Privacy Policy

1. Overview and Scope

This Privacy Policy explains how FinWise (“we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our mobile application and our promotional website.

FinWise is developed and maintained by DeloLabs. If you have questions about our privacy practices or your data, you can reach our designated Data Protection & Support team at support@finwise.delolabs.app.

2. What Information We Collect

We collect only the minimum information necessary to provide, synchronize, and improve your personal finance tracking experience:

3. What We Never Collect or Process

• Your internet banking login credentials, usernames, or account passwords.
• Your debit or credit card 16-digit PANs, CVV/CVC security codes, or PIN numbers.
• Unified Payments Interface (UPI) PINs, MPINs, or one-time password (OTP) authorization codes.
• Direct authority or programmatic credentials to move, withdraw, or transfer funds between your accounts.

4. Device Permissions Justification

In accordance with Google Play Developer Policy on permissions and sensitive data access, our mobile application only requests permissions when you actively engage corresponding features:

• Camera (android.permission.CAMERA): Requested only when you use the in-app receipt scanner to capture a paper bill or receipt.
• Photos & Storage (android.permission.READ_EXTERNAL_STORAGE / Media Images): Requested only when you choose to import an existing receipt image or document from your device gallery.
• Microphone & Audio (android.permission.RECORD_AUDIO): Requested only when you press and hold the voice logging button. Audio is recorded only while active to parse transaction details and is never listened to continuously in the background.
• Notifications (android.permission.POST_NOTIFICATIONS): Used exclusively to alert you when you approach your self-defined category budget limits or scheduled recurring expense deadlines. You can disable notifications anytime in your system settings.

5. How We Use Your Information

We use collected information solely for operational and service-delivery purposes:

• To calculate, categorize, and visually chart your day-to-day spending patterns and monthly budgets.
• To synchronize your personal ledger seamlessly across multiple devices when authenticated.
• To parse text from uploaded receipt photos or voice notes into structured draft expenses for your review and approval before saving.
• To troubleshoot crashes, optimize rendering speed, and ensure high system reliability.
• To respond promptly to customer support requests and bug reports sent to support@finwise.delolabs.app.

No Third-Party Advertising or Selling: We do not sell, rent, monetize, or trade your personal, behavioral, or financial data to third-party data brokers or advertisers.

6. Data Security and Encryption

We implement rigorous technical and organizational safeguards to ensure your financial records remain private and secure:

• Encryption in Transit: All communications between the FinWise mobile application and backend cloud servers are protected using Transport Layer Security (TLS 1.2 / TLS 1.3) with strong cryptographic cipher suites.
• Encryption at Rest: Cloud databases, persistent storage, and backup snapshots utilize AES-256 bit encryption at rest.
• On-Device Local Storage: FinWise maintains an offline-first local database on your device with sandbox protections enforced by the mobile operating system.
• Strict Access Control: Infrastructure access is strictly restricted to authorized engineering personnel using multi-factor authentication and role-based access governance.

7. Third-Party Service Providers

We partner with vetted, reputable cloud infrastructure and developer platform providers to host and secure our services. Each provider is bound by strict confidentiality and data processing agreements:

• Google Sign-In & Firebase (Google LLC): Facilitates identity verification, push notification delivery (FCM), and automated crash reporting (Crashlytics).
• Cloud Database & Hosting Services: Provides encrypted relational cloud database storage and secure serverless computing.
• Google Play In-App Billing: Processes premium subscriptions and purchases directly through Google Play’s secure billing platform. We never receive or store your raw payment details.

8. Data Retention and Deletion Rights

You have complete ownership and control over your financial records and personal data:

• Self-Service In-App Deletion: You can permanently delete your account and all associated transaction records directly inside the app by navigating to Settings > Profile > Delete Account.
• Public Web Deletion Request: If you have uninstalled the application or cannot access your device, you can submit a deletion request via our public Account & Data Deletion Page or by emailing support@finwise.delolabs.app.
• Purge Schedule: Once a deletion request is confirmed, your account records, transactions, budgets, receipt images, and profile information are permanently purged from active databases immediately and wiped from backups within 30 days.

9. Children’s Privacy

FinWise is designed for individuals managing personal and household finances. Our application is not directed to individuals under the age of 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please notify us immediately at support@finwise.delolabs.app so we can delete it.

10. Changes to this Privacy Policy

We may update our Privacy Policy periodically to reflect new app features, technological advancements, or updated legal and Play Console requirements. When updates are published, the “Last updated” date at the top of this document will be updated. We encourage you to review this page periodically.

11. Contact & Data Controller Information

If you have questions, inquiries, or complaints regarding this Privacy Policy or how your personal information is managed, please contact our support team: