fin · privacy policy · effective 5 September 2026

fin — Privacy Policy

The short version: everything stays on your phone. fin reads your bank SMS and banking-app notifications, turns them into a personal spending ledger, and stores that ledger in a private database on your device. There is no fin account, no fin server, no analytics, and no crash reporting. We cannot see your data — by design, there is nowhere for it to go.

What fin reads, and why

• SMS messages (READ_SMS / RECEIVE_SMS) — fin scans messages to find transaction alerts from banks and financial services (purchases, transfers, bills, balances). Messages that are not financial are inspected on-device and ignored; nothing about them is stored.
• App notifications (optional; a separate opt-in you can revoke any time) — banking, wallet and buy-now-pay-later apps often announce transactions only as notifications. If you grant notification access, fin parses those the same way, on the device.
• Approximate location (optional, off by default) — if you enable location tagging, new transactions are annotated with a coarse location so you can remember where a charge happened. Locations are stored only in your on-device ledger.

Where your data lives

In an app-private database on your device. It is excluded from Android's cloud backup. It leaves the device only when you export it — a file you choose the destination for. Uninstalling fin deletes the database.

What leaves the device

• Nothing about your finances. No message contents, no transactions, no balances, no identifiers.
• Bank logo images — to show a bank's logo, fin fetches a public image from a logo CDN (cdn.brandfetch.io). The request contains only the bank's public domain name (e.g. adcb.com) — never anything about you or your accounts. Logos are cached so this happens rarely.
• Purchases — subscriptions and one-time unlocks are handled entirely by Google Play Billing under Google's own terms. fin receives only an entitlement confirmation, never your payment details.
• Links you tap (for example a map lookup for a transaction location, or the Save-a-Shark link) open in your browser like any link.

What fin does not do

• No accounts, sign-ups, or profiles.
• No analytics, tracking, or advertising SDKs.
• No crash reporting.
• No selling, sharing, or transmitting of personal data — there is no server-side component at all.
• fin never sends SMS, never modifies messages, and never acts on your accounts. It is a reader, not an agent.

Your controls

• Revoke SMS access, notification access, or location at any time in system settings — capture simply stops.
• Delete any transaction, or the entire database, from inside the app.
• Export your data (JSON backup or CSV) whenever you like, including after your trial ends.

Children

fin is a personal-finance tool intended for adults and is not directed at children under 13.

Changes

If this policy changes, the updated version will be published at this URL with a new effective date. Because fin has no server, a change in policy can never retroactively affect data — there is none held.

Contact

Questions or requests: helloizzylogic@gmail.com

fin. made with love.