Privacy Policy

When you create an account we store your name, email address, and hashed password (bcrypt). If you sign in with Google we store your Google account ID and email.

When you add transactions we store the description, amount, category, date/time, and type (income or expense) that you provide.

We store your timezone (browser-detected) so amounts are correctly attributed to the right day in your local time.

Your data is used solely to provide the Finan App service — displaying your dashboard, calculating analytics, generating insights, and fulfilling CSV exports you request.

We do not use your financial data for advertising, profiling, or any purpose other than running the app.

We do not sell, rent, or share your personal data with third parties.

We use MongoDB Atlas to store your data. Atlas is hosted in the cloud; its data handling is governed by MongoDB's privacy policy.

If you sign in with Google, the initial authentication uses Google's identity service; after that, all session tokens are managed by Finan App independently.

Your data is retained as long as your account exists. You can permanently delete your account and all associated data at any time from the Profile page. Deletion is immediate and irreversible.

Passwords are hashed with bcrypt (never stored in plaintext). API access requires a signed session token delivered in a secure, HttpOnly cookie. Sessions can be invalidated remotely via the “Log out all devices” feature.

While we take reasonable security precautions, no system is 100% secure. Do not store information here that you would not want exposed in a worst-case breach.

Finan App stores your session in an HttpOnly cookie set by our backend, so client-side scripts cannot read the session token. We use local storage only for non-sensitive preferences such as theme, currency, number format, and display name. No tracking cookies are set.

You have the right to access, export, and delete your data at any time. Use the export and delete-account features in the Profile page. For any other requests, contact us.

For privacy questions, contact the developer at the email listed on profile.lori.my.id.