MyFinote Privacy Policy

This Privacy Policy explains how MyFinote ("we", "our", or "us") collects, uses, and protects your personal and financial information when you use our mobile application. By using MyFinote, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

• Personal Information: When you create an account or sign in, we may collect your name, email address, profile photo/avatar, country of residence, and preferred currency.
• Local Financial Data (Offline-First): Your personal budgets (Monthly, Custom), transactions, income entries, personal bills, personal lend & owe records, interest calculations, financial notes, savings goals, surplus allocations, and custom categories are stored locally on your device. This private data never leaves your device unless you initiate a backup or explicitly join a shared budget.
• Shared Budgets & Collaborative Data: When you create or join a shared collaborative budget or trip, data specific to that shared budget (such as budget title, category limits, shared expenses, split shares, debt settlement records, event task checklists, and participant display names/emails) is securely synchronized with authorized participants, either through our cloud service or directly between devices using Nearby Radar.
• Subscriptions & In-App Purchases: When you purchase a Pro subscription, transaction details, active tier, and purchase receipt tokens are processed securely by Google Play Billing (Google LLC) or Apple App Store (Apple Inc.). We do not collect or store your payment card numbers, bank credentials, or financial account details.
• Trip Pass purchases: when you buy a Trip Pass, we also store a record of the purchase (the store's transaction id, the date, and which trip it was attached to) against your account, so the pass can be used later and stops working if the purchase is refunded. This record is kept while your account exists.
• Google Drive & Cloud / Local Backup Data: If you enable Google Drive Backup or Auto Backup, the app is granted access only to files it creates in your Drive, nothing else in your account. If you export local encrypted backups, the file is saved to your chosen device storage or cloud provider (such as Apple iCloud Drive via iOS Files). Your backup files are stored directly in your private accounts/device. We do not access or store your backup files on our servers.
• Device & Technical Information: We may collect anonymized device identifiers, operating system version, and app version for crash reporting, stability diagnostics, and performance optimization.
• Push Notification Data: If you enable notifications, we may collect device push notification tokens (Firebase Cloud Messaging / Apple APNs) solely to deliver shared budget updates, collaboration invites, bill reminders, and budget alerts.
• Biometric Data: If you enable the Biometric App Lock, authentication is handled entirely by your device operating system (Touch ID, Face ID, or PIN/pattern). We do not collect, process, or store any biometric data.

2. How We Use Your Information

• To create, authenticate, and manage your user account, profile, and subscription tier.
• To provide and maintain core app features — budgets, expense tracking, income tracking, savings goals, surplus management, bills & reminders, financial notes, custom categories, and analysis tools.
• To facilitate multi-user real-time collaboration, expense splitting, and debt settlements for shared budgets and trips.
• To calculate and display cash flow summaries, Budget Health Scores, spending pacing charts, and exportable PDF statements.
• To perform automated backups to Google Drive or manual encrypted backups to your device storage or cloud storage (such as Apple iCloud Drive).
• To send local on-device reminders and remote push notifications for budget threshold alerts, bill due dates, shared budget activity, and backup reminders (when enabled).
• To comply with applicable laws, regulations, and store policies.

3. Data Storage & Security

• Local-First Architecture: All your private financial data is stored locally, in a secure database on your device.
• Shared Cloud Sync: Shared budget data is transmitted securely to our cloud service, which only lets verified members of a budget access its data.
• Local Encrypted Backup: Backups created using the local Backup & Restore feature are protected with a password you set. These files can be saved to or restored from local storage or cloud services such as Apple iCloud Drive via the system file picker. Without this password, the backup file cannot be opened.
• Google Drive Backup: Backups uploaded to Google Drive are stored securely in your own private Google Drive account.
• Peer-to-Peer (Nearby) Sync: In proximity mode, shared budget updates are exchanged directly between devices over your local network, without going through our servers.
• App Lock: If enabled, app access is protected by device-level biometric authentication (Fingerprint / Face ID) or PIN.

4. Third-Party Services & Processors

• Authentication: Firebase Authentication (Google LLC) and Supabase Auth for email/password login, Google Sign-In, and Apple Sign-In.
• Cloud Database & Sync: Supabase Inc. for real-time collaboration on shared budgets and subscription validation.
• Payments & Subscriptions: Google Play Billing (Google LLC) and Apple App Store (Apple Inc.) for processing in-app purchases and subscriptions.
• Cloud Storage & Backups: Google LLC for automated cloud backups (limited to files MyFinote creates in your Drive), and Apple Inc. (iCloud Drive / iOS Files) for user-managed manual backup storage and restore.
• Notifications: Firebase Cloud Messaging (Google LLC) and Apple Push Notification service (Apple Inc.) for delivering push notifications. For shared budgets you have joined, your phone's notification token is stored with your membership on our servers so we can deliver those notifications; other members cannot see it.
• Analytics & Advertising: We do not use advertising or behavioural analytics, and we do not collect an advertising ID. If we ever add analytics, we will ask for your consent first.
• Country Detection: To decide which features are available where you are, the app reads the country of your app store account (through RevenueCat) or your phone's region setting.
• Exchange Rates: When you view a trip in a different currency from your own, your phone asks a public exchange-rate service (Frankfurter, which publishes European Central Bank reference rates) for the rate between the two currencies. The request contains only the two currency codes and no account or budget information. Like any internet request, the service can see your phone's internet (IP) address. If you are offline, the app uses the last rate it saved, or the rate you typed yourself.
• We do not sell, rent, or trade your personal or financial information with third parties for marketing purposes.

