Privacy Policy

This Privacy Policy applies to the FinancesHub mobile application (Android and iOS), the web application at financeshub.app, and any related services (collectively, the "Service") operated by FinancesHub ("we", "our", or "us").

1. Information We Collect

1.1 Account information

• Email address — required for sign-up, account recovery, and important service communications.
• Display name and profile picture — optional, used inside the app and shown to members of groups you join.
• Google account name, email, and profile picture — if you sign in with Google.
• Authentication tokens — stored securely on your device using the operating system's secure storage.

1.2 Financial and usage data

• Income entries, expenses, recurring expenses, budgets, and categories you create.
• Work groups, cycles, client visits, and payment records.
• Receipt images you optionally attach to expenses.
• Group memberships and group-shared financial data.
• App preferences (theme, language, notification settings).

1.3 Device and technical data

• Device model, operating system version, and app version (for crash reporting and compatibility).
• Anonymous crash logs and error stack traces.
• Push notification token (only if you enable notifications).
• Approximate locale/timezone for currency and date formatting.
• Advertising identifier (AAID) — see Section 4 on ads.

1.4 Purchase data

• Subscription status and entitlements managed by RevenueCat and Google Play Billing.
• We do not receive or store your full payment details (credit card, etc.) — those are handled by Google Play.

2. Device Permissions

The app may ask for the following permissions on your device:

• Photos / Media library — to let you set a profile picture and attach receipts to expense entries. Selected photos are uploaded only if you choose to attach them.
• Camera — to optionally take a photo of a receipt when creating an expense.
• Notifications — to send reminders you configure yourself (e.g. recurring expense reminders).
• Biometric authentication (fingerprint / Face ID) — used only locally to unlock the app via the optional app lock feature. Biometric data never leaves your device.
• Internet — required to sync your data with our servers.

You can revoke any of these permissions at any time in your device settings.

3. How We Use Your Information

• To create and maintain your account.
• To store, sync, and display your financial data across your devices.
• To share data with members of groups you create or join (you control who is invited).
• To process subscriptions and unlock premium features.
• To send push notifications you have configured.
• To diagnose crashes, fix bugs, and improve the app.
• To display ads to users on the free plan.
• To comply with legal obligations.

4. Advertising

Free-tier users see banner ads served by Google AdMob. AdMob may collect your advertising identifier and basic usage data to serve relevant ads. We do not share any personal account data (email, financial entries, etc.) with AdMob.

You can opt out of personalized ads in your device settings:

• Android: Settings → Google → Ads → Opt out / reset advertising ID.
• iOS: Settings → Privacy → Tracking → disable "Allow Apps to Request to Track".

Premium subscribers do not see ads.

5. Third-Party Services

We use the following third-party processors, each governed by their own privacy policy:

• Supabase (database & auth) — stores your account and financial data. supabase.com/privacy
• Google AdMob (ads) — policies.google.com/privacy
• RevenueCat (subscription management) — revenuecat.com/privacy
• Google Play Billing (payments) — policies.google.com/privacy
• Sentry (crash reporting) — sentry.io/privacy
• Google Sign-In (optional auth) — policies.google.com/privacy
• Expo / EAS Update (over-the-air app updates) — expo.dev/privacy
• Cloudflare (web hosting & CDN for financeshub.app) — cloudflare.com/privacypolicy

6. Group Sharing

FinancesHub lets you create groups and invite others to view and edit shared financial data. When you invite someone to a group, they will see the data inside that group and your display name and profile picture. Group invitations require explicit acceptance. You can remove members from any group you own at any time.

7. Data Sharing and Disclosure

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

We may share data only:

• With the third-party processors listed in Section 5, strictly to operate the Service.
• With group members you have explicitly invited.
• When required by law, court order, or to protect our rights or the safety of users.

8. International Data Transfers

Your data may be stored and processed on servers located in the European Union and the United States, operated by our infrastructure providers (Supabase, Cloudflare, Sentry, Google). By using the Service you consent to this transfer.

9. Data Retention

We retain your data for as long as your account remains active. If you request account deletion, all personal data and financial records are permanently removed from our active systems within 7 days. Backups containing residual data are rotated and overwritten within 30 days.

Anonymous crash logs and aggregate analytics may be retained longer for product improvement, but cannot be traced back to you.

10. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — fix any inaccurate information.
• Deletion — request full account and data deletion at financeshub.app/delete-account.
• Portability — export your data in a machine-readable format (CSV / PDF export is available in the app).
• Withdraw consent — disable notifications, ads tracking, or close your account at any time.
• Lodge a complaint — with your local data protection authority (e.g. an EU supervisory authority under GDPR).

To exercise any of these rights, email support@financeshub.app. We will respond within 30 days.

11. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing your personal data are:

• Contract — to provide the Service you signed up for.
• Consent — for optional features like notifications and personalized ads.
• Legitimate interest — for crash reporting, fraud prevention, and product improvement.
• Legal obligation — to comply with applicable laws.

12. Security

We use industry-standard security measures, including:

• TLS/HTTPS encryption for all data in transit.
• Row-level security on the database — each user can only access their own records and records inside groups they belong to.
• Secure on-device storage for authentication tokens.
• Optional biometric or PIN app lock.

No system is 100% secure. If we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.

13. Children's Privacy

FinancesHub is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via in-app notice or email. Continued use of the Service after changes take effect constitutes acceptance.

15. Contact

If you have questions, requests, or complaints regarding this Privacy Policy or your data, contact us at:

• Email: support@financeshub.app
• Account deletion: financeshub.app/delete-account