Finantzak Privacy Policy

The controller is Steven Zafra, an individual with Spanish tax identification number 73673228L and address at Grupo Peñucas. This policy covers finantzak.es, finantzak.eus, the app, cloud accounts, support and Toby. For privacy questions or rights requests: soporte@finantzak.eus.

• Account: name, surname if supplied, email, date of birth, protected credentials and preferences.
• Financial content and files the user chooses to store or sync, including shared workspaces.
• Subscription: Google Play product, status, dates and purchase identifiers; Finantzak does not receive full card details.
• Security and support: IP, device, sessions, technical logs, diagnostics, incidents and contact messages.
• Toby: messages, selected context and provider, responses and proposed or confirmed actions.
• Acceptance evidence: version of the Terms and privacy notice, date, source and minimum technical proof data.

• Account administration, service delivery, sync and Premium: contract performance and pre-contractual steps.
• Age checks, fraud and abuse prevention, account protection and incident response: legitimate interests in security and continuity, alongside legal obligations.
• Billing, contractual evidence and rights handling: legal obligations and establishment, exercise or defence of claims.
• Commercial messages, personalised ads or non-essential technology: consent where required, withdrawable at any time.
• Optional Toby context processed by an external provider: specific notice and consent before transfer where applicable.

Access is limited to necessary providers for hosting and infrastructure, email and support, Google authentication, Google Play, storage, security and the AI provider selected by the user. We do not sell personal data or send advertisers balances, transactions, accounts, budgets, categories, files or text.

• For processing outside the EEA, an adequacy decision, Standard Contractual Clauses or another valid safeguard will be used and disclosed.
• Authorised members of a shared workspace can see its information according to their role.

Account data is kept while the relationship with the Service continues or until erasure is requested. Cloud financial data from an expired Premium subscription is frozen for 30 days and deleted from the server when that period ends. Preparing a requested export may defer that deletion until the file is ready and its download window has ended.

When an account is fully deleted, pending exports are cancelled and their ZIP files are also removed from storage. Only the first name, surname, email address, date of birth, and account creation and deletion dates are blocked with restricted access and no operational use for six years, to preserve required contractual and accounting evidence. Passwords, tokens, preferences, movements, attachments and other financial data are not kept in that record. When the period expires, the system automatically erases the record and its associated audit evidence.

Local and encrypted offsite backups rotate with a maximum age of seven days; no indefinite copies are kept. After erasure, older data may remain only until the relevant backup expires within that limit. This lifecycle does not erase local data on devices.

• Contact form and anti-abuse technical log: no more than 180 days. Support correspondence may be kept until resolution and for the applicable claims period.
• Acceptance evidence: while the account is active and, after deletion, for six years with restricted access.

You may request access, rectification, erasure, objection, restriction and portability, withdraw consent without affecting earlier processing, and request human involvement where applicable. Email soporte@finantzak.eus. We may request minimum information to verify identity. You may also complain to the Spanish Data Protection Agency (aepd.es).

Required fields are needed to create an account or handle a request. Data comes from the user, their device, Google when used for sign-in, and Google Play for subscription status. Finantzak is restricted to people aged 18 or over.

Toby is an artificial-intelligence feature. It can be inaccurate and is not financial, legal, tax or investment advice. Before optional context is sent to an external provider, the provider, data, purpose and relevant terms are disclosed. We do not make solely automated decisions that produce legal or similarly significant effects.

We use technical storage to provide the service and, only if you accept, local storage for our own audience and usage measurement. We use no external analytics providers or advertising cookies on the website. Android measurement is separate from Google advertising consent.

Accepting and rejecting are equally easy and do not limit Finantzak. On the website use Cookie and measurement preferences at the foot of pages; on Android use Settings > Measurement preferences. Withdrawal stops new transmissions and removes the local identifier; previously received data expires within the stated period. Clearing storage also resets the choice. We respect DNT and GPC on the website.

We reserve the right to modify this Privacy Policy to adapt it to new legislation or changes in the functionalities of the application. Any substantial changes will be notified to users through the application itself or through the registered email.