5. Guest Mode & Account Upgrades

• MyFinote can be used without an account in "Guest Mode." In Guest Mode, all data is stored exclusively on your device.
• Cloud sync, shared collaborative budgets, Google Drive backup, and multi-device subscription synchronization require a signed-in account.
• When you create or sign into an account, your existing guest data remains safely on your device.

6. Shared Budgets, Trips & Collaboration

• When you create or join a shared budget/trip, participants can view transactions, split allocations, settlement balances, member names, and event checklists for that specific budget.
• Participants can connect via QR code scanning, invitation links, or Nearby Radar discovery.
• You can leave a shared budget or remove participants (if you are the owner) at any time through budget settings.

7. Lend & Owe, Interest Tools & PDF Statements

• Lend & Owe records, payment history, and interest calculator tools (simple/compound) are stored locally on your device.
• These tools are for personal informational reference only and do not constitute legal contracts or regulated lending services.
• Exported PDF statements (budgets, settlements, lend/owe records) are generated locally on your device and shared solely at your discretion.

8. Subscriptions & Payment Handling

• Subscription entitlements (Free and Pro) are validated through Google Play Store, Apple App Store, or Supabase backend.
• Billing, auto-renewal, cancellations, and refunds are managed directly through your Google Play or Apple App Store account settings.
• Cloud sharing is part of Pro. If a host's Pro plan ends, cloud syncing for the budgets they host pauses until they renew; nearby sharing still works, and everyone keeps the copy already on their own device.

9. Data Retention & Account Deletion

• Local Data: Stored on your device until you delete entries, clear app data, or uninstall the app.
• Backups: Retained in your Google Drive, Apple iCloud Drive, or local storage until you manually delete them.
• Account Deletion: You can delete your account at any time via Settings → Profile → Delete Account.
• 30-Day Scheduled Deletion: Account deletion schedules cloud records, synced shared data, and subscription history for permanent deletion after 30 days. You can log back in within 30 days to cancel the deletion.
• Local Data Wipe Option: During account deletion, you may choose to immediately wipe all local database records and cached data from your device.

10. Your Rights & Choices

• Access & Portability: Export your complete data at any time via password-encrypted JSON backup (compatible with local storage and Apple iCloud Drive), Google Drive backup, or formatted PDF exports.
• Correction: Update your profile name, email, country, and currency in Settings → Profile.
• Deletion: Delete specific records or delete your full account and cloud data directly within the app.
• Withdrawing consent: Where we rely on your consent (for example push notifications or Google Drive access), you can withdraw it at any time in the app or your device settings, without affecting earlier use.
• Complaints: If you are in the European Economic Area or the UK, you have the right to complain to your local data protection authority.
• Permissions: Revoke Google Drive access, disable push notifications, or disable biometric lock at any time in app or device settings.

11. Children's Privacy

• MyFinote is not intended for use by children under the age of 16 (or the minimum age set by the law of your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us.

12. Who Is Responsible & Why We Use Your Data

• MyFinote is responsible for your personal data described in this policy. You can reach us at support.myfinote@gmail.com; our business details are shown on our App Store and Google Play listings.
• Why we use your data (for people in the EEA and UK): to provide the app and your account (performing our contract with you); to keep the service secure and prevent abuse, and to fix problems (our legitimate interests); to send notifications and use Google Drive when you allow it (your consent); and to meet legal duties.

13. Where Your Data Is Processed & How Long We Keep It

• Most of your data stays on your device. When you use cloud features, data is processed by our service providers listed above, which may operate outside your country, including in the United States and India. Where the law requires it, we rely on safeguards such as standard contractual clauses.
• Shared budget data is end-to-end encrypted, using a key that only you and your invited members hold; we cannot read your expenses, amounts, categories, or notes, and we never see or store that key. Some details stay readable so the service can work: the budget's name and type, the members' display names, the kind of activity (for example "an expense was added"), who did it and when. Whoever holds an invite link can join, so share it only with people you trust. Members who are removed can no longer receive new data; a copy already on their phone may stay there until it is deleted. This synced history is kept while a shared budget is active and for a short time after it ends (currently 10 days), and is then deleted. Copies on members' own devices stay until they delete them.
• A basic record that a shared budget existed (its name, type, dates and the list of members) stays on our servers until the host deletes their account. We also count how many budgets are hosted, by type, for statistics; those counts contain no names or amounts.
• Account data is kept until you delete your account (see section 9).

14. Changes to This Policy

• We may update this Privacy Policy from time to time. Significant changes will be communicated via in-app notice or by updating the effective date above.
• Your continued use of MyFinote following any changes constitutes your acceptance of the updated policy.

15. Contact Us

• If you have questions or requests regarding this Privacy Policy, please contact us at: support.myfinote@gmail.com