Privacy policy

Effective 28 August 2026

FinFam is a shared expense tracker for families, at finfam.ufapp.io. This policy sets out what it stores, who else is involved in running it, and how to have your data removed. It covers the website and the app; there is no separate mobile application.

What is collected

Your account

FinFam has no password of its own — you sign in with Google. When you do, Google passes FinFam your name, email address, and profile picture, and FinFam stores them so that other members of your projects can recognise you. FinFam never receives your Google password.

What you put into the app

• Projects you create or join, with their name, cycle, budget, and cover photo.
• Expenses: amount, category, note, who paid, how it was split, and the date.
• Deposits into a project's contribution pool, and settlements recorded between members.
• Receipt photographs, if you attach them.
• Email addresses you enter in order to invite somebody to a project.

If you invite someone by email, that address is stored so the invitation can be shown to them when they next sign in. Only you and the other admins of that project can see it.

What is not collected

FinFam does not run analytics, tracking pixels, or profiling of its own. It does not collect your location, your contacts, or your device identifiers, and it does not read anything from your Google account beyond the name, email address, and picture described above. It never sees your bank or card details.

How it is used

Your data is used to run the app and nothing else: to show your projects to the people you have shared them with, to compute balances, to deliver invitations, and to show reminders about bills that are due. FinFam does not sell your data, does not share it with advertisers, and does not use it to train anything.

Who else is involved

FinFam relies on a small number of service providers, each of which handles data under its own privacy policy:

• Supabase — hosts the database, the file storage for receipt and cover photos, and the sign-in system. Everything you enter into FinFam is stored there.
• Google — provides sign-in, and serves the advertisements shown on the free version through Google AdSense.
• RevenueCat and Stripe — handle FinFam Plus subscriptions if you buy one. Payment card details go to Stripe directly and are never seen or stored by FinFam.
• Hostinger — hosts this website.

Who can see your data

Access is enforced by the database itself rather than by the app, and it follows project membership. Members of a project can see that project's expenses, balances, and members. Nobody can see a project they have not been invited to and accepted, and an invitation on its own grants no access — declining or ignoring it means the project stays invisible to you. Leaving aside the service providers listed above, no one else has access.

Advertising

The free version of FinFam shows advertisements supplied by Google AdSense. Google and its partners may use cookies or similar identifiers to serve and measure those ads, including on the basis of your previous visits to this and other websites. FinFam does not pass Google your name, your email address, or any of your financial entries.

You can control how Google personalises advertising to you at myadcenter.google.com, and read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. Buying FinFam Plus removes the advertisements from your account entirely.

Cookies and local storage

FinFam sets no advertising or analytics cookies of its own. It keeps your sign-in session and your language choice in your browser's local storage, which is what allows you to stay signed in between visits — clearing your browser's site data will sign you out. Google may set cookies in connection with the advertisements described above.

Keeping it secure

The site is served over HTTPS, and access to every record is restricted at the database level to the members of the project it belongs to. Receipt and cover photographs are not publicly readable: they are served through short-lived links generated for members. No system is perfect, and this is a small independent project rather than a bank — please use it accordingly.

How long it is kept

Your data is kept for as long as your account exists, because a shared ledger is only useful with its history intact. When you ask for your account to be deleted, it and the projects you alone own are removed. Records that other members also rely on — an expense in a shared project, for instance — remain in that project so its balances stay correct, with your name detached from them where that is possible.

Your rights

You can ask to see a copy of what is stored about you, have mistakes corrected, or have your account and data deleted. Depending on where you live you may also have the right to object to processing, to ask that your data be transferred elsewhere, or to complain to your local data protection authority. Requests are handled by email, at the address below, within 30 days.

Children

FinFam is designed for families, and its approvals feature exists precisely so that a parent can oversee a child's spending. Signing in requires a Google account, and Google sets its own minimum age, which varies by country. FinFam is not directed at children under 13 and does not knowingly collect data from them. A parent who believes a child has created an account can write to the address below and it will be removed.

Changes

If this policy changes, the effective date at the top of the page changes with it. Material changes will be announced in the app.

Contact

Questions about this policy, or requests to access or delete your data: privacy@ufapp.io.