1. Who we are

FIN-Tracker is operated as a sole trader business in the United Kingdom. References to "we", "us" or "our" in this policy refer to FIN-Tracker. Our contact email is hello@fin-tracker.app.

2. What data we collect

We collect the following information when you use FIN-Tracker:

• Account information — your name and email address when you register
• Financial data you enter — transactions, categories, budget limits and savings goals that you manually input or import
• Usage data — basic information about how you use the app, such as pages visited and features used
• Payment information — if you subscribe to Pro, payment is processed by Lemon Squeezy and Stripe. We do not store your card details — these are handled entirely by our payment processor
• Device information — browser type, operating system and device type for technical support purposes

3. How we use your data

We use the information we collect to:

• Provide, maintain and improve FIN-Tracker
• Send you account-related emails (password resets, subscription confirmations)
• Send push notifications you have opted into (reminders, budget alerts)
• Respond to your support requests
• Comply with legal obligations

We do not use your financial data for advertising, profiling or any purpose other than providing the service to you.

4. Who we share your data with

We share limited data with the following trusted service providers, solely to operate FIN-Tracker:

• Supabase — our database provider, who stores your account and financial data securely. Supabase is GDPR-compliant and processes data under a Data Processing Agreement.
• Lemon Squeezy / Stripe — our payment processor, who handles subscription payments. They are PCI-DSS compliant.
• Vercel — our hosting provider, who serves the FIN-Tracker application.

We do not sell, rent or share your personal data with any third party for marketing or advertising purposes.

5. Data storage and security

Your data is stored in a secure, encrypted database. Each user account is isolated — no other user can access your data. We use industry-standard security practices including HTTPS encryption for all data in transit.

Our database provider (Supabase) stores data within the European Union, in compliance with UK GDPR.

6. Bank statement imports

When you upload a bank statement CSV file, that file is processed locally in your browser and the extracted transaction data is stored in your account. We do not store the original CSV file and we never have access to your online banking credentials — you export the file yourself from your bank's website.

7. Your rights under UK GDPR

Under UK data protection law, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can correct inaccurate data
• Right to erasure — you can delete your account and all associated data at any time from Settings → Clear all data, or by emailing us
• Right to portability — you can export all your transactions as a CSV at any time from Settings → Export CSV
• Right to object — you can opt out of push notifications at any time from Settings

To exercise any of these rights, email us at hello@fin-tracker.app. We will respond within 30 days.

8. Cookies

FIN-Tracker uses only essential cookies and local browser storage necessary for the app to function (such as keeping you logged in). We do not use advertising or tracking cookies.

9. Children

FIN-Tracker is not intended for use by anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes. The date at the top of this page will always reflect the most recent update.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@fin-tracker.app.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.