Privacy Policy

FinXM holds something private by definition: a record of your money. This page says exactly what we keep, why, who else ever sees it, and how to get it out or have it deleted.

What we hold

• Your account — username, email address, a hashed password (never the password itself), your main currency and preferences, your plan and its status.
• Your ledger — the accounts, transactions, categories, budgets, loans, plans, subscriptions, shared events and any bill photos you attach. Everything here is what you chose to type in.
• A change log — an append-only record of ledger changes, so you can see what happened to a figure and when.
• Technical basics — a session cookie so you stay signed in, and ordinary server logs. There is no analytics script, no advertising pixel and no tracker of any kind in this app.

Why we hold it

To run the service you asked for: to show your ledger, keep it correct, confirm your email address, take payment for a paid plan, and answer you when you write to us. We do not profile you, and we never sell or rent anything about you to anyone.

Who else ever sees it

• Paddle, our merchant of record, when you subscribe. Paddle takes the payment and holds the card details — we never see or store a card number. Paddle tells us only that a subscription started, changed or ended.
• Anthropic, only if you use AI bill scanning, and only for the photo you scan at the moment you scan it. The image is sent to be read and is not stored by us in that flow; a bill you deliberately attach to a transaction is stored with it, in our database, and nowhere else.
• Our email provider, to deliver confirmation messages to the address you gave.
• Nobody else. No advertisers, no data brokers, no analytics companies.

Where it lives

On our own server, in a PostgreSQL database, reached over HTTPS. Passwords are hashed with Argon2. Backup files you download are encrypted with AES-256-GCM under a password only you know — we cannot read them.

How long

Your ledger stays until you delete it or your account. In-app snapshots are kept for as many days as you choose in Settings (seven by default) and are pruned automatically. Delete your account and the ledger goes with it.

What you can ask for

• A copy — export from inside the app at any time; you do not need to ask.
• Correction — everything is editable in the app.
• Deletion — write to us and your account and its ledger are removed.
• An explanation — ask what we hold about you, and we will tell you.

Cookies

One: finx_session, which keeps you signed in. It is not shared, not used for tracking, and disappears when you sign out.

Children

FinXM is not intended for anyone under 16, and we do not knowingly hold their data.

Contact

Anything on this page: admin@finxm.app. Payment data held by Paddle is covered by Paddle’s own privacy policy.