Privacy Policy

This policy explains what information the Finovaa mobile app (for iPhone and Android) and the website at finovaa.app collect, why, who it is shared with, how long it is kept, and the choices you have. If you have questions, email support@finovaa.app.

The short version

• We never ask for your bank login. Finovaa does not connect to your bank. You add your own transactions.
• We don't sell your data, show ads, or share your data for advertising.
• AI features are powered by Google Gemini. When you use them, the relevant information is sent to Google to produce a response. Google does not use it to train its models.
• You can delete your account and data at any time, in the app or at finovaa.app/delete-account.

Who we are

Finovaa ("Finovaa", "we", "us") provides the Finovaa app and website. For anything about this policy or your data, contact us at support@finovaa.app. For the purposes of data protection law, Finovaa is the controller of the personal information described here.

Information we collect

Information you give us

• Account information: your email address and password when you sign up (your password is stored only as a secure hash by our authentication provider; we can't see it), your name, an optional profile photo, your currency and your country.
• Setup and preferences: the answers you give during setup, such as your money goal, monthly income and whether it varies, spending limits, the coach you pick, and your notification settings including quiet hours and meal reminder times.
• Financial information you enter: transactions (amount, category, date, note, merchant and wallet), wallets and their balances, budgets, savings goals and contributions, daily spending commitments, and any receipt photos or files you attach to a transaction.
• Coach and chat content: the messages you send to your coach and the replies, the coaching cards you're shown and how you respond to them.
• Voice and images for AI features: audio you record to dictate a transaction or talk to your coach, and receipt photos you scan. See How AI features work.
• Feedback: bug reports (including any screenshots you add) and feature requests, and whether you agreed to be contacted about them.
• Waitlist (website): if you join the waitlist at finovaa.app, your email address, when you joined and which page you joined from.

Information collected automatically

• Device and notification data: a push notification token, your device type (for example "iPhone" or "Android"), and your time zone, so notifications arrive at the right time.
• Usage patterns: the hours and days you open the app, so proactive notifications are sent when you're usually active, and whether you open or act on notifications.
• Diagnostics: crash reports and performance data, collected with Sentry. These include your device and app version, your IP address, and your account ID, email address and name, so we can investigate a problem you've reported.
• App analytics (Android): the Android app includes Google Firebase Analytics, which collects app usage events, device information and an app instance identifier. The iPhone app does not use Firebase Analytics.
• Website analytics: finovaa.app uses Google Analytics (through Firebase) to count page visits and see which pages are useful. It may use cookies or similar technologies and collects information such as the pages you view, your device and browser, and your approximate location derived from your IP address.

Information stored only on your device

Your sign-in session, recent data kept for offline use, your language and theme settings, and some preferences are stored on your device so the app works offline and opens quickly. They are removed when you uninstall the app.

What we don't collect

We don't collect your bank or card login details, card numbers, precise location, contacts, or advertising identifiers for advertising.

How we use your information

• To provide Finovaa: to create your account, store your data, sync it across sessions, and calculate your safe-to-spend number, budget pace, goal arrival dates, streaks and trophies.
• To coach you: to produce coaching insights, your daily plan, chat replies and voice conversations.
• To send notifications you've turned on, such as budget alerts, goal reminders, weekly recaps and coach heads-ups, at a sensible time in your time zone.
• To support you: to answer messages, handle bug reports and process deletion requests.
• To keep Finovaa working and secure: to fix crashes, prevent abuse (for example rate limits on AI features), and protect accounts.
• To improve Finovaa: to understand which features are used, in aggregate.
• To email you: service emails you need to use your account, such as sign-up confirmation, password reset and account deletion codes; and, if you joined the waitlist, launch news about Finovaa. You can unsubscribe from launch news at any time using the link in every such email.

Legal bases (for users in the EEA, UK and similar regions): we process your information to perform our contract with you (providing the app), on the basis of our legitimate interests (keeping Finovaa secure, fixing problems and improving it, in ways that don't override your rights), with your consent (notifications, waitlist emails, and analytics where consent is required), and to comply with legal obligations.

How AI features work

Finovaa calculates every number (your safe-to-spend amount, budget pace, goal dates) on your device and our servers before any AI is involved. AI is used to put those results into words, to answer your questions, and to read receipts and speech.

