Privacy policy

Who is responsible for this data

This application is run by a private individual, not a company. There is no dedicated data protection officer; the contact below reaches whoever administers the app directly.

What data is collected

• Account: name, email address, and a hashed password (never the password itself).
• Financial data you enter: accounts, transactions, amounts, dates, payees, free-text descriptions, budgets, goals, and recurring templates.
• Device: if you turn on browser notifications, the subscription your browser gives us to deliver them (not your name or location).
• Usage: technical logs kept by the hosting provider for a limited time to operate and secure the service, plus the counters this app itself keeps to prevent abuse (login attempts, sign-ups per day).

Why this data is processed, and on what legal basis

Your account and financial data are processed to provide the service you asked for by creating an account: this is "performance of a contract" (GDPR art. 6.1.b), not consent, so it cannot be withdrawn while the account exists — deleting the account is how you withdraw it.

Push notifications are processed only with your explicit consent, given when you turn them on in Settings. You can withdraw it at any time from the same screen, or from your browser settings.

How long data is kept

Your data is kept for as long as your account exists. Deleting your account, from Account → Security, permanently erases your personal ledger and any shared ledger where you are the only member, along with everything in it. Encrypted daily backups are kept for a rolling window of the most recent copies and are then discarded; older backups become unreadable once that window passes.

Who this data is shared with

No data is sold or shared for advertising. It is processed by the infrastructure providers that host the application, acting as data processors under a contract with them, never as independent controllers: Vercel (application hosting), Neon (database hosting), and Resend (delivering the password-reset email, which includes your email address). If you turn on browser notifications, delivering them also involves your browser vendor's own push service (Google, Apple, Mozilla, or Microsoft, depending on your browser) receiving the message payload.

International transfers

The database runs in an EU region (London). The hosting provider may process data outside the EU under the safeguards required by GDPR (such as the EU-US Data Privacy Framework or standard contractual clauses), to the extent its own infrastructure requires it.

Your rights

You can access, correct, delete, or export your data at any time from within the app (Account → Security to delete it, Settings → Data to export it), or by writing to the contact address below. You also have the right to object to processing, to request that it be restricted, and to lodge a complaint with your national data protection authority (in Spain, the AEPD) if you believe your rights have not been respected.

Cookies

This app only sets strictly technical cookies: to keep you signed in, to remember which ledger you are viewing, and to remember your accent colour. There is no advertising or analytics cookie, so no consent banner is shown. If that ever changes, this page will be updated and a banner will be added.

Changes to this policy

If this policy changes in a way that matters, the "last updated" date above will change and, where required, you will be asked to accept the new version again the next time you sign in.