Privacy Policy
Last updated
Finexa holds a record of your money. This page says exactly what is stored, why it is stored, who else can see it, and how to get rid of it. It describes the product as it is built, not as a category of products generally works.
The short version
Finexa never connects to your bank. Everything it knows, you typed in or imported from a file you chose. Your data is not sold, not shared with advertisers, and not used to train anything. You can delete all of it from inside the app, or from [the account deletion page](/account-deletion) if you have already uninstalled it.What is stored
Four kinds of thing, and nothing else. The right-hand column is why it exists — if a field has no answer there, it should not be in the database.
| Category | What exactly | Why |
|---|---|---|
| Identity | Your name, email address, a hash of your password, and the avatar URL if you set one. A flag recording whether two-factor authentication is on. | To have an account at all, and to address you by name. |
| Financial | Accounts and their balances; every transaction — description, merchant, amount, currency, type, status, reference, your note, and the dates; categories and their colours; budgets; and the categorisation rules you write. | This is the product. It is the record you came here to keep. |
| Activity | A security log: sign-ins, password changes, two-factor being turned on or off, and members joining or leaving — each with the IP address and the browser or device it came from, and the time. | So you can answer "was that me?". It is the only reason it exists. |
| Technical | Your sessions — each with an IP address and a user agent — and, where you signed in with Google or GitHub, the tokens that provider issued. | To keep you signed in, and to let you sign out of a device you no longer have. |
IP addresses and devices, stated plainly
Two tables hold them:session, for as long as that session lives, and activity_log, which keeps the security history. This is the field people are most often not told about, so it is said twice. It is never used to locate you, profile you, or build an audience.What is never stored
- Bank credentials. Finexa has no connection to any bank and no aggregator behind it. The "sync" button recomputes balances from the transactions already in your own ledger — it reaches nothing outside the database.
- Card numbers. An account can be *named* "Visa"; there is no field for a number.
- Payment details. Finexa moves no money and takes none.
- Your password. What is stored is a one-way hash. Nobody can read it back, including us.
- Location. No GPS permission is requested and no coordinates are stored.
Who else can see it
Finexa has households: you can share your finances with the people you actually share them with. Sharing is per account and off by default. An account you have not shared is visible to you alone, and that is enforced in the database query rather than by hiding a button — a private account is *not found* for another member, not found-and-filtered.
Members who administer a household can invite people, change roles and remove members. They cannot see a private account of yours by doing any of that.
Who processes it for us
| Service | What reaches it | When |
|---|---|---|
| The hosting provider and the database host | Everything, since that is where Finexa runs. | Always. |
| Resend | Your email address and a reset link. | Only when you ask to recover a password. Nothing else is ever emailed. |
| Google or GitHub | Whatever their sign-in exchanges — your email address and name. | Only if you choose to sign in with one of them. |
| Sentry | Crash and error reports: the stack trace, the app version, the device model. Amounts, descriptions, merchants and email addresses are stripped before sending. | When something breaks. |
There is no analytics service, no advertising SDK, no tracking pixel, and no third party that receives your transactions.
How long it is kept
Your financial records stay until you delete them — that is what a ledger is for. Sessions expire after 30 days. An invitation expires unaccepted. Everything else goes when the account goes.
Deleting it
- From the app — Profile → Settings → Delete account. You will be asked to type your email address to confirm, because a destructive action should be hard to do by accident.
- After uninstalling — Use [the account deletion page](/account-deletion), which needs no app and no session.
Deleting your account removes your identity, your credentials, your two-factor secret and your sessions immediately. If you were the only person in your household, its entire contents — accounts, transactions, budgets, categories, rules — go with it. If you shared it with others, their records stay, because they are theirs; your name is unlinked from the rows you entered, which survive anonymised so the household's history does not develop holes. [The account deletion page](/account-deletion) sets this out in full.
Your rights
You can export everything Finexa holds about your money as a CSV or a PDF, from Reports, at any time and without asking. You can correct anything by editing it. You can delete the lot. If you are in the UK or the EU, those are your access, rectification and erasure rights under the UK GDPR and the GDPR, and they are features rather than a request form.
Children
Finexa is not directed at children and accounts are not knowingly created for them.
Changes
The date at the top of this page is the last time it changed. A change that affects what is collected or who receives it will be announced in the app before it takes effect, not quietly published here.