FinDub Privacy Policy

Effective date: October 28, 2026

FinDub is a personal expense-tracking app. It lets you record and organize information that you enter, such as expenses, income, budgets, categories and planned spending. It is not a bank, lender, payment processor, investment adviser, credit-reporting service, or provider of financial products. FinDub does not connect to your bank account or payment cards and does not make lending, credit, investment, or insurance decisions.

Who is responsible and how to contact us

The publisher identified on FinDub's Google Play listing is responsible for the processing described in this policy. For privacy questions or requests, sign in and use Settings > Feedback. If you cannot sign in and want to delete your account, use the public account-deletion page. Please do not include passwords, card numbers, bank-account numbers, government IDs, or other unnecessary sensitive information in feedback.

Information FinDub processes

Information you provide

• Account information: first and last name, email address, account identifier, password credential (stored by the authentication system as a protected hash), and, if you choose Google Sign-In, the Google account identity information needed to sign you in.
• Financial-tracking information: expense, income, budget and planned-spending amounts; dates; descriptions; categories; category colors and icons; and the statistics derived from those entries. This is financial information because it can reveal your spending, income, or budget habits. We do not request or collect bank-account numbers, payment-card numbers, or credit scores.
• Preferences and app settings: language, currency and date-format preferences, display/privacy preferences, reminder setting, and local ad-display frequency state.
• Feedback: the feedback type and message you choose to send, linked to your account so that we can review and respond to it.

Information created when you use the app

• Authentication and security information: protected session/refresh-token data, account verification and password-reset or account-deletion tokens, and last-activity information used to secure accounts and operate the service.
• Notification information: if you grant notification permission, an Expo push token and device platform. The token identifies a device for delivery; it is not a financial record. Weekly reminders are also scheduled locally on your device.
• Purchase entitlement information: for an ad-free purchase or subscription, product identifier, Google Play order identifier, expiry where applicable, and a one-way hash of the Google Play purchase token. Google Play processes payment details; FinDub does not receive your full payment-card information.

How we use information and our legal grounds

We use account, financial-tracking and preference information to provide the app, synchronize your records between the app and our service, calculate the views and reports you request, and maintain your account. Where applicable, this is necessary to perform our agreement with you. We use authentication, security, activity and entitlement information to protect the service, prevent abuse, troubleshoot, enforce purchases, and comply with legal obligations; this is based on our legitimate interests and, where relevant, legal obligations. We use notification information only after you allow notifications, and you can withdraw that permission at any time in device settings or disable reminders in the app. We use feedback to provide support and improve FinDub.

We do not sell, rent, or use the financial-tracking information you enter for advertising, creditworthiness, lending, insurance, employment, or investment decisions. We do not publicly disclose it.

Local storage, synchronization, and exports

FinDub is designed to work offline. It stores your financial records and certain preferences in a local database on your device, and stores sign-in tokens in the device's secure storage where available. When you sign in and have connectivity, records are synchronized with FinDub's server so they are available to your account. Removing an individual entry in the app removes it from the local database and synchronizes that deletion when the device next connects.

If you create a report, its contents are generated from your local records. If you save, print, or share that report, the receiving app, device storage, printer, or recipient handles the copy under its own practices. You control whether to share it.

Advertising and third-party services

The free Android experience may show banner and interstitial ads through Google Mobile Ads (AdMob). FinDub requests non-personalized ads. Nevertheless, the Google Mobile Ads SDK may automatically collect and share device and account identifiers (including an advertising ID where available), IP address (which may indicate approximate location), app interactions, and diagnostic/performance information for advertising, analytics, and fraud prevention. Google handles that information under its own terms and privacy policies. An active ad-free entitlement prevents FinDub from requesting ads.

We also use these categories of service providers to operate the app: Google Sign-In when you select it; Google Play to process and verify in-app purchases; Expo's push-notification service and the platform delivery services (such as Firebase Cloud Messaging or Apple Push Notification service) when notifications are enabled; hosting/database providers; and a transactional-email provider for account verification, password reset, and account-deletion emails. These providers receive only the information needed for their service. They may process information in countries other than yours under their own contractual and legal safeguards.

We do not share the financial entries you create with advertising providers. We may disclose information if required by law or when necessary to protect the rights, safety, and security of FinDub, its users, or the public.

Retention and deletion

We keep cloud account data while your account remains active. You can permanently delete your account and associated cloud data in Settings > Delete account or through our account-deletion page. The public process sends a confirmation link to the verified account email before deletion. Account deletion removes the account and its cloud financial entries, categories, budgets, planned spending, feedback, authentication tokens, notification tokens, and purchase-entitlement records from the active service. It does not cancel a Google Play subscription; manage any subscription in Google Play.

Copies already stored locally remain on the device until you clear FinDub's app storage or uninstall the app. A report you saved or shared is not recalled. Limited information may persist for the period required to meet legal obligations, resolve disputes, prevent fraud or security abuse, or in secure backup systems until they are overwritten under the backup cycle. Third parties, including Google Play and Google Mobile Ads, retain their own data under their policies.

Your choices and privacy rights

You can review, change, or delete your financial entries in the app; change notification permission in device settings; disable reminders in FinDub; reset or delete the Android advertising ID in Android settings where supported; and delete your account as described above. Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or to withdraw consent. Use the contact method above and we may need to verify your identity before acting on a request. You may also have the right to complain to your local data-protection authority.

Children

FinDub is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, use the contact method above so we can investigate and take appropriate action.

Security

We use reasonable technical and organizational measures designed to protect data, including authenticated access controls, protected authentication credentials, access-token handling, rate limiting for sensitive account actions, and HTTPS for the public account-deletion flow. No method of transmission or storage is completely secure; keep your device and account credentials protected.

Changes to this policy

We may update this policy when our data practices or applicable requirements change. The current version and its effective date will remain available at this address. For material changes, we will provide notice where required by law.