Privacy Policy for Personal Finance Tracker

Effective Date: January 2, 2025

Overview

Personal Finance Tracker is a simple expense tracking app that helps you manage your personal finances. We are committed to protecting your privacy and being transparent about how we handle your data.

Information We Collect

Information You Provide

• Account Information: Email address, first name, last name, and password for your account
• Financial Data: Transaction amounts, descriptions, categories, and dates that you manually enter
• Account Information: Custom names you give to your accounts (e.g., "My Chase Card", "Savings Account"), account types, balances, and credit limits
• Budget Data: Budget amounts and categories you set for financial planning
• AI Insights: Transaction descriptions you provide for AI-powered category suggestions and financial insights

Information We DO NOT Collect

• Real bank account numbers or routing numbers
• Social Security Numbers
• Actual banking credentials or passwords
• Credit card numbers
• Connection to your real financial institutions
• Location data
• Device identifiers for advertising
• Usage analytics or tracking data
• Biometric data

How We Use Your Information

Primary Uses

• To provide you with the expense tracking and budgeting service
• To secure your account with authentication using JWT tokens
• To store your manually entered financial data securely
• To display your financial summaries, reports, and insights
• To provide AI-powered category suggestions and financial analysis

Third-Party Services

• OpenAI API: We use OpenAI's API to provide AI-powered financial insights and category suggestions. Transaction descriptions you enter may be sent to OpenAI for processing, but no personal identifying information is included.
• Email Service: We use email services to send password reset codes and account notifications.
• Database Storage: Your data is stored securely using Supabase (PostgreSQL) with encryption.

Data Security

Technical Safeguards

• Passwords are encrypted using industry-standard bcrypt hashing
• All data transmission uses HTTPS encryption
• JWT tokens are used for secure authentication
• Database connections are encrypted and secured
• Your financial data is stored securely and never shared with third parties
• We do not integrate with actual banks or financial institutions

Data Protection

• All data is stored in encrypted databases
• Access to your data is restricted to authenticated users only
• Regular security updates and monitoring
• Secure API endpoints with proper authentication

Data Sharing

We Do NOT Share Your Data

We do not sell, trade, or share your personal information with any third parties except:

• OpenAI API: Only transaction descriptions (without personal identifiers) for AI processing
• Email Service Providers: Only for sending account-related emails
• Database Hosting: Secure storage with Supabase

Legal Requirements

We may disclose your information if required by law or to protect our rights and safety.

Data Retention

Account Data

• Your account data is retained while your account is active
• You can delete your account and all associated data at any time
• We do not retain your data after account deletion
• Inactive accounts may be deleted after 2 years of inactivity

AI Processing

• Transaction descriptions sent to OpenAI are not stored by OpenAI beyond processing
• We do not retain copies of data sent to third-party AI services

Your Rights

Data Access and Control

• Access: You can view all your data through the app
• Correction: You can edit or update your information anytime
• Deletion: You can delete your account and all data permanently
• Portability: You can export your transaction data
• Restriction: You can limit how your data is processed

Account Management

• Update your profile information
• Change your password
• Delete your account
• Export your financial data

International Users

Your data is processed and stored in the United States. By using our service, you consent to the transfer of your data to the United States.

Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify users of any material changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

Data Breach Notification

In the unlikely event of a data breach, we will notify affected users within 72 hours and take immediate steps to secure the data.