This policy describes what the Finman personal finance app collects, where that information goes, and what you can ask us to do with it. It was written against the running code, not from a template — everything below reflects how the service at app.finman.money actually behaves.

Who operates Finman

Finman is operated by the owner of finman.money. For any question about your data — access, correction, export or deletion — write to privacy@finman.money.

What we store

Your account

When you register we store a username, an email address, an optional full name, and your password as a bcrypt hash (cost factor 12). The plaintext password is never written to disk and cannot be recovered from what we hold — not even by us.

If you sign in with Google instead, we store your Google account identifier, the email address and display name Google returns, and your profile picture URL. We request only Google's basic profile and email scopes. We never receive your Google password, and we cannot read your Gmail, Drive or contacts.

If you sign in with Google using an email address that already has a Finman account, the two are linked rather than duplicated. Accounts created through Google have no usable password and cannot be signed into with one.

Your financial data

Everything you put into the app is stored so the app can work: accounts and balances, transactions, budgets, categories and tags, recurring payments, subscriptions, debts and their payments, savings goals, investments and portfolios, net-worth snapshots, receipts, split expenses and shared groups, family and organization membership, calendar events, notifications, reports and currency settings.

This is stored in a SQLite database on our own server. It is not sold, rented, or shared with advertisers, and there are no third-party analytics or advertising trackers in the application.

Where your data leaves our server

There are exactly three cases, and they only happen because you asked for the feature.

1. AI features

When you use the AI assistant, AI insights, or receipt scanning, the relevant content is sent to a third-party AI provider to be processed. That means:

The provider currently configured is Anthropic. The application also supports OpenAI and Google as alternatives, selected by server configuration. If you never use the AI features, none of your data is sent to any of them.

2. Bank connections

If you choose to connect a bank, we exchange data with that institution's own API to import your accounts and transactions, and we store the resulting access credentials so the connection keeps working. Connectors exist for monobank, PrivatBank, Oschadbank, TD Canada Trust, RBC Royal Bank, Scotiabank, BMO, CIBC, Revolut, Wise and PayPal. Connecting a bank is entirely optional; the app is fully usable with manual entry and CSV import.

3. Sign-in with Google

If you use the Google button, Google necessarily learns that you signed in to Finman. That exchange is governed by Google's own privacy policy.

How long we keep it

We do not currently run an automatic deletion schedule. Your data stays until you delete it in the app or ask us to remove your account. When you ask, we delete the account and the records attached to it.

What you can ask for

Write to privacy@finman.money and we will act on it. Most of these you can also do yourself inside the app.

Security

Passwords are hashed with bcrypt and never stored in readable form. Sessions are authenticated with signed JSON Web Tokens. The service is served over HTTPS only, applies security headers and rate limiting, and sanitises user-supplied content before it is rendered. No system is perfectly secure, and we do not claim otherwise.

Children

Finman is not directed at children and we do not knowingly create accounts for them.

Changes

If this policy changes materially, the updated version will appear on this page with a new date. Continuing to use Finman after that means the updated policy applies.