Privacy Policy

Effective Date: October 28, 2026

Mr.Fin ("we", "us") is a personal finance app built around Financiography: a record of the who, why, what, where and how behind your money. This policy explains what data the app handles, why, and the choices you have. By using Mr.Fin, you agree to this policy.

1. Information We Collect

1.1 Financial records you enter

Mr.Fin records only what you enter yourself: accounts, transactions, categories, budgets, parties, debts and shared expenses.

1.2 Account information (online users)

If you create an online account, we collect:

• your name and email address
• sign-in details from Google or Apple, if you use them, handled through Firebase Authentication
• your Mr.Fin user ID and QR code, which other users can use to link with you

1.3 Device and notification data (online users)

We store a device identifier, basic device information (model, operating system and app version) and a push notification token. We use these to sync your data across your devices, pair new devices and send notifications.

1.4 Usage and crash data (all users)

For all users, including offline users, the app sends usage events and crash reports to Google Firebase Analytics and Firebase Crashlytics. This data is linked to an app-instance identifier and device information, not to your name or email. It is pseudonymous, not anonymous. We use it to understand how the app is used and to fix problems.

1.5 Receipts and attachments

• Offline users and free online users: images stay on your device.
• Premium online users: images are uploaded to secure cloud storage (Amazon Web Services) so they sync across your devices.

1.6 AI inputs

If you use AI features, the invoice image or text you submit is processed as described in Section 4.

2. How We Use Your Information

• To provide the app's features: recording, syncing, analytics and budgets
• To manage your account and keep it secure
• To process subscriptions
• To send notifications and app-related updates
• To understand usage, fix crashes and improve the app
• To prevent misuse, such as abuse of free usage limits

We do not sell your personal data, and we do not use it for advertising.

3. Where Your Data Is Stored

Offline mode

Your financial records stay on your device and are not sent to our servers. Usage and crash data is still sent to Firebase, as described in Section 1.4.

Online accounts

Your data is synced to our servers and stored with industry-standard security measures. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Biometric lock

Fingerprint and face unlock are checked by your device's operating system. We never receive or store biometric data.

Backups and exports

Encrypted backups and Excel/CSV exports are files saved on your device or to a location you choose. You are responsible for keeping those files safe.

4. AI Features

Mr.Fin uses AI to read invoices and to turn text you type into transactions. When you use these features, the image or text is sent to our server and processed by Google Gemini through its paid API. Under Google's terms for paid API use, this data is not used to train Google's models. Google may keep it for a limited time to detect abuse and meet legal obligations. We do not use your data to train any AI model.

AI features are optional. You will be asked for your permission before you use them for the first time, and you can record every transaction without them.

5. Records You Share With Other People

In features such as Shared Expenses and Lend & Borrow, you can share a specific transaction with a party who is linked to another Mr.Fin user. That user sees only the records you choose to share with them: the amount, date, description and each person's share. Linking does not give them access to any of your other transactions, accounts or data.

6. Third-Party Services

We use the following service providers. Each processes data only to provide its service.

7. Data Retention and Deletion

Offline users

Your data stays on your device until you delete it, clear the app's data or uninstall the app. We hold none of it on our servers.

Online users

We keep your data while your account is active. You can delete your account at any time from Settings in the app. When you do:

• your personal data and financial records are deleted from our servers
• to prevent misuse of free usage limits, we keep your email address, marked as deleted, for 24 months, and use it only to recognise a repeat sign-up. After 24 months it is permanently deleted.

Data already shared with service providers (analytics, crash reports and purchase records) is kept under their own retention policies.

8. Your Rights

You can:

• Access your data: request a copy of the personal data we hold about you
• Correct it: fix inaccurate or incomplete information
• Delete it: directly in the app, or by contacting us
• Withdraw consent: for example, to AI processing, in the app's settings

We respond to requests within 30 days.

9. Children

Mr.Fin is not intended for children under 13, and we do not knowingly collect personal data from them. If you are under 18, please use Mr.Fin with a parent's or guardian's permission. If you believe a child under 13 has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will post changes in the app and on this page, with a new effective date. If you continue to use Mr.Fin after a change, you accept the updated policy.

11. Contact and Grievances

For questions about this policy, to access, correct or delete your data, or to raise a concern about how it is handled, email [email protected]. We will respond within 30 days.