Privacy Policy
Last updated 13 November 2026
This document is a draft for legal review. It describes the product as it works today and will be reviewed by qualified counsel before public launch.
What we collect
- Account details: your name, email address and a password. Passwords are handled by our authentication provider and are not stored in readable form.
- Financial records you enter: accounts, balances, transactions, categories, budgets and notes. You choose what to enter; FinTrack does not connect to your bank.
- Messages you send to support, including any file you attach.
- Technical data needed to run the service, such as the cookies described in the Cookie Policy and standard server logs.
We do not run advertising or behavioural analytics on the product today. If that changes, this policy and the Cookie Policy will be updated first.
Why we use it
- To provide the service: sign you in, calculate balances, budgets and totals, and show them back to you.
- To keep the service secure and prevent abuse.
- To answer your support requests.
- To meet legal obligations.
Who handles your data
We use service providers to run FinTrack. Today these are a database, authentication and file-storage provider (Supabase) and a web hosting provider. They process data on our behalf and only to provide those services.
Paid plans, when they launch, will use Razorpay for customers in India and PayPal for international customers. Card numbers go to the payment provider and never reach FinTrack. Payments are not live today.
An AI assistant is planned but is not available. Before it launches we will describe here what data it uses and give you a way to opt out.
We do not sell your personal data.
Where data is stored
Your data is stored with our database provider in the region it is configured for. Our providers may process data in other countries. We will describe transfers more precisely, with the legal basis for them, after legal review.
Keeping data and deleting it
We keep your records while your account is open. Your financial history is kept intact on purpose: transactions are reversed, not deleted, so reports stay accurate.
To export or delete your data, or to close your account, use Contact us and choose Account. A self-service export and deletion tool is planned and this section will be updated when it ships.
Your rights
Depending on where you live you may have rights to access, correct, export or delete your personal data, and to object to or restrict some processing. Contact us to use them. The specific rights and how we handle them will be confirmed after legal review of the laws that apply to our users, including India's data protection law.
Security
Access to your data is controlled in the database itself, so another user cannot read your records. See Security and privacy. No system is perfectly secure, and we cannot guarantee absolute security.
Contact
Questions about this policy: Contact us.