Privacy Policy

Effective 20 October 2026

Who we are: Praveen Rana, Mumbai, Maharashtra, India ("we", "us"). Finease is a personal-finance app that helps you track spending, budgets, investments, loans and shared expenses. We decide why and how your personal data is used, which makes us the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023.

Contact: privacy@finease.co.in — for any question about your data, or to ask us to delete it.

This policy explains what Finease collects, why, who else sees it, and the choices you have. It describes what the app does today.

What we collect

Account details. Your name, email and mobile number, and — if you sign in with Google — the name and email on your Google account. Your password and PIN (one PIN for the app lock and the Vault) are stored only as one-way hashes, so we can't read them back.

Financial information you enter or import. Accounts and balances, credit cards, transactions, budgets, recurring bills, goals, investments and holdings (including statements you import), loans, assets, insurance policies.

Statements and holdings files you import (PDF, Excel or CSV). The file is sent to our server and read there. The file itself is not kept; only the transactions or holdings in it are stored, for you to review. If a file is password-protected, the password you type is used only to open it and is not stored.

Bank SMS (only if you turn on SMS sync). The app reads your inbox on your phone and picks out messages that look like bank or card transaction or due-date alerts. Only those — the sender, the text and the time — are sent to our servers, to suggest transactions for you to review. One-time passwords and messages from personal numbers are never uploaded. Other messages stay on your phone. Uploaded message text is deleted as soon as you approve or discard the message, and in any case after 3 days if you have not reviewed it; a card statement message waiting for its card to be added is kept for up to 7 days, so its due date can be applied if you add the card in that time. A transaction you approved stays in your account. You can switch SMS sync off, or remove the permission, at any time.

Contacts (only if you allow it, for Split & Shared). The phone numbers in your address book — not the names — are sent to our server to check which people already use Finease. We don't save them. For contacts who are registered on Finease, we also save the name you have saved them under so Split & Shared can show each person to you by that name; it is visible only to you and is deleted with your account. Names of contacts who aren't on Finease never leave your phone.

Microphone (only if you use voice expense). Your phone's speech-recognition service (Google's, on most Android phones) turns your voice into text. We receive only the text you confirm, not the recording. To help it recognise your words, the app also gives that service the names of your categories, banks and cards, but never account numbers.

Reports. If you report a person, we keep the reason and any note you write, with your account, so we can review it. The person is not told who reported them.

Photos (only if you attach a receipt). Stored privately; only you and the people in that group can see it.

Fingerprint or face unlock is handled entirely by your phone. We never receive biometric data.

Technical information. Our hosting provider records technical details of each request, such as the time and IP address, for security. If the app crashes or you send a problem report, we receive technical details such as the device model, Android and app version and what went wrong.

Your consent. We keep a record of which version of this policy and the Terms you accepted, and when.

How we use it

To run the app: show your numbers, categorise spending, suggest transactions from bank messages, work out budgets and what's due, let you share expenses with friends, send account emails (verification, password reset, security notices), keep the service secure, and fix problems. We don't show ads, we don't build advertising profiles, and we don't sell your data.

Who else can see it

• People you share with. Expenses, balances and names you put into a Split & Shared group or expense are visible to the others in it.
• People in your Collaborate group. If you join a collaboration (up to three people), the others in it see each category's total for the month and your part of it. They never see your transactions, merchants, income or balances. You can keep any category out of it, and leave at any time, which takes your figures out of the group straight away. Joining is recorded as your agreement, and the one-time invite code is stored only as a hash.
• Other Finease users who have your number. If someone has your mobile number in their contacts and uses the contacts feature, they can see that you're on Finease and the name on your profile. You can block a person from Profile › Blocked people.
• Services that process data for us, only to run the app: Render (our servers), Supabase (our database and receipt photos), both hosted in Singapore; Resend (account emails); Sentry (crash reports); and Google (Sign-In, and speech recognition if you use voice expense). Some of these providers process data outside India.
• The law. If a valid legal order requires it.

Security

Data travels over encrypted (HTTPS) connections. PINs and passwords are stored as one-way hashes. The Vault (assets, loans, insurance) needs your PIN and locks after inactivity. Signing in on a phone asks for your PIN, and resetting a password or PIN signs out your other phones. No system is perfectly secure, so please choose a PIN that is hard to guess and keep your phone locked.

Keeping and deleting your data

We keep your data while your account is open. To delete it, go to Profile › Delete account in the app (it asks for your PIN). That permanently deletes your transactions, accounts, cards, budgets, investments, loans, assets, goals and settings, and removes your name, mobile number, email, UPI ID and sign-in details. Expenses you shared in a group stay for the other people in it, shown as "Deleted user", because they are part of their records too. Copies in backups are removed when the backups are overwritten, within 7 days.

If you can't open the app, follow the steps on the delete-account page or email privacy@finease.co.in; we will delete your data within 15 days.

Your choices and rights

You can use Finease without SMS, contacts, microphone or camera access, and you can withdraw any permission in your phone's settings at any time. You can withdraw your consent to this policy by deleting your account. Under the Digital Personal Data Protection Act, 2023 you have the right to know what data we hold, to have it corrected or erased, to nominate someone to exercise your rights if you cannot, and to have a grievance answered. Our grievance contact is Praveen Rana, privacy@finease.co.in. We acknowledge complaints promptly and aim to resolve them within 30 days; if you are not satisfied, you may complain to the Data Protection Board of India.

Children

Finease is not meant for anyone under 18, and we don't knowingly collect their data.

Changes

If we change what the app collects or how it is used, we'll update this page and the date above and ask you to review and accept the new version in the app before you continue.

Contact

Praveen Rana · Mumbai, Maharashtra, India · privacy@finease.co.in