Privacy policy
What data we store
- Email address and a password hash (the password itself is never stored). If you sign in with Google or Facebook, we store your account identifier at that service and your email address.
- Financial data you enter or upload yourself: accounts, transactions, categories, payees, trades, plans, settings.
- If you connect a bank or an exchange: the access keys. They are stored encrypted and are never shown back.
- Technical server logs (request time, address, IP) for security and diagnostics.
Cookie
We use one necessary session cookie to keep you signed in. There are no advertising or analytics cookies.
Who receives the data
We do not sell data and do not use it for advertising. Data is processed only by services without which the app cannot work: server hosting, an email service for confirmation and password reset emails, and, when you sign in with Google or Facebook, that service itself. For exchange rates and prices the app queries public sources (European Central Bank, NBU, CoinGecko, Yahoo Finance), sending only currency codes, tickers and dates, but not your amounts or personal data.
How long we keep the data
For as long as your account exists. When you delete the account in your profile, the data is erased from the database immediately; it may remain in server backups for up to 14 days, after which the copies are overwritten.
Your rights
In your profile you can download all your data as JSON, change your password, unlink sign-in via another service and delete your account. Send other requests, including data corrections, to the service operator.