Privacy Policy

Who we are

FinLedger is operated by Dharma Pradhan, an individual developer based in India (“we”, “us”). For any privacy question or request, email dharmapra865@gmail.com.

Information we collect

Information you give us

• Account details: your name and email address, and a password (stored only as a secure hash), or — if you sign in with Google — the name, email address and Google account ID Google shares with us.
• Profile details you choose to add: phone number, a short bio and your currency preference.
• Financial records you enter: accounts and balances, transactions, categories, budgets, goals, recurring bills and investments.
• Shared groups: groups you create or join, their expenses, splits and settlements, and the names — and, if you add them, email addresses or phone numbers — of the people you add to a group.
• Messages to the FinLedger Telegram bot, if you link it, along with your Telegram chat ID, username and display name.
• Questions you ask the AI assistant.
• Developer settings you create: API keys, webhook URLs and advisor share links.

Information collected automatically

• Server logs: when your browser or app talks to our servers, we record technical details such as your IP address, the time, the page or API endpoint requested and the result. We use these to keep the service running and secure.
• Notification registrations: if you turn on notifications, your browser's push subscription or your phone's push token and platform.
• Activity history: a record of changes to your own records (for example, that a budget was edited), which you can see in the app.
• Cookies and local storage: one essential cookie keeps you signed in. Your browser also stores a few preferences (such as theme and display currency) locally. We don't use advertising or analytics cookies.

Contacts on your phone

If you choose Invite from contacts in the mobile app, your phone's contact picker opens and you select one person. Only that person's name is sent to us, to label the invitation; their phone number or email address is used on your phone to prepare the message. We never upload your address book, and the app asks for contact permission only when you use this feature (iPhone doesn't need it at all).

How we use your information

• To provide FinLedger: store your records, calculate balances, budgets, Rest Money and group splits.
• To answer questions you ask the AI assistant or the Telegram bot.
• To send the notifications and reminders you turn on.
• To let you share data you choose to share (group members, advisor share links, API access).
• To secure the service, prevent abuse and fix problems.
• To contact you about your account when necessary (for example, a password-reset code).

We don't sell your information, we don't show ads, and we don't use your financial records to build advertising profiles.

Who we share it with

We share information only as needed to run FinLedger:

• Other members of your groups see the group's expenses, balances and member names. People you send an advisor share link to see the summary that link covers, until it expires or you revoke it.
• AI providers (Groq, NVIDIA and Google Gemini): when you use the AI assistant or send the Telegram bot a question, your question and a summary of the relevant financial data are sent to one of these providers to generate the answer.
• Hosting and infrastructure: MongoDB Atlas (database), Oracle Cloud (API servers) and Vercel (website).
• Sign-in and messaging: Google (if you sign in with Google), Telegram (if you use the bot), and Expo, Firebase Cloud Messaging and Apple (to deliver mobile notifications). If we email you, an email delivery provider sends it.
• Legal reasons: if required by law, or to protect the rights and safety of our users or the service.

These providers may process data outside India. They act on our behalf and only use it to provide their service to us.

How long we keep it

We keep your account and records for as long as your account exists. When you delete your account, your data is deleted straight away (see below). Server logs are rotated and deleted after about 14 days.

Your choices and rights

• Access and export: download your transactions as CSV or a full backup from Settings → Data.
• Correct: edit your profile and records at any time.
• Delete: delete your account and data from Settings in the app or on the website — see how.
• Notifications: turn them off in Settings or in your browser or phone settings; mute any group.
• Telegram: unlink the bot from Settings → Security.

You can also email dharmapra865@gmail.com to exercise any right you have under applicable law, including India's Digital Personal Data Protection Act, 2023. We'll respond within a reasonable time.

Deleting your account

Deleting your account permanently removes your profile, financial records, budgets, goals, recurring rules, notification registrations, API keys, webhooks and share links. Groups that only you could see are deleted. In groups shared with other registered members, the expenses and settlements stay so their balances remain correct, but your name is replaced with “Deleted user” and your email and phone are removed.

Security

All traffic is encrypted with HTTPS. Passwords are stored as secure hashes, sign-in sessions use signed tokens, and webhooks are signed so you can verify them. No system is perfectly secure, so please use a strong password and keep your API keys private.

Children

FinLedger is meant for adults and isn't directed at children under 18. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top of this page, and for significant changes we'll let you know in the app.

Contact

Dharma Pradhan — dharmapra865@gmail.com