Privacy policy

Who we are

What we collect

Account data: your name, your email address and a securely hashed password, or your Google account identifier if you sign in with Google.

Profile data you choose to add: date of birth, phone number, address and a profile picture.

The records you enter: transactions, categories, tags, budgets, cards (only the brand and the last four digits, never the full card number), recurring entries, savings goals, receivables and your onboarding answers.

Settings such as language, theme, currency and date format.

Sign-in sessions: for each device, the IP address, browser and operating system, so you can see where you are signed in and sign out other devices.

If you connect Google Drive: the details of that connection and of your documents, described under "Google Drive documents".

If you accept analytics cookies: which pages you open (as the page type, without the IDs in the address) and which features you use, such as adding a transaction, creating a budget, using search or a filter, exporting your data or ending the product tour. Each event carries only fixed labels, such as whether an entry came from a template, never what you typed. From your IP address, Google Analytics works out your approximate location (country, region and city) and then discards the address. It also records your browser, operating system, device type and model, screen size and language. On our website it records, besides the pages visited, clicks on the sign-up and sign-in buttons, the billing period chosen in the pricing section and language changes.

If you write to us through the contact form on our website: your name, your email address and your message.

If you buy a paid plan or a licence: which plan you have, from when and until when it applies, how you got it, the history of changes, withdrawals and refunds, and the identifiers of your customer account, subscription and payments at Stripe. We never see or store your card details.

Why we process it

To provide the service you signed up for: storing your records and showing them back to you (performance of a contract, Article 6(1)(b) GDPR).

To keep accounts secure: sign-in sessions, verification codes and protection against abuse (legitimate interest, Article 6(1)(f) GDPR).

To send the emails the service needs, such as verification and sign-in codes and password resets (performance of a contract).

To understand how the app is used, through Google Analytics, only if you agree to it (consent, Article 6(1)(a) GDPR). Analytics never receives your name, email, user ID, amounts, or the names or text of your categories, tags, notes or searches. You can withdraw consent at any time.

To save the documents you attach to transactions in your Google Drive and show them back to you, if you connect it (performance of a contract, Article 6(1)(b) GDPR).

To answer you when you write to us through the contact form (legitimate interest, Article 6(1)(f) GDPR).

To charge for paid plans and licences, keep a record of purchases, withdrawals and refunds, and send you emails about your subscription, such as the purchase confirmation with your contract or a reminder before a renewal (performance of a contract). We also keep the record of withdrawals and refunds because consumer protection law requires it (legal obligation, Article 6(1)(c) GDPR).

To send you occasional promo codes and offers for our plans (legitimate interest, Article 6(1)(f) GDPR). You can turn these emails off in your notification settings or with the unsubscribe link in each of them.

Google Drive documents

Connecting Google Drive is optional. If you connect it, the documents you attach to transactions, such as receipts and invoices, are saved in your own Google Drive, in a folder the app creates. They are stored in your Google account under Google's own terms, not on our servers.

The app asks only for access to the files it creates or that you open with it. It cannot see or change anything else in your Drive.

What we keep: the Google account identifier and email address of the connected Drive, an encrypted access token, the IDs of the folders the app created, and for each document its Drive ID, name, type and size.

When you upload a document, it passes through our server only in memory on its way to your Drive. Photos are turned upright, scaled down and saved as JPEGs, which removes their location and camera data. When you open a document in the app, our server fetches it from your Drive to show it to you and does not keep it. To show Word, Excel and CSV files as PDFs, the app makes a temporary converted copy in your Drive and deletes it straight away.

The app removes a file from your Drive only when you ask it to, and then moves it to your Drive's trash. You can disconnect Google Drive in settings at any time: we revoke the app's access with Google and delete the token and folder IDs. Your files stay in your Drive, also when you delete your account.

Data from Google APIs is used only to provide these features. It is never sold, never used for advertising and never used to train AI models, and no one reads it except with your permission, for security reasons or where the law requires it. fundlo.dev's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes it for us

We use the providers below to run the service. Each processes data only on our instructions, under a data processing agreement.

The exception is Stripe, which charges for paid plans and licences. As the seller under its Managed Payments service, Stripe processes payment data as an independent controller, under its own privacy policy (stripe.com/privacy). We send it your email address, your name and the identifier of your account with us. On its payment page, Stripe itself collects your billing address, your card or other payment details, and your IP address and device details to prevent fraud.

The exchange-rate services the app uses (Frankfurter and ExchangeRate-API) receive only a currency code, never any data about you.

Transfers outside the EU

Some providers belong to groups based in the United States, so data may be transferred there. Such transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

We keep your data for as long as your account exists. When you delete your account, your data is deleted straight away, apart from anything we must keep by law.

Sign-in sessions expire on their own, and unused verification codes expire within minutes. Backups are overwritten on a rolling schedule, so deleted data also disappears from them after a short time.

Analytics data is kept by Google for 14 months and then deleted automatically.

A message sent through the contact form reaches us by email. A copy stays in our outgoing mail queue for up to 30 days and is then deleted automatically. We keep the email itself only for as long as we need it to answer you.

When you delete your account, your paid plan and licence end immediately. We keep only the identifier of your customer account at Stripe and a record of each withdrawal (name, email, date and amount refunded), because consumer protection and accounting rules require us to be able to show them. Stripe keeps its own payment data under its own rules.

Your rights

You have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to its processing, and withdraw consent at any time without affecting processing that happened before.

Most of this you can do yourself in settings: edit your profile, delete your account and export your data when you delete it. For anything else, contact us at the address under "Who we are".

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, azop.hr) or with the supervisory authority in your own country.

Cookies and local storage

The app sets one essential cookie that keeps you signed in, and a short-lived one while you sign in with Google. It also stores display preferences, such as theme, language and whether the sidebar is open, in your browser. These are needed for the app to work and do not require consent.

If you accept analytics, Google Analytics sets two cookies, _ga and one whose name starts with _ga_, which hold a random identifier so that visits from the same browser can be counted together. They last up to two years. If you decline or later withdraw consent, no analytics script runs and these cookies are deleted. You can change your choice at any time from "Cookie settings" in the footer.

Payment takes place on Stripe's page, not on ours, so our pages do not set any Stripe cookies. Stripe describes the cookies on its payment page in its own cookie policy.

Security

Connections are encrypted, passwords are stored only as secure hashes, and each account can see only its own data. No system is completely secure, so if we learn of a breach that puts your data at risk, we will tell you and the supervisory authority as the law requires.

Changes to this policy

When this policy changes, the date at the top of this page changes too. For significant changes we will also let you know in the app or by email.