON, or your movements as CSV, from "Settings → Your data".

Objection, restriction and withdrawal of consent: turn the feature off or write to us.

Complaint: if you believe we have violated your rights you may lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.

To exercise any of these rights write to [email protected] from your account's e-mail; we will reply within one month at most. You can also export your data and delete your account yourself in the app.

8. Cookies and Local Storage

We use no tracking cookies and no third-party analytics. The app stores in your browser or phone (localStorage) only what it needs to work, and does not send it to third parties:

Session: the access tokens and your name and e-mail.

Preferences: theme, language, "Remember me" on sign-in, the AI option for imports, the PIN lock, the last tab and notices already seen.

Income tax and self-employed drafts and the tax office checklist: they stay on your device.

Payments captured from notifications (Android), until you decide whether to add them.

Invitation codes (from a friend or a household) while you complete the sign-up.

Sign-up source: the site or campaign you came from, kept in your browser until you sign in; then it is added to an anonymous counter, not linked to your account, and erased.

To know whether the service works we keep aggregated, anonymous counters on our server (for example, how many signups or purchases there were each day). They contain no personal data, are not linked to any account and we use no third-party analytics tools.

When you sign out or delete the account we erase all of this from the device, except the theme, the language and, when signing out, the e-mail if you ticked "Remember me".

9. Minors

The service is meant for people aged 14 or over, the age from which Spanish law (art. 7 LOPDGDD) allows consenting to the processing of one's own data. If you are under 14 you must not create an account or give us personal data. By signing up you confirm you are 14 or older.

10. Changes to This Policy

We may update this policy occasionally. We will notify you via an in-app notice. The last updated date will always be visible at the top of this page.

11. Account Deletion

You can permanently delete your account and all associated data directly from within the app at any time. No email or external form is required.

How to delete your account:

Open the app and log in.

Tap the profile icon (top right) to open your profile.

Scroll down and open the "Settings" section.

Tap "Delete account" and confirm in the dialog.

On confirmation we erase at once your profile and photo, accounts, transactions, categories and rules, budgets, goals, automations, alerts, investments and debts, shared expenses, your receipts address and its history, invitations, push subscriptions, subscription data, terms acceptance and usage counters. They disappear from the backups within 14 days at most. Stripe keeps your payments and invoices, and RevenueCat the record of your Android purchases, for tax and billing obligations. If you own a shared household, the other person loses access to that data, including what they added; if you are a member, what you added stays in the owner's account.

Contact

For any privacy-related enquiry:

[email protected]

https://finanverso.app