Privacy policy

1. Data we collect

• Account data: name, email address and password (the password is stored encrypted by our authentication provider; we never see it).
• Financial data you enter: income, expenses, categories, budgets, goals, credit cards (name, limit, closing and due days) and purchases. We do not ask for bank passwords or connect to your bank.
• Preferences: language, theme and which tips you have already seen.
• Questions you send to the assistant.
• Subscription data (Premium only): plan, status and dates. Card details are entered directly with the payment provider and never reach our servers.
• Usage data: anonymous page-view statistics, without advertising cookies.

2. Why we use your data (legal bases)

• To provide the service you signed up for: store your entries and show dashboards, reports and answers (performance of a contract).
• To charge for Premium and comply with tax obligations (contract and legal obligation).
• To keep the service secure, prevent abuse and improve it with aggregated statistics (legitimate interest).
• We do not sell your data and do not use it for advertising.

3. Who we share it with

Only with providers needed to run the service, under contracts that require data protection:

• Supabase: database and authentication (servers in São Paulo, Brazil).
• Vercel: website hosting and anonymous usage statistics.
• Payment provider: processing of Premium payments, when subscriptions are available.
• OpenAI: when the AI assistant is enabled, your question and a summary of your numbers are sent to generate the answer. OpenAI's API does not use this data to train its models.
• Authorities, when required by law or court order.

4. International transfers

Some providers (Vercel, the payment provider and OpenAI) may process data outside Brazil. These transfers follow article 33 of the LGPD, relying on contractual safeguards offered by the providers.

5. How long we keep it

We keep your data while your account is active. If you ask us to delete your account, we remove your personal and financial data within 30 days, except records we must keep by law (for example, payment records for tax purposes).

6. Security

• Encrypted connection (HTTPS) on every page.
• Each account is isolated in the database (row-level security): one user cannot see another's data.
• Financial data is not stored on your device; the app loads it from the cloud when you open it.
• Usage limits and access checks on sensitive features.

7. Cookies

We use only the cookies needed to keep you signed in. Your language and theme preferences are stored in your browser. We do not use advertising or third-party tracking cookies.

8. Your rights

You can, at any time and free of charge, through the contact channel listed on the website:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of unnecessary data;
• request a copy (portability) of your data;
• request deletion of your account and data;
• get information about who we share data with;
• file a complaint with Brazil's data protection authority (ANPD).

9. Children

FinControl is intended for people aged 18 or over. We do not knowingly collect data from children or teenagers.

10. Changes to this policy

When this policy changes, we will update the date at the top and, for relevant changes, notify you in the app or by email.

11. Contact

Questions about this policy or your data: FinControl, through the contact channel listed on the website.