Privacy Notice

1. Who operates the Finance Tracker

The Finance Tracker is operated by Paul Akingbola, Newfoundland and Labrador, Canada. Paul Akingbola is responsible for your personal information and acts as the privacy contact. Email: realestate@paulakingbola.com.

2. Account information we collect

• Email address — to create your account, sign you in, verify your email, send password-reset and security messages, and send planner invitations you request.
• Password — stored only as a one-way hash by our authentication provider. We can never see it.
• Optional display name, currency and theme — to personalise your dashboard.
• Two-factor authentication settings, if you turn them on — to protect sign-in.
• The date and version of the policies you accepted — to prove consent.

3. Financial information you enter

You choose what to enter. This can include income amounts, expense categories and line items, projected and actual monthly amounts, transactions and their descriptions, savings and investment set-asides, savings goals and contributions, grocery and restaurant visits (store or venue name, date, items, prices, meal type), notes you attach to entries, monthly reviews, and family or personal planner goals and tasks (including names and emails of people you assign or invite).

Why: solely to calculate your totals, margin, savings rate, charts, comparisons, reviews and reminders inside your own account. We do not analyse it for any other purpose.

Do not enter card numbers, bank account or routing numbers, online banking passwords, Social Insurance Numbers or government ID numbers. The Finance Tracker never needs them.

4. AI Coach and AI features

When you use the AI Coach, monthly review, AI planner suggestions or receipt scanning, we send the content needed for that request — your message, a summary of the relevant figures (for example category totals for the month) or the receipt image — to Google's Gemini models through the Lovable AI service. The answer comes back and, for the Coach and reviews, is saved in your account so you can see your history.

• We do not use your data to train or improve any AI model, and under our providers' terms API requests are not used for model training.
• AI requests are processed on servers that may be in the United States.
• AI responses are general information, not financial advice — see the AI & Financial Disclaimer.

5. Receipts and uploads

Receipt photos you upload are stored privately in your account's file storage, readable only by you, and sent to the AI service once to extract items and prices. A receipt is deleted when you delete its visit, and all receipts are deleted as soon as you request account deletion. Crop out card numbers and loyalty IDs before uploading.

6. Device, browser, location and usage data

• Security logs: when you sign up, sign in, reset your password or change security settings, our authentication provider records the time, IP address and browser/device description. Why: to detect fraud, brute-force attempts and account takeovers. These logs are kept for a short rolling period set by the provider and are not used for marketing.
• Approximate location: we do not use GPS. Our hosting provider may derive your approximate country or region from your IP address for traffic statistics and security.
• Analytics: today we only use aggregate visitor statistics from our hosting platform (page views, referrer, country, browser and device type). We do not currently use third-party product analytics, advertising pixels or session recording. If we add product analytics (such as which features are used), we will update this notice first, ask for your consent, and never send financial amounts, item names, notes or AI conversations to the analytics provider.
• Error reports: if the app crashes, technical details (page, error message, browser) are captured so we can fix bugs.

7. Cookies and local storage

We use only strictly necessary browser storage: a sign-in session token so you stay logged in, and your theme preference. No advertising or cross-site tracking cookies are used. Signing out removes the session token.

8. Who receives your information

We share personal information only with service providers that run the Finance Tracker on our behalf, under contracts that limit their use to providing the service:

• Lovable (Lovable Cloud) — application hosting, database, authentication, file storage and email delivery. Infrastructure is provided through sub-processors including Supabase and Cloudflare.
• Google (Gemini, via the Lovable AI service) — AI Coach, reviews, suggestions and receipt reading.
• People you choose — family planner members you invite can see the shared goals and tasks, not your finances.

We may also disclose information where required by law (for example a valid court order). We do not sell, rent or trade your personal information, and we do not use it for advertising or share it with advertisers.

9. Where your information is processed

Your information may be stored and processed outside Canada, including in the United States and, depending on provider infrastructure, other countries. While there it is subject to those countries' laws, and authorities there may be able to access it. We choose providers that use encryption in transit and at rest.

10. How long we keep it

• Account and financial records: for as long as your account is active.
• After you request account deletion: kept for a 30-day grace period so you can change your mind, then permanently deleted. Automatic daily backups roll over within about 14 days after that.
• Receipt images: until you delete the visit, or immediately when you request account deletion.
• AI Coach messages and monthly reviews: until you delete them or your account.
• Security logs: a short rolling period set by our infrastructure provider.
• Policy acceptance records: for the life of the account.

11. Deleting your account and data

Go to Finance Tracker → Settings → Privacy → Delete my account. We ask for your password, delete your receipts right away and schedule everything else for permanent deletion after 30 days. Signing in during that period lets you cancel. You can also email us to request deletion.

12. Your rights

• Access: download a copy of everything you entered from Settings → Privacy → Download my data, or ask us for it.
• Correction: edit any entry directly, or ask us to correct account information.
• Withdraw consent: stop using the service and delete your account at any time.
• Complain: contact us first; you can also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial commissioner.

We respond to requests within 30 days.

13. Security and breaches

Each user's data is isolated at the database level so other users cannot read it. We use encrypted connections, hashed passwords, leaked-password checks, email verification and optional two-factor authentication. If a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner as required by law.

14. Children

The Finance Tracker is for adults who have reached the age of majority in their province or territory. We do not knowingly collect information from minors.

15. Changes to this notice

If we make material changes — for example adding analytics or a new provider — we will update the date above and ask you to review and accept the new version the next time you sign in, before the change applies to you.

16. Contact

Paul Akingbola — realestate@paulakingbola.com