To detect and resolve failures, the app may automatically send technical reports to Finantzak servers. These include app and system versions, device model, connection state, the affected screen and operation, a limited sequence of technical actions, error and HTTP response codes, filtered technical messages and diagnostic and request identifiers. Where a session exists, a report may be associated with the account. These data are not anonymous.

Request bodies, financial contents, passwords and credentials are not added to these reports. Messages are filtered to reduce the presence of sensitive information. Details are restricted to authorized administration and used for support, security and service continuity, based on the legitimate interest described in this policy; not for advertising or training AI models.

Diagnostic reports and synchronization observations have an operational retention window of 90 days, after which they are deleted through periodic maintenance. Encrypted backups follow the rotation period stated in this policy. You may exercise your data protection rights, including objection, through the contact provided.

The legal basis is your optional consent. Before acceptance we do not create a measurement identifier or send events. The choice and a random identifier, only on acceptance, last at most 180 days: finantzak.usage-consent.v1 in browser local storage and product_usage in Android preferences. Rejection retains no identifier. Previous guide consent does not authorize this expanded purpose.

We count page views, opens of the private web area or Android app, and completed manual saves of accounts, movements and budgets. Only consent version, acceptance, random identifier, platform and event type are sent. No amounts, descriptions, financial content, emails, account identifiers, paths, URL parameters or credentials are sent. Opens are separated by 30 minutes. No offline backlog is stored.

The server transforms the identifier using a secret key and stores pseudonymized daily activity, counters and the first observed date for at most 90 days on our own infrastructure with restricted administrative access. Reports calculate active devices and return after 1, 7 and 30 days. Accounts, devices and the two domains are not linked; a device is not a person. Data is not anonymous while it distinguishes an installation. Reports cover consent and received deliveries, not all users.

Guide counters continue to measure views and clicks to Finantzak and Google Play by UTC day, guide, language, domain and source category, without identifiers in those counters. Clicks do not establish installations. The server technically receives an IP address, but it is not included in statistics: a separate IP-derived key limits abuse for one hour, alongside the security logs described in this policy. Measurement is not sent to analytics providers. You can exercise your rights through the contact in this policy.

Accepting and rejecting are equally easy and do not limit Finantzak. On the website use Cookie and measurement preferences at the foot of pages; on Android use Settings > Measurement preferences. Withdrawal stops new transmissions and removes the local identifier; previously received data expires within the stated period. Clearing storage also resets the choice. We respect DNT and GPC on the website.

The extension lets you record expenses and consult personal budgets from the browser. The controller, rights contact channels and general safeguards are those stated in this policy. Processing necessary for these features serves the requested service; session and abuse prevention controls protect it.

The extension receives your account identifier and name, eligible accounts and categories, and budget summaries. Expense data, including amount, description, account, category and date, is sent to Finantzak when you confirm saving. Cloud retention and account deletion follow the general sections of this policy.

When you request Use current page, visible snippets and metadata are processed locally to suggest a description and amount. Full HTML, form values, addresses and card details are not sent, and pages are not sent to AI services. The active tab URL is read transiently to identify the site, manage permission and detect navigation; it is not stored or transmitted. No browsing history is created and other tabs are not captured. Permission is requested for the site you choose and can be withdrawn in Chrome extension settings. You can review, change or discard the suggestion before saving; the extension does not buy or pay.

Preferences, the device identifier, drafts and the extension’s restricted credentials are kept in Chrome local storage, restricted to trusted contexts. Passwords are not received and web session cookies or credentials are not copied. The independent session lasts at most 15 days from authorization; renewal does not extend this deadline. Revoke it in Devices or sign out of the extension. Expiration invalidates access even while Chrome is closed.

Drafts expire after seven days and are removed when expiration is checked on opening the panel, when discarded or when the expense is saved. Signing out preserves drafts; uninstalling removes extension storage. Uninstalling does not remove expenses already saved in the cloud.

We do not sell this data or use it for advertising or creditworthiness decisions. Use is limited to providing and protecting the stated features. Use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.