FinTrack ("we", "us") is a personal finance app operated by Diego Zubieta, based in Mexico. This policy explains what personal data we collect, why, who we share it with, and the rights you have over it. If you have any question, write to diegozubietap@gmail.com.
1. Data we collect
- Account data — your email address and, if you sign in with Google, your name and