This text is a draft. What it says matches how the app really behaves, but it has not yet been reviewed by a lawyer and must be finalised before real users are accepted.
1. What is collected
- Account: your name, email and password (hashed, never as plain text).
- Settings: language, time zone, calendar and number format.
- Financial data: the accounts, assets, transactions, budgets and loans you enter, and in the business app the invoices, customers, suppliers and items you enter.
- Receipts: images you choose to upload.
- Payment: the amount, method and tracking code. Your card details never reach our servers.
- Messages you send from the contact page: name, email and the text, used only to reply.
2. What isn't collected
We don't connect to your bank account and we don't read transactions from a bank automatically. Every figure you see in the app is one you recorded yourself.
3. Where data is kept
Information is stored on our own dedicated server. Traffic between your browser and the server is encrypted.
4. Who can see your data
- Members of the same ledger, according to the role you have given them.
- Transactions you mark "private" are shown only to you.
- Site staff see only general account information: the number of members, the subscription status and the date of last activity. Your individual financial transactions are not visible to them.
- Your data is not sold and is not given to anyone for advertising.
5. External services
- Currency, gold and crypto rates: to fetch the day's rate. None of your personal data is sent.
- Email service: to send the welcome email, subscription reminders and invoices.
- Payment gateway: if you buy a subscription, payment happens on the gateway's own site.
6. Security
- Your password is hashed with argon2id and never stored as plain text.
- Two-factor sign-in (2FA) can be switched on for your account.
- The app locks itself after a period of inactivity.
- Every important change to the ledger is recorded in the activity log.
7. Your choices
- At any time you can download a full copy of your data.
- At any time you can delete your account entirely.
- Deleting an account also deletes the related financial data and cannot be undone.
8. Cookies
Only the cookies needed to work are used: keeping your session, your chosen language and theme, and your active ledger. We have no advertising or third-party tracking cookies.
9. Changes to this policy
Significant changes will be announced by email or in the app before they apply.
10. Contact
For any question about your data, write to us from the contact page.