Privacy Policy

Last Updated: Feb 2, 2026

1. Introduction

Welcome to FinAssist (EDIT LATER) ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and supporting website (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Scope of Service

Mobile App: Available on iOS and Android. Required for account creation, usage, and subscription management.
Website: Provides marketing, product, and legal information. It is not a browser-based account dashboard and does not provide account creation, transaction entry, or payment flows.

3. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the Personal Data concerned and the specific context in which we collect it:

Contractual Necessity: We process your Financial Data and Content (receipts) to provide the core services of the App (e.g., expense tracking and OCR) as required by the Terms of Service.
Legitimate Interests: We process Device Information and Log Data to improve security, support the website experience, and prevent fraud.
Consent: We rely on your explicit consent for accessing your Camera and sending Push Notifications. You may withdraw this consent at any time via device settings.

4. Information We Collect

A. Personal Information

We may collect personal information that you voluntarily provide to us, specifically:

Identity Data: Name, email address, and profile picture (via Google Sign-In).
Financial Data: Expense records, budget details, and transaction categories entered by you.
Content: Information stored in receipts or images you upload for Optical Character Recognition (OCR).

B. Automatically Collected Information

Device Information: We may collect device details such as mobile device ID, model, operating system version, and IP address.
Log Data: Server logs that may include access dates and times and app features viewed.
Cookies (Website Only): The public website may use essential browser storage or cookies required for basic site delivery. We do not describe the website as a logged-in web app.

C. Permissions

We may request access to certain features from your mobile device, including:

Camera/Photos: To upload receipts for expense tracking and OCR processing.
Storage: To save reports (CSV) or access local files.
Push Notifications: To send you reminders, budget alerts, and updates.

5. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the FinAssist Service.
Process Receipts: We use Third-Party AI services to analyze your uploaded receipt images and extract expense data.
AI Features: We process your input prompts and data through Google Cloud's Generative AI to provide the AI Chatbot features.
Send you administrative information, such as updates, security alerts, and support messages.

Data Minimization: We only process the data necessary for the functionality of the App.

6. Third-Party Service Providers (GDPR Specificity)

We do not sell, trade, or rent your personal data. We share data only with the following specific processors who provide the infrastructure necessary to operate the App:

Supabase (Database): Stores encrypted passwords and user data. Supabase Privacy Policy
Google Cloud / Vertex AI (AI & OCR): Processes text and images for the chatbot and receipt scanning features. Google does not use your data to train their models in this commercial implementation. Google Cloud Data Privacy
Google Sign-In: Authenticates your identity.

7. Data Retention and Deletion

Retention: We retain data only as long as necessary to provide the Service.
Account Deletion: You may delete your account at any time via the App settings.
Data Removal: Upon account deletion, all your data will be permanently deleted from our databases within 30 days.
Data Breach Notification: In the event of a security breach that compromises your personal data, we will notify you and relevant authorities within 72 hours, as required by applicable law (including GDPR).

8. International Data Transfers

Your information may be processed and stored on servers located in jurisdictions other than your own.

Primary Business Location: The Service is operated by FinAssist (EDIT LATER), based in Jordan.
Safeguards: Where we transfer your personal information to countries deemed to have inadequate data protection by the European Commission, we rely on Standard Contractual Clauses (SCCs) or equivalent legal safeguards to ensure your data remains protected.
Consent: By using the Service, you consent to the transfer of information to countries outside of your country of residence, including the US, EU, or Singapore.

9. Your Privacy Rights

Access & Portability: You can download your data in CSV format directly from the App.
Correction: You can edit your profile and expense data within the App.
Deletion: You can request full data deletion via the App or by contacting support.
GDPR Rights: If you are in the EU, you have the right to lodge a complaint with a supervisory authority.

10. Children's Privacy

No Intentional Collection: The Service is not intended for children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children.
COPPA Compliance: If we become aware that we have collected personal information from a child in violation of the Children's Online Privacy Protection Act (COPPA) or other applicable laws, we will take steps to delete that information as soon as possible.
Parental Contact: If you become aware that your child has provided us with personal information, please contact us immediately.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

FinAssist Support
Email: contact@finassist.net