Privacy Policy

All communication between your device and our servers is encrypted in transit (HTTPS/TLS). Your financial data is stored in an encrypted Postgres database, and passwords are never stored in plain text. Finly does not currently offer a live, automatic bank connection — you add expenses manually or import them from a statement file (CSV, PDF, or OFX) you upload yourself, so there are no bank login credentials for us to store in the first place.

We collect information necessary to provide you with a high-quality financial tracking experience:

• Account information: name, email address, and profile preferences.
• Financial data: expenses, income, budgets, goals, debts, and account balances you enter yourself or import from an uploaded statement file.
• AI conversations: messages you send to Finly's chat, voice, and memory features, so the assistant can recall context across sessions.
• Usage data: how you interact with the app, to improve reliability and the product experience.
• Push notification subscription: your browser's push endpoint, only if you opt in to notifications.

Categorization, coaching, chat responses, and other AI-generated insights are produced by third-party AI models — Mistral AI (primary) and Google Gemini (fallback, and for anything involving images). The financial data and messages needed to answer your request are sent to whichever provider handles it. These providers process that data on our behalf under their own data-processing terms; we do not use your data to train our own models.

Finly can optionally be connected to an external AI assistant (for example Claude, ChatGPT, or any other MCP-compatible client) that you explicitly authorize through an OAuth sign-in. Once connected, that assistant can read and act on your financial data through Finly's tools, to the extent of the access you grant it — it is a connection you initiate and control, not one we set up for you. You can revoke it at any time from your account settings.

We never sell your personal data to third parties. We only share data with the service providers required to run Finly — our database host (Neon), caching layer (Upstash), authentication provider (Supabase), hosting and analytics (Vercel), and the AI providers described above (Mistral AI, Google) — and only to the extent needed for them to perform that function.

If you turn on push notifications, your browser registers a push subscription with us so we can deliver alerts (like budget warnings) directly to your device. This is opt-in, and you can turn it off at any time from Settings or your browser's notification permissions.

You have the right to access, correct, export, or delete your data. You can export your expenses, monthly statements, and tax reports at any time from Settings. To delete your account and associated data, contact us at support@finly-ai.com — we do not yet have a fully automated self-service deletion button, so a request through this address is how it's handled today.