Privacy Policy

Finadget is operated by Youssef Benkassem, a French sole proprietor (EI / auto-entrepreneur) registered under SIRET 942 390 956 00020, based in Paris, France — see our Legal Notice for full publisher details. For any privacy question, contact us at contact@finadget.com.

• Account data — email address, full name, and a securely hashed password (we never store or have access to your actual password).
• Preferences — currency, language, and display settings you choose.
• Financial data you enter — accounts, transactions, budgets, categories, recurring transactions and auto-categorization rules you create to use the service, plus the bank transaction identifier (FITID) kept on transactions imported from an OFX file to detect duplicates. The imported file itself is never stored. This data is yours; we only store it to provide the app's functionality.
• Session & security data — IP address, browser and operating system, collected on login to secure your account and let you review and revoke active sessions from Settings.
• Billing data (Pro plan only) — subscription payments are handled entirely by Paddle, who acts as the merchant of record (see our Terms of Sale). We store a reference to your Paddle customer record, never your card details.

We use a single strictly-necessary cookie to keep you signed in, and no advertising or cross-site tracking cookies of any kind. Full details on the cookies we use, how long they last, and the cookieless analytics tool used on our marketing pages are in our dedicated Cookies Policy.

We use your data to, with the legal basis for each use in parentheses:

• Provide and operate the budgeting features you use (performance of our contract with you);
• Send account and security emails, e.g. email confirmation, password reset (performance of our contract with you);
• Send optional notification emails you have enabled — budget alerts, weekly/monthly summaries, low balance and similar reminders — each one can be turned off individually in Settings (your consent);
• Process Pro plan subscription payments (performance of our contract with you);
• Keep the service secure and prevent abuse (our legitimate interest in protecting the service and its users).

We work with a small number of service providers who process data on our behalf:

• Paddle — payment processing and invoicing for Pro subscriptions (Merchant of Record).
• OVH — application hosting, transactional email delivery, and encrypted backups (hosted in the EU).
• exchangerate-api.com — supplies daily currency exchange rates; it never receives any of your personal or financial data, only currency codes.
• Umami — privacy-focused website analytics, active only on our public marketing pages (never on the app you use after signing in). It uses no cookies and stores no personally identifiable information — only aggregated, anonymized statistics such as page views, referrer and country (derived from your IP address, which is discarded immediately and never stored).

We do not sell your data, and we do not use any advertising or cross-site tracking network.

Your data is kept for as long as your account is active. When you delete your account (Settings → Delete account), we permanently erase your financial data — accounts, transactions, budgets, categories and recurring transactions. Free plan deletions are processed immediately; Pro plan deletions are processed at the end of your current billing period, with a reminder email sent the day before, though you can also request immediate deletion at any point during that period instead of waiting. We do not retain any record of your account after deletion — your email address is anonymized and cannot be used to identify you or link back to your data. See Delete your account for the full step-by-step process.

Under GDPR and similar laws, you have the right to access, correct, export, delete, restrict the processing of, and object to the processing of your data, and to withdraw your consent at any time for anything we process based on it (e.g. optional notification emails). You can export your data as a spreadsheet at any time from Transactions → Export, and delete your account and all associated data from Settings. For any other request, contact contact@finadget.com.

You also have the right to lodge a complaint with your national data protection authority — in France, the CNIL (Commission Nationale de l'Informatique et des Libertés), www.cnil.fr — if you believe your rights are not being respected.

Passwords are hashed and never stored in plain text. All traffic is encrypted in transit (HTTPS), and backups are encrypted at rest. Access to production data is limited to what is strictly necessary to operate the service.

While we implement the measures described above, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Our commitment regarding data security is a best-efforts obligation (French law: obligation de moyens), not an obligation to guarantee a specific outcome (obligation de résultat).

Your data — including automated disaster-recovery backups — is hosted and processed within the European Union. Paddle, as the merchant of record, may process billing data outside the EU under its own compliance safeguards (Standard Contractual Clauses).

Finadget is not directed at children under 16 and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be notified by email or an in-app notice before they take effect.

Questions about this policy or your data: contact@finadget.com.