Privacy Policy

Finsquad is an offline-first personal finance app. Your transactions, budgets and goals are stored on your device by default, and you can use the app without creating an account. Data leaves your device only when you sign in, use Shared Splits with other people, turn on Cloud Sync, make a purchase, enable notifications or contact us.

• We do not sell or rent your personal data. • We do not show ads, and we do not use third-party advertising, analytics or crash-reporting SDKs. • We do not track you across apps or websites owned by other companies. • We do not connect to your bank accounts, and Finsquad never holds or moves money.

Account information (only if you create an account)

Your name, email address and/or phone number, and a password if you choose one (stored only in hashed form by our authentication provider). If you use Google Sign-In, we receive your name, email address and profile photo from Google. You can also add a profile photo.

Financial data you enter

Transactions, categories, budgets, savings goals, debts, notes and receipt photos. This is stored on your device. It is copied to our servers only if you use Cloud Sync for that type of data (you choose which types in Settings → Cloud Sync).

Shared Splits

When you split expenses with others, the groups, members, expenses, settlements, activity history and any receipt photos attached to shared expenses are stored on our servers so every group member can see them. Group members can see your name, profile photo and the shared expense details.

Other people's contact details

To split with a friend you may enter their name, email address and/or phone number. We use these only to show them in your groups, to match them to their Finsquad account, and—when you ask us to—to email them an invitation. Please add only people who would expect you to share their details with us.

Photos, camera and files

The app accesses your camera, photo library or files only when you choose to attach a receipt, set a picture, import a CSV file or import a bank/UPI PDF statement. Imported statements are read on your device and are not uploaded to us.

Device and app information

A random installation identifier, device name and platform (iOS/Android) to manage the devices linked to your Pro licence or Cloud Sync; the app version; and, if you allow notifications, a push notification token. Our hosting provider also processes IP addresses and request logs for security and to operate the service.

Purchases

Purchases are made through the Apple App Store or Google Play and managed by RevenueCat. We receive the product you bought, purchase and renewal status and transaction identifiers. We never receive your card or bank details.

Product interactions

When you are signed in, we record a small number of events about upgrade screens and plan-limit prompts (for example, that a plan was viewed, a purchase was started, a restore was tapped, a free-plan limit was reached or you asked to be notified about a new plan) linked to your account, to fix problems in the purchase flow. We do not record your transactions or financial details for this purpose.

Support and waitlist

If you contact support, we receive your message, email address, any screenshots you attach and the app version and platform included in the support email. If you join our website waitlist, we collect your email address only to tell you when Finsquad is available.

Biometric data

Face ID, Touch ID and fingerprint unlock are handled entirely by your device's operating system. Finsquad never receives your biometric data.

• To provide the app: expense tracking, budgets, goals, analytics and bill splitting. • To create and secure your account, including sending one-time sign-in and verification codes. • To sync shared groups between members and, if you turn it on, your personal data between your devices. • To send invitations you ask us to send, and notifications you have allowed (such as payment reminders and group activity). • To process purchases, restore them and manage the devices linked to them. • To respond to support requests, prevent abuse and keep the service secure. • To comply with legal obligations.

We do not use your financial data for advertising or profiling, and we do not sell it. Where the GDPR or similar laws apply, we rely on performance of our contract with you (providing the app), your consent (for example, notifications and optional features, which you can withdraw at any time), our legitimate interests (security and fixing problems) and legal obligations.

On your device

App data is kept in the app's private storage, which other apps cannot read. It is protected by your operating system's app sandbox and your device's built-in storage encryption (iOS Data Protection or Android file-based encryption), which apply while your device is locked. Finsquad does not add a separate encryption layer to the local database. You can also turn on biometric lock in Settings.

On our servers

Data that is synced or shared is stored with Supabase, our database and authentication provider, on Amazon Web Services infrastructure. It is encrypted in transit (HTTPS/TLS) and encrypted at rest, and access is restricted by account-level security rules.

No method of storage or transmission is completely secure, but we work to protect your data and will notify you and the relevant authorities of a data breach where the law requires it.

