Privacy Policy

Who is responsible

[pending] is responsible for processing your data in Finanzas. For anything about privacy, write to us at [pending].

What data we keep

Your account data: name, email, password —stored with one-way hashing, never in plain text—, language, country, time zone and preferences.

The data you enter: accounts, transactions, categories, budgets, goals, loans, notes and any photos you upload.

A little technical data: the IP address and time of sign-ins and sign-in attempts, for security and auditing.

We never ask for bank credentials and we don’t store card data: payments are processed by Paddle.

What we use it for

To provide the service, keep your account secure —sign-in attempt limits and a log of important actions— and handle your requests.

We don’t sell your data, we don’t show ads, and we don’t use your data to profile you for advertising.

Who we share it with

With Paddle.com, when you subscribe, to process the payment and issue the receipt: your email, your country and the payment details you give directly to Paddle.

With the provider that hosts the service, which only stores information on our behalf.

With authorities, only when the law requires it.

With the people in your space, only what is shared there: they can’t see your private accounts and categories.

Support access

No one on our team sees your financial data unless you allow it from Settings. That access is read-only, lasts a limited time, can be withdrawn whenever you like and is logged.

Cookies

We use one session cookie to keep you signed in and another to remember the language you choose on the home page. We don’t use advertising or third-party tracking cookies.

How long we keep it

For as long as you have an account. If you ask us to delete it, there is a 30-day grace period in case you change your mind; after that it is permanently deleted.

Some audit records and billing data are kept for as long as the law requires.

Your rights

Inside the app you can see and correct your data, export it in one file and delete your account.

You can also write to [pending] to exercise your rights of access, correction, deletion and objection under Peru’s Law 29733, or the rights your US state gives you, such as California’s (CCPA/CPRA). We won’t treat you differently for exercising them.

Security

Passwords are stored hashed, connections use HTTPS, every query is limited to your space and sensitive actions are logged. If an incident affects your data, we will let you know.

Minors

The owner of a space must be an adult. Anyone who invites a minor into their space is responsible for doing so with whatever consent the law requires.

Changes

If we make significant changes to this policy, we will tell you inside the app.