Back to sign in

Privacy Policy

Last updated: —

This is a draft for review and is not yet legally binding. It must be reviewed and finalised (including filling in company and contact details) before it can be relied on.

This Privacy Policy explains how MyFinance Family ("we", "the app") collects, uses, stores and protects your personal and financial data. We designed the app so your financial information stays private and under your control.

1. Who we are (controller)

The data controller responsible for your personal data is {{COMPANY}} ({{COMPANY_LEGAL_ID}}), {{ADDRESS}}. For any privacy question or to exercise your rights, contact us at {{CONTACT_EMAIL}}.

2. What data we collect

We collect only what the app needs to work:

  • Account data: your name, email and an encrypted password hash.
  • Financial data you enter or import: accounts, balances, transactions, budgets, goals and the bank statement PDFs you upload for parsing.
  • Technical data: basic logs and cookies needed for authentication, your language and display-currency preferences, and security.

3. How we use your data

  • To provide the service: show balances, budgets, analytics and net worth.
  • To parse the statements you upload into transactions.
  • To authenticate you and keep your account secure.
  • To communicate essential service messages (e.g. password reset).

We do not sell your data, and we do not use your financial data for advertising.

4. Legal basis (GDPR)

For users in the EU/EEA, we process your data to perform our contract with you (providing the app), on the basis of your consent where applicable, and for our legitimate interest in securing the service. For users in Brazil, processing follows the bases set out in the LGPD (Lei nº 13.709/2018).

5. Storage, processors and transfers

Your data is stored with our infrastructure providers ({{HOSTING_PROVIDER}} for hosting, {{DATABASE_PROVIDER}} for the database, {{EMAIL_PROVIDER}} for transactional email). These providers act as processors on our behalf. Where data is transferred internationally, we rely on appropriate safeguards required by GDPR/LGPD.

6. Data retention

We keep your data while your account is active. You can delete your data at any time from your profile or by contacting us; uploaded statement PDFs are processed to extract transactions and are not retained beyond what is necessary. When you delete your account, we remove your personal data within {{RETENTION_PERIOD}}, except where the law requires us to keep it longer.

7. Your rights

Under the LGPD and GDPR you can request access to, correction of, portability of, and deletion of your data, and object to or restrict certain processing. To exercise any right, contact {{CONTACT_EMAIL}}. You also have the right to lodge a complaint with your supervisory authority (the ANPD in Brazil, or your local Data Protection Authority in the EU).

8. Security

We protect your data with encryption in transit, hashed passwords, per-user data isolation and a strict Content-Security-Policy. No method of transmission or storage is 100% secure, but we work to protect your information using industry practices.

9. Changes to this policy

We may update this policy; we will change the "last updated" date above and, for material changes, notify you in the app.