Privacy Policy
1. Who we are
Financio is a personal finance app for iPhone, iPad and the web. It is operated by Ștefan-Andrei Rusie, an individual in Romania ("we"), who is the controller of your personal data and runs the server where it is stored. You can reach us at the address under "Contact" below.
This policy explains what data Financio handles, why, who else sees it, how long we keep it and what you can do about it. We write it to match what the app really does.
2. What we collect
Account: your email address (or username), your password (stored only as a salted hash, never in plain text), your display name, the nickname shown to other people in the app, your language, country and currency settings, and your plan.
Finance data you enter: accounts, categories, transactions (amount, date, description, notes), recurring items, budgets, debts, savings and net-worth inputs.
Receipts: text recognition of a scanned receipt runs on your device. The photo is stored on our side only if you turn on "Save digital receipts" in Preferences.
Purchases: if you subscribe, Apple handles the payment. We receive and store the purchase identifiers and status Apple provides, so we can confirm your plan. We never see your card details.
Notifications: if you allow push notifications, the device token Apple gives us, so we can send reminders to your device.
Sign in with Google: if you choose it, the email address, name and account identifier Google sends us. We do not receive your Google password.
Merchant category suggestions: only if you switch it on in Preferences, the merchant name and the category you chose after a receipt scan, kept with your account.
Family Mode: if you invite someone, their email address; the invited person can see the accounts and transactions you choose to share.
Feedback: the title, description, photos, comments and votes you post in the Feedback section.
Last activity: the date and time you were last seen using the app (one timestamp on your account, refreshed at most once a minute while you use it) and the time of your last sign-in. It never records what you did, only when.
Technical data: IP address, time and the kind of action in server and security logs, used to keep the service secure and to find faults.
Web: the web version sets one session cookie that keeps you signed in. It is strictly necessary; we use no advertising or tracking cookies.
Launch list: if you enter your email address on our website to be told when the app is on the App Store, we store that address (and the time) only to send you that one email, and remove it from the list when you unsubscribe from the email or ask us to. You do not need an account for this.
3. What we do not do
We do not show ads, we do not use analytics or tracking SDKs, we do not track you across other apps or websites, we do not sell your data and we do not share it for marketing. We do not make decisions about you by automated means.
4. Why we use your data, and on what basis
To provide the app (contract): show your figures, sync them between your devices, convert currencies, send the emails you need (account activation, password reset, email change, Family invitations), confirm your subscription and keep your account working.
To keep the service secure and efficient (legitimate interest): security and fault logs, preventing abuse, counting how many people use the service (shown only to the administrator, as numbers), and finding accounts that are no longer used so we do not keep personal data longer than needed (section 8).
Optional features (your consent, which you can withdraw at any time by switching the feature off): push notifications, saving receipt photos, merchant category suggestions, sign-in with Google.
To meet legal obligations, and to establish or defend legal claims, where the law requires it.
5. Features that stay on your device
Reading a receipt photo, the optional summaries and receipt interpretation that use Apple's on-device intelligence, Siri and Shortcuts voice actions, and your App Lock PIN and Face ID all work on your device. They are handled by Apple's system frameworks and are not sent to us for processing. Siri requests are handled by Apple under Apple's own privacy terms.
Search in Spotlight is off by default. If you switch it on, a list of your recent transactions is added to your device's own search index (without notes, and without amounts while "Hide amounts" is on). It stays on the device and can be switched off, which removes it.
A copy of your recent data is kept on the device so the app works offline. Signing out removes it.
6. Who else handles your data
These providers process data for us, only to run the service:
Contabo (hosting): the server and the database where your data is stored.
Cloudflare: DNS for our domain, and object storage (R2) for receipt photos you chose to save and for encrypted backups.
Our email delivery provider: your email address and the text of the emails above.
Apple: payments and subscriptions (App Store), push notifications, and sign-in checks for purchases.
Google: only if you sign in with Google.
Exchange-rate sources (ExchangeRate-API, Frankfurter and the National Bank of Romania): our server asks them for currency rates. They receive only currency codes and dates, never your data.
Other users: the title, description, photos, comments and your nickname in the Feedback section are visible to the other users of the app. Do not put personal or financial details in them. Merchant category suggestions are combined across users and shown only as a suggestion, never with who gave them.
Authorities, if a law or a valid legal order requires it.
7. Transfers outside the EU/EEA
Some providers (Apple, Google, Cloudflare) may process data outside the European Economic Area. When they do, it is under the safeguards the law provides, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
8. How long we keep it, and deleting it
We keep your data while your account exists. You can export everything at any time (CSV and a full export) and delete your account from Settings; this removes your finance data and the account straight away.
Encrypted backups of the whole database are kept so we can recover from a failure: for 7 days on the server and for up to 30 days in off-site storage. A deleted account disappears from backups as they expire.
Accounts that are no longer used are deleted. If you have not used your account for 2 years, we email you at the address on the account to say it will be deleted in 30 days, remind you 15 days later and once more shortly before, and delete the account and all its data on day 31 unless you have signed in again by then. Accounts with an active subscription are not deleted this way. We keep a short record in our security log that a deletion took place, with a one-way hash of the email address, not the address itself.
Security and fault logs are kept for a limited time and then removed.
If you cannot use the app, email us from the address on the account and we will delete the account for you.
9. Your rights
Under the GDPR you can ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time. Most of this you can do yourself in the app (edit your data, export, delete the account); for the rest, contact us and we will answer within one month.
You also have the right to complain to a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or the authority in the country where you live.
10. Security
Data travels over HTTPS, passwords are hashed, backups are encrypted, and access to the server is limited. No system is perfectly secure, so please use a strong password and keep App Lock on. If a breach affecting your data happens, we will tell you and the authority as the law requires.
11. Google user data (sign in with Google)
What we access: if you choose "Continue with Google", Google gives us your email address, your name and your Google account identifier. We do not receive your Google password, your contacts, your files, your calendar, your emails or any other Google data, and we do not ask for access to any of it.
How we use it: only to create your Financio account, sign you in, and link the account to your Google identity. We do not use it for advertising, profiling or marketing.
How we store and protect it: with the rest of your account data on our server, over HTTPS, with access limited to your account. We keep it as long as your account exists.
Who we share it with: nobody, except the providers that run the service for us as described in section 6, and authorities if a law requires it. No person reads it except for security or legal reasons. We never sell it.
How to delete it or stop it: delete your Financio account in Settings and this data is deleted with it (see section 8), or email us. You can also remove Financio's access at any time in your Google Account, under Security > Your connections to third-party apps and services (myaccount.google.com/permissions).
Financio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
12. Children
Financio is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
13. Changes
If we change this policy we will update the date above and, for significant changes, tell you in the app or by email.
Contact
Questions, requests about your data, or account deletion: contact@stefanrusie.ro