1. Introduction
The text of this section will be added. Who the data controller is and what this policy covers (the Finaverse mobile app for iOS and Android and the finaverse.app website).
2. Data we collect
The text of this section will be added.
2.1. Account data
Email, name, password hash, email verification date, verification codes, session tokens, and the email address for your Gravatar avatar if you set one in the profile (it may differ from the account address; only use an address you own or are allowed to use).
The picture itself is not stored on the Finaverse server: the app loads it from the Gravatar service (see section 5) and caches it on your device.
2.2. Receipt scanning data (Premium)
The receipt or screenshot image is sent for recognition and is not stored on the server. Along with the image the app sends the list of your categories for the chosen month (name, type, description — so the recognised transactions get a category right away), the currency symbol and the device’s time zone; if you have active AI rules (available on the Pro plan), the text of those rules as well. None of this is stored. Only metadata is kept: status, document type, image size, model, token counts, processing time, the number of rules sent.
2.3. Subscription data
User identifier and subscription status received from RevenueCat.
3. Data we do not collect
The text of this section will be added. Transactions, budgets, reports and settings are stored in the local database on the device and are never sent to the server. Categories and AI rules are also stored only on the device; their names and texts are sent only with a scan request (see 2.2) and are not stored.
This data leaves the device only when you decide so: when you export a backup to a file (it contains the finance data, the AI rules and the app settings — but not the account email or the sign-in tokens) and hand it over through the system share sheet to the destination you choose yourself; if you wish, the file is encrypted with a password we do not know. In addition, the app saves a copy of the data in its own folder on the device — at most once a day, when you open it, and only the last three. These automatic copies are not password-protected, and the folder is included in the device backup to iCloud or a computer (Apple; on iPhone that backup also holds the app’s database itself) or Google (Android) when you have it enabled; such copies are kept under Apple’s and Google’s rules, not ours. The Finaverse server never receives these files.
4. How we use data
The text of this section will be added.
5. Third parties
The text of this section will be added. Google (Gemini) for image recognition that takes your AI rules into account; RevenueCat for subscription management; Apple App Store and Google Play for payments; Resend for transactional email; Gravatar (Automattic) for the profile picture. The avatar is shown only if you set a Gravatar address in the profile; until then the app never contacts gravatar.com. Once it is set, when you open the profile screen and the image is not yet cached on your device, the app requests it from gravatar.com, whether or not that address has a Gravatar. Gravatar then receives the SHA-256 hash of the address you set (not the address itself, although such a hash is no secret and could in theory be matched back to the address), your device’s IP address and standard request headers. The Finaverse server neither contacts Gravatar nor stores the image. If the address has no Gravatar, the app shows your initials.
6. Retention and deletion
The text of this section will be added. Account deletion is immediate; server backups are kept for up to 14 days. Retention periods for service data (codes, tokens, emails, subscription events).
7. Security
The text of this section will be added.
8. Your rights
The text of this section will be added. Access, correction, deletion (see the “Delete account” page), withdrawal of consent.
9. Children
The text of this section will be added.
10. Changes to this policy
The text of this section will be added.
11. Contact
The text of this section will be added. Support email: support@finaverse.app.