Privacy policy

What we collect

Account details: your name, email address and, if you add it, your mobile number.

The financial records you enter: accounts, transactions, budgets, goals, wishlist items and reflections. We do not ask for bank logins and we do not connect to your bank.

Billing records: plan, amount, date and the reference PayHere returns. Card details are entered on PayHere’s secure page and never reach our servers; we only see a masked card number.

Technical data needed to keep you signed in safely: device type, IP address and session times.

How we use it

To run the service: show your ledger, calculate budgets and reports, and generate advice from your own numbers.

To contact you about your account: email confirmation, password resets, payment receipts, security codes by SMS, and a monthly summary you can turn off.

We do not sell your data. We do not show ads. We do not use your financial records to train third-party AI models.

Who processes data for us

Hosting providers that store the database, PayHere (payments), our email provider and Notify.lk (SMS). Each receives only what it needs for its task.

How we protect it

Passwords are stored as one-way hashes. All traffic uses HTTPS. Access to workspaces is limited to the people you invite, with roles. You can sign out every device from Settings.

Your rights

You can download all your data as a file from Settings at any time.

You can correct your details in Settings, and permanently delete your account and every workspace you own. Deletion cannot be undone.

For any request or question, write to [email protected]. We reply within 14 days.

How long we keep data

We keep your data while your account is open. When you delete your account, your records are removed from our live database immediately and from backups within 30 days. Payment records may be kept longer where the law requires it.

Changes

If we change this policy in a way that matters, we will email you before the change takes effect.