Privacy policy
In short
PrivyFinance stores your financial data encrypted on your device. It has no telemetry or analytics and does not upload your transactions to any server.
Financial data
Income, expenses, categories, budgets, debts, assets, goals, reports, backups and settings are stored on your device, encrypted with AES-256-GCM. We do not sell or share them.
What does leave your device
- Licence activation (once): your licence key, your email and a random installation id are sent to our licence server so it can issue you a signed token. The licence is verified offline afterwards.
- P2P sync (optional, off by default): if you enable it, connection metadata such as your IP address reaches a signalling server. The content travels encrypted between your devices.
- Cloud-folder sync (optional): you choose the folder and the provider; PrivyFinance writes encrypted files there.
Payments
Payments are processed by Lemon Squeezy, which acts as merchant of record (or the provider named on the purchase link). PrivyFinance never receives or stores card data.
Data controller
Inversiones F. Martínez Requena, S.L. (Sociedad Unipersonal), NIF B72377039, Av. Micaela Aramburu de Mora, 5, 11500 El Puerto de Santa María (Cádiz), inscrita en el Registro Mercantil de Cádiz, tomo 2317, folio 222, hoja CA-55183, inscripción 1ª. Contact: soporte@privyfinance.app.
Purpose and legal basis
- Activating and maintaining your licence (key, email, installation id): performance of the purchase contract, GDPR art. 6(1)(b).
- Preventing licence fraud and abuse (device limit, revocations): legitimate interest, art. 6(1)(f).
- Answering your support or beta request: steps at your request and, for the beta, your consent, art. 6(1)(b) and 6(1)(a).
- Tax and accounting duties arising from the sale: legal obligation, art. 6(1)(c).
Retention
We keep that data while it is needed for its purpose (while the licence exists or your enquiry is open) and, afterwards, blocked for the legal periods that apply. We do not keep your financial data: it lives only on your device.
Recipients and transfers
We share data only with the providers needed to deliver the service: Lemon Squeezy (payment, invoicing and taxes, acting under its own privacy policy and possibly processing data outside the EEA), Cloudflare (hosting of the website and the licence server) and the support mailbox provider. We do not pass data to third parties for advertising. These providers may process data outside the European Economic Area under the safeguards they offer (standard contractual clauses or the EU-US data privacy framework).
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to soporte@privyfinance.app. Because your financial data is not in our hands, we cannot access or recover it. If you believe we have not handled your data properly you can complain to the Spanish Data Protection Agency (aepd.es).
Support and beta
If you write to us to ask for beta access or support, we use your email and message only to reply and manage access.
Your responsibilities
Protect your device, your vault passphrase, your recovery code and your backups. Nobody can recover your data for you, not even us. Files you export unencrypted may contain sensitive information.
Contact
Write to soporte@privyfinance.app.