Privacy Notice

1. Who we are

We are the controller for the personal data we collect about users of our product and site. Write to the address above about anything in this notice, or about your own data.

2. What we collect

• Your account — an email address, the default currency you chose, a time zone, and when the account was created. We do not ask for or use your name, your postal address or a phone number.
• Your ledger — the transactions you record: an amount, a date, a name, a category and an optional description. A description copied from a bank statement can name whoever you paid, including a person, and it is stored exactly as it was written. All of it is yours to change: every row of an import is shown to you for editing before anything is saved, and any transaction can be edited or deleted afterwards, at any time.
• Imported statements — which statement was imported, the period it covered, and the last 4 characters of the account it named, kept so that importing the same statement twice can be recognised. The full account number or IBAN is discarded when the file is read and never reaches our database.
• Access and technical logs — which tool was called, by which connected application, and when, together with ordinary error and performance telemetry. They do not record the contents of your transactions, and where a log line would carry the account mask it is redacted.
• Billing — from Paddle we receive opaque identifiers for your customer and subscription records, which plan you are on, and when it renews. We do not receive your card details or your billing address.

3. What we do NOT store

• The statement file itself. An uploaded PDF or CSV is read once, in memory, and then discarded. It is never written to a disk, a database or any file storage.
• Full account numbers or IBANs — see the last 4 characters above.
• Card details, the cardholder name and the billing address. Those are entered on Paddle's checkout and never reach us.

4. Why we use it, and on what basis

• To run the service — storing your ledger, reading your statements, running reports and answering your questions to the assistant: performing our contract with you.
• To send transactional email — confirming an address, resetting a password, confirming a deletion, warning you before an inactive account is deleted: performing our contract with you.
• To keep the service secure and to meter allowances — preventing abuse and enforcing the limits a plan carries: our legitimate interest in running the service safely and sustainably.
• To meet accounting and tax obligations — a legal obligation, most of which is discharged by Paddle as merchant of record.

We do not sell personal data, and we make no automated decision that produces a legal effect for you.

5. Who we share it with

MyFinanceBook runs on a handful of outside services, and data protection law entitles you to know which. This is all of them:

• Anthropic — the AI provider behind statement extraction and the built-in assistant. An uploaded statement is sent to be read, and it carries whatever your bank printed on it, which usually includes your name and your full account number: we store neither, but the document does leave the app in order to be read. Questions you put to the assistant, and the figures needed to answer them, are sent in the same way. If you would rather that did not happen, record transactions by hand and do not use the assistant.
• Paddle — merchant of record for every purchase. Paddle runs the checkout, calculates and remits the tax, issues the invoice and handles refunds, and is a controller in its own right for what it collects there. Paddle's name, not ours, appears on your card statement.
• Brevo — sends the email the service has to send you: confirming an address, resetting a password, confirming a deletion, warning you before an inactive account is deleted.
• Microsoft Azure — hosts the application and everything it stores, including your ledger and our logs.

We share personal data with nobody else, and we sell it to nobody.

6. Where it is processed

The application, its database and its logs run in Microsoft Azure's West Europe region, inside the EU. Brevo is an EU provider and processes in the EU.

Anthropic processes data in the United States. That transfer is covered by the standard contractual clauses adopted by the European Commission, under Anthropic's data processing addendum. Paddle handles the transfers involved in taking your payment under its own privacy policy.

7. How long we keep it

• Your ledger, categories and account — for as long as you use your account. If a free account shows no activity for 12 months (no sign-in and no use through a connected assistant), we email you twice, 30 and 7 days before, with a link to download your data, and then delete the account as if you had deleted it yourself. An account on a paid plan is never deleted for inactivity; when a subscription ends, the 12 months run from the end date or your last activity, whichever is later.
• Conversations with the built-in assistant — 30 minutes after you stop writing, then deleted automatically. There is no chat history to export or to ask for.
• Records of imported statements — 24 months, then deleted automatically.
• Access and technical logs — 90 days.
• A one-way hash of the address of a deleted account — 14 months from that deletion, starting again if the same address is registered and deleted again. It records how much of the one-time welcome credit that account had used. The address itself is not kept, and the record is read only when someone registers.
• Invoices and tax records — kept by Paddle under its own policy, for as long as tax law requires.

Deleting your account removes the first three outright. It does not reach what Paddle holds for invoicing and tax, it does not purge logs already written, and it writes the hash described above — those age out on the schedule here.

8. Your rights

You can ask us for a copy of your data, for it to be corrected, for it to be erased, for processing to be restricted, or for a copy in a portable form. You can object to processing we base on a legitimate interest, and you can complain to the data protection authority where you live. Write to support@myfinancebook.app and we will answer within one month.

Two of those you do not have to ask for. In Settings, Download my data hands back a zip of CSV files holding your account, your categories, your transactions and your imported statements, and Delete my account removes the account and its whole ledger permanently, at once.

What that zip leaves out is the record of your subscription: which plan you are on, what you have used of its allowance, and the identifiers Paddle gave us. Ask at the address above and we will send you that too.

9. Cookies

One cookie, and it is the authentication cookie that keeps you signed in. It is strictly necessary for the service to work, so there is nothing to consent to and no banner to dismiss. We set no analytics, advertising or tracking cookies.

Your browser also keeps a little state of its own — the address awaiting confirmation while you sign up, for instance, and whether you have dismissed the welcome panel. It stays in the browser and is never sent to us.

10. Security

Passwords are hashed and never stored as written, and traffic is encrypted in transit. Access to the systems holding your data is restricted, and the keys and credentials behind them are held in a managed secret store rather than in the application itself.

No service can promise perfect security. If we ever became aware of a breach affecting your data, we would tell you and the relevant authority as the law requires.

11. Changes to this notice

We may update this notice. The version on this page is the one that applies, and the date at the top says when it last changed.