Privacy Policy

1. Introduction

At Finansify, privacy is not an afterthought - it is how the product is designed. This Privacy Policy explains what data we process, why, on what legal basis, and what rights you have. It is provided as the information required by Articles 13 and 14 of the GDPR.

In short: your financial data is yours. We never sell your personal data, we never connect to your bank, and you decide what enters the application.

2. Data Controller

The controller of your personal data is ITQ Solutions Przemysław Kukulski, ul. Doniecka 5d/4, 42-612 Tarnowskie Góry, NIP: 645-21-34-096 ("Finansify", "we").

For any questions about this Privacy Policy or to exercise your rights, contact us at: privacy@finansify.pl

3. Information We Collect

We only collect data that you provide or that is necessary to run the Service. We never ask for your online banking credentials.

Account Information

• Email address
• Password (stored only as a secure cryptographic hash - we cannot read it)
• Name (optional)
• Language preference

Financial Data You Provide

• Transactions you enter manually
• Bank statement files (CSV) that you choose to upload
• Categories and tags you create
• Budget information and payment plans
• Uploaded receipts and the data extracted from them

Technical Information

• IP address
• Browser type and version
• Device information
• Usage data (first-party, used to keep the Service working and improve it)

4. Purposes and Legal Bases of Processing

We process your data for the following purposes, each with its legal basis under the GDPR:

• Providing the Service - storing and processing your transactions, generating reports, budgets and insights (Art. 6(1)(b) GDPR - performance of a contract)
• Receipt scanning and AI features - processing content you submit to these features (Art. 6(1)(b) GDPR)
• Processing subscription payments and related accounting records (Art. 6(1)(b) and Art. 6(1)(c) GDPR - legal obligations, e.g. tax and accounting law)
• Security, fraud prevention and server logs (Art. 6(1)(f) GDPR - our legitimate interest in keeping the Service safe)
• Service notifications and support - responding to your inquiries and informing you about important changes (Art. 6(1)(b) and 6(1)(f) GDPR)
• Improving the Service, including creating anonymized, aggregated statistics as described in Section 7 (Art. 6(1)(f) GDPR - our legitimate interest in developing the product)
• Marketing communications - only if you opted in (Art. 6(1)(a) GDPR - consent, which you can withdraw at any time)

5. Where Your Data Lives and How It Gets There

Your data, including your financial records, is stored in our database on servers located in the European Union (Hetzner, Finland). It is protected by strict access controls, encrypted connections, and infrastructure that undergoes independent security audits.

Finansify does not connect to your bank. We never ask for, receive, or store your online banking login or any bank API credentials. Data enters the application in exactly two ways: you type it in, or you upload a file you have prepared yourself (such as a CSV statement exported from your bank). This is a deliberate design choice - you can review every file before uploading it and you always know exactly what Finansify holds, because you put it there.

6. Third-Party Processors

We use a small number of carefully selected service providers that process data on our behalf under data processing agreements:

Payment Processing

We use Stripe to process payments. Your payment card details are handled directly by Stripe and never reach our servers. See Stripe's Privacy Policy .

Email Delivery

We use SparkPost to send transactional emails. Your email address is shared with SparkPost solely for the purpose of delivering these messages.

Content Delivery and Security

Our web application is delivered via Cloudflare, which processes technical connection data (such as your IP address) to serve the site and protect it against attacks.

AI Processing

Receipt scanning and AI assistant features run on our own infrastructure in the EU. No user data is sent to external AI model providers.

7. Anonymized and Aggregated Insights

We never sell your personal data. Nobody outside Finansify can see your transactions.

We may create anonymized, aggregated statistics from usage of the Service - for example, "the average price of a given product across stores in a given area". These statistics are built so that no individual person can be identified from them, and once anonymized they are no longer personal data.

We use such aggregated insights to:

• Build features that benefit you - such as showing that a product you buy is available cheaper at a nearby store
• Understand trends and improve the Service
• Create anonymized market statistics that may be shared with or provided to partners

What is shared is never your data - it is statistics about many users combined, with all identifying information removed. Your name, email, account and individual transactions are never part of it.

8. Data Retention

We retain your data as follows:

• Account data: Until you delete your account
• Financial data: Until you delete it or delete your account
• Uploaded files: Until you delete them or your account
• Deleted accounts: 30-day grace period, then permanent deletion
• Backups: Deleted data may persist in encrypted backups for up to 7 additional days
• Server logs: 90 days
• Billing records: As long as required by tax and accounting law

9. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: At any time, without affecting prior processing

To exercise these rights, contact us at privacy@finansify.pl or use the data export feature in your account settings. We respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

10. Automated Processing

Finansify automatically categorizes transactions and generates financial insights to help you understand your finances. These are informational features only - we do not make any decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you.

11. Data Security

We protect your data with security measures that are independently audited, including:

• Encryption of all data in transit (HTTPS/TLS)
• Servers located in the European Union with strict physical and logical access controls
• Secure password hashing - we never store or see your password in readable form
• Access limited to what is strictly necessary to operate the Service
• Regular independent security audits and automated vulnerability scanning
• Continuous monitoring and error tracking

No online service can guarantee absolute security, but limiting what we collect in the first place - no bank credentials, no automatic account access - means there is simply less that could ever be exposed.

12. International Transfers

Your data is stored in the European Union. Some of our providers (such as Stripe, SparkPost or Cloudflare) may process limited data outside the European Economic Area. In such cases we ensure appropriate safeguards are in place, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

13. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in the application before they take effect, and we will update the "Last updated" date on this page. See also our Terms of Service and Cookie Policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: privacy@finansify.pl