Privacy Policy

Last updated: 2026-10-31

FinCtrlAI ("we", "us") helps you manage personal, family and business money. This policy explains what we collect, why, who helps us process it, and the choices you have. It applies to the website, the web app and the mobile apps.

What we collect

• Account details: name, email address, password (stored only as a secure hash), language, currency, time zone, profile photo, and the sign-in provider if you use Google or Apple.
• Financial data you enter or import: wallets, transactions, categories, budgets, savings goals, recurring items, subscriptions, investments, debts, invoices and clients, and any receipts or files you attach.
• Team data: if you join or create a team workspace, its members, roles and the activity log.
• Support conversations: messages you write in the assistant / support chat and your ratings.
• Security and device data: IP address, approximate location derived from it, device and browser type, sign-in times (used for new sign-in alerts and to protect your account), and your phone's push-notification token if you allow notifications.
• Notification channels you connect: for example your Telegram chat, Slack or Discord webhook, or your own webhook address.

We do not sell your personal or financial data, and we do not use it for advertising.

How we use it

• To run the service: show balances, budgets, reports and reminders, send invoices you create, and keep your workspaces in sync across devices.
• To provide AI features you use: understanding text, voice or receipts you submit, answering support questions, and generating insights.
• To keep accounts safe: email verification, two-step verification, new sign-in alerts and abuse prevention.
• To support you and to improve FinCtrlAI.

AI processing

When you use an AI feature, the text, receipt image or question you send — together with the minimum account context needed to answer (for example your categories and wallet names, or month totals) — is processed by Google's Gemini API. We do not let the AI change your data on its own: AI suggestions are only saved after you confirm them. If the assistant cannot help, a member of our support team can read the conversation to assist you.

Service providers

We share data only with providers that help us run FinCtrlAI, and only what each one needs:

• Hosting and email delivery for the service and its messages.
• Lemon Squeezy, our reseller and Merchant of Record, when you buy a plan: it collects your payment and billing details directly (we never see your card) and tells us the subscription status.
• Google (Gemini API for AI features; Google Sign-In if you choose it; Firebase Cloud Messaging for phone notifications).
• Apple (Sign in with Apple, if you choose it).
• Telegram, Slack, Discord or your own endpoint — only if you connect them, and only the alerts you choose to send there.
• Cloudflare Turnstile to block automated sign-up abuse.
• Exchange-rate and crypto-price providers (no personal data is sent to them).

How long we keep data

We keep your data while your account is active. When you delete your account, your account and the workspaces you own are deleted. Security logs and records we must keep by law may be retained for a limited time.

Your choices and rights

• Update your profile, language and notification preferences at any time.
• Export your transactions (Excel, CSV or PDF, depending on your plan).
• Delete your account from the app (More → Delete my account) or by emailing us.
• Depending on where you live (for example the EU/UK under GDPR, or California), you may have the right to access, correct, delete or port your data and to object to certain processing. Contact us to exercise these rights.

Security

Connections are encrypted (HTTPS). Passwords are hashed, sensitive secrets are encrypted at rest, and access inside team workspaces follows the roles their owners set. No system is perfectly secure, so please use a strong password and turn on two-step verification.

Children

FinCtrlAI is not intended for children under 16, and we do not knowingly collect their data.

International transfers

Our servers and providers may be located outside your country. Where required, we rely on appropriate safeguards for these transfers.

Changes

We will post updates on this page and, for important changes, notify you by email or in the app.

Contact

Questions or requests: support@finctrlai.com.