We do not sell, rent or trade your personal data. We share it only as follows:

People you split with

Members of your groups see your name, profile photo and the shared expenses, settlements and receipts in those groups.

Service providers (processing data on our behalf)

• Supabase (on AWS) — database, authentication, file storage and server functions. • RevenueCat — managing in-app purchases and subscriptions. • Apple and Google — app distribution, payments, Sign in with Google, and push notification delivery (Apple Push Notification service, Firebase Cloud Messaging). • Expo — over-the-air app updates and push notification delivery. • Resend — sending invitation emails you request. • An SMS provider used by our authentication service — sending one-time codes if you sign in with a phone number.

Legal and safety

When required by law, court order or a valid government request, or to protect the rights, property or safety of our users or others.

Business transfers

If Finsquad is involved in a merger, acquisition or sale of assets, your data may be transferred subject to this policy. We will notify you before it becomes subject to a different policy.

We keep account and synced data for as long as your account exists. When you delete your account, we delete it as described in the next section. Data stored only on your device stays there until you delete it in the app or uninstall the app (on iOS, the random installation identifier may remain in the device keychain after uninstalling). Support emails are kept for up to 24 months after your request is resolved. Waitlist emails are deleted when you unsubscribe or ask us to remove them.

Depending on where you live (for example under the GDPR, UK GDPR, California law or India's Digital Personal Data Protection Act), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority. We do not discriminate against you for using these rights.

• Access and export: Settings → Data → Export Data saves your data as a CSV file. • Correct: edit your profile and any entry in the app. • Delete: see "Deleting Your Account and Data" below. • Use without an account: you can use Finsquad's personal features without signing in; nothing is uploaded. • Notifications: turn them off in Settings or in your device settings. • Camera, photos and files: manage access in your device settings at any time.

For any other request, email [email protected]. We will respond within 30 days and may need to verify your identity first.

How to request deletion

You can delete your Finsquad account and the data linked to it at any time: • In the app: Settings → Data → Delete Account. • On the web, without the app: https://finsquad.app/delete-account • By email: write to [email protected] from the email address on your account with the subject "Delete my account". To protect you, we first confirm the request comes from the account owner by sending a one-time code to the email address or phone number on the account.

What is deleted

• Your account and login: email address, phone number, name, profile photo and sign-in methods. • Your profile, friends list (including contact details you added for friends), pending invites and invite history. • Groups that no other Finsquad user belongs to, with all of their expenses, settlements, history and receipt photos. • Push notification tokens, synced-device records, licence and device activation records, backups and in-app purchase-flow events linked to you. • Your customer record at our purchase processor (RevenueCat). • If you choose, the data stored in the app on the device you are using.

What is kept, and why

• Shared expenses: expenses and settlements in groups that include other Finsquad users are kept so their balances stay correct, but your name, email, phone number and other identifiers are removed and replaced with "Deleted user". • Purchase records: Apple, Google and payment processors keep their own transaction records under their policies and applicable tax and accounting laws. • Backups: deleted data may remain in our hosting provider's encrypted backups until they are overwritten, within 30 days. • Legal obligations: we may keep information where the law requires it (for example, to respond to a valid legal request).

Timing

Deletion requested in the app or on the web happens immediately once you confirm. Requests sent by email are completed within 30 days of verifying your identity; we will confirm by email when it is done. Deletion cannot be undone.

Subscriptions

Deleting your account does not cancel an App Store or Google Play subscription. Cancel it first in your Apple ID settings (Settings → [your name] → Subscriptions) or in Google Play (Profile → Payments & subscriptions → Subscriptions) to avoid further charges.

Deleting data without deleting your account

Settings → Data → Delete All Data erases transactions, budgets, goals and splits from your device, and can optionally delete the copy saved to your account, while keeping your login. Data that exists only on your device is also removed when you uninstall the app.

Finsquad is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.

Our servers and service providers may be located outside your country, including in Japan, the United States and other countries where they operate. Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

We may update this policy as Finsquad changes. We will update the "Last updated" date above and, for significant changes, tell you in the app or by email before they take effect.

Questions, requests or complaints about privacy (including grievances under India's DPDP Act) can be sent to:

Email: [email protected]