Privacy Policy

Overview

FinPal is a finance planning and tracking application. We do not access your bank accounts, process real money, or transfer funds. Your privacy is fundamental to how we build the app.

Data that stays on your device

All personal financial data — including personal expenses, income, budgets, and savings goals — is stored locally on your device using an on-device database. This data never leaves your device unless you explicitly enable cloud backup in settings.

If you enable cloud backup, your personal data is encrypted and synced to a private cloud namespace tied to your account. You can disable this at any time, and request deletion of your cloud backup.

Data stored in the cloud

When you use shared features, the following data is stored on our cloud database (powered by InstantDB):

• Your profile (display name, avatar)
• Shared Space memberships, shared expenses, shared budgets, and shared savings goals
• Trip data including participants, trip expenses, contributions, and itineraries
• Messages sent within Shared Spaces
• Space and trip invite tokens

This data is shared with other members of your Spaces and Trips and is necessary for the collaborative features to function.

Push notifications

If you enable push notifications, your Expo push token is stored server-side so that other members of your Spaces and Trips can trigger notifications (e.g., when an expense is added). Your push token is not shared with other users — it is only used server-side to deliver notifications.

Third-party services

FinPal uses the following third-party services:

• Google Cloud Vision API — used for receipt scanning (OCR). When you scan a receipt, the image is sent to Google's servers for text extraction. We do not store receipt images on our servers.
• Open Exchange Rates — used to fetch current currency exchange rates for multi-currency trip expense conversion.
• Expo Push Notification Service — used to deliver push notifications to your device.
• InstantDB — cloud database used for shared/collaborative data and user authentication.

Authentication

FinPal uses email-based magic code authentication powered by InstantDB. We store your email address for authentication purposes. We do not use passwords.

What we do not collect

• Bank account credentials or financial institution data
• Location data
• Contacts or phone book data
• Advertising identifiers
• Usage analytics or behavioral tracking

Data retention and deletion

Your local data remains on your device and is deleted when you uninstall the app. Cloud data (shared spaces, trips, profile) is retained as long as your account exists.

You can request complete deletion of your account and associated cloud data at any time by visiting finpal.infinode.tech/delete-me. Upon deletion, we remove your profile, push tokens, space memberships, and trip participations. Shared content (expenses, messages) contributed to Spaces and Trips is retained for other members.

Children's privacy

FinPal is not intended for use by children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.

Contact

If you have questions about this privacy policy or your data, contact us at develop@infinode.tech.