Our AI features are provided by Google's Gemini API. Depending on the feature you use, we send Google:

• the message you typed and recent conversation context;
• a summary of your finances: your recent transactions from about the last 45 days (date, amount, category, note, merchant and wallet name), spending by category, budgets, goals and wallet balances;
• receipt images you scan, so they can be read;
• audio you record, so it can be turned into text, and, in voice mode, your voice streamed live so your coach can reply out loud.

We use Google's paid Gemini API service. Under its terms, Google processes this information only to provide the response and does not use it to train or improve its models or products. Google may keep it for a limited period solely to detect and prevent abuse, as described in its Gemini API terms. We do not use your data to train AI models either.

What we keep: the text of your chat messages and the replies are stored with your account until you delete your account. We keep usage records (which feature, when, and how long it took) to manage limits and costs. We do not store your voice recordings or scanned receipt images as part of AI processing. A receipt photo is only kept if you attach it to a transaction.

How we share information

We don't sell your personal information, and we don't share it with third parties for their own marketing or for advertising. We share it only with service providers that help us run Finovaa, under contracts that limit what they can do with it:

We may also disclose information if required by law or to protect the rights, safety and security of our users or others, and as part of a merger, acquisition or sale of assets, in which case this policy would continue to apply to your information.

International transfers

Your information is stored in Canada and processed by the providers above, some of which are in the United States and other countries. Where the law requires it, we rely on safeguards such as our providers' data processing terms and Standard Contractual Clauses.

How long we keep information

• Your account and the data in it are kept until you delete your account. When you do, they are deleted as described below.
• Notification history is deleted after 90 days. Queued notifications are deleted 7 days after sending, or 30 days if sending failed.
• Cached AI responses expire automatically and are not used once expired.
• Deletion records: when you delete your account we keep a short record of the deletion (your account ID, email address, the reason you gave and the date) for 12 months, so we can handle any questions about it, and then delete it.
• Diagnostics and analytics are kept by Sentry and Google for a limited period under our retention settings with them.
• Waitlist emails are kept until Finovaa launches and you've had the download link, or until you unsubscribe or ask us to delete them.
• Backups: deleted information may remain in encrypted backups for up to 30 days before it is overwritten.

Deleting your account and data

In the app: go to Settings, tap your profile to open Edit Profile, scroll to Delete Account, choose a reason, and enter the code we email you. Your account is deleted immediately.

Without the app: request deletion at finovaa.app/delete-account or by emailing support@finovaa.app from your account's email address. We'll confirm the request came from you and complete it within 30 days.

What is deleted: your account and profile, transactions, wallets, budgets, goals, categories you created, coach conversations and coaching history, AI usage records, notification settings and history, push tokens, streaks and trophies, feedback you've sent, and files you've uploaded (profile photo, receipt attachments and bug report screenshots). The deletion record described above is kept for 12 months.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, and to withdraw consent at any time.

• Access and correction: you can see and edit your profile and financial data in the app.
• A copy of your data: Pro members can export their data from the app (PDF or Excel). Anyone can email us and we'll send you a copy, free of charge.
• Deletion: see Deleting your account and data.
• Notifications: turn each type off in the app's notification settings, or in your phone's settings.
• Emails: unsubscribe from launch news with the link in any such email. Service emails, like password resets, can't be turned off while you have an account.
• Device permissions: see below; you can change them in your phone's settings at any time.

To exercise any right, email support@finovaa.app. We'll respond within 30 days (or sooner where the law requires). You also have the right to complain to your local data protection authority.

California residents: we don't sell personal information or share it for cross-context behavioural advertising, and we don't use sensitive personal information to infer characteristics about you. You have the rights described above, and we won't discriminate against you for using them.

Device permissions

Finovaa asks for permissions only when you use the feature that needs them. Every one is optional.

Security

Your information is encrypted in transit and at rest. Access to each user's data is restricted so that only that user's account can read it, and our team's access is limited to what's needed to run and support Finovaa. No system is perfectly secure, so we can't guarantee absolute security, but we work to protect your information and will tell you if a breach affects you where the law requires.

Children

Finovaa is not intended for children under 13 (or under 16 in the EEA and UK) and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We'll update this policy when our practices change and change the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.

Contact

Email support@finovaa.app with any question or request about your privacy.