Privacy

Updated 14 September 2026.

This page describes what the application does, not what a legal text promises. If anything here stops being true, it is a bug and we fix it.

The promise

Your amounts, merchants, descriptions, categories, accounts, loans, trips and balances are encrypted on your device before they are saved. We cannot read them, not even with full access to the servers, and neither can Google.

They are encrypted with a passphrase only you know. What reaches the server is encrypted data we cannot open.

What we do not say is "only you", because sharing an account is a FinnTrack feature: anyone who shares one with you reads that whole account. What we can see, and what we cannot tells the whole story, including what the encryption does not protect.

What can be seen, and why

A promise with unstated exceptions would be a lie. These are the exceptions:

• Your email address and name, if you sign in with Google or Apple. The sign-in system needs them to know who you are.
• The dates of your entries. They are needed to bring you only the months you look at. Someone with server access could see you noted four expenses on 12 March; never how much, where or on what.
• How many entries you have and their rough size, and that two user accounts share a common account.

Where each thing lives

• Email and password: in Google's sign-in system (Firebase Authentication).
• Expenses, income, accounts, loans, transfers, trips, categories and preferences: encrypted on your device and stored that way on Google's servers (Cloud Firestore).
• Your signed-in session: on your device.
• The backup: created on your device, encrypted by default, and goes where you say. It is never uploaded to FinnTrack.
• If you buy FinnTrack Full: the store (Apple or Google) and our purchase manager record that your account made that purchase. They see an identifier and a purchase; never one of your figures.
• If the app fails: no report is sent or stored. The error is shown on screen and stays on your device.

What we never collect

No usage analytics, no advertising identifiers, no tracking of any kind, no access to contacts, location, camera, photos or health. There are no ads and nothing you note down is sold. FinnTrack does not connect to your bank.

If you lose your keys

Encryption has a consequence we would rather state plainly: if you lose your passphrase and your recovery key, your data cannot be recovered. Not even by us. That is why the app makes you save the recovery key at setup, and why the backup exists.

Deleting your account

You can delete your account from Settings. Your data and your user are erased. No copy of ours survives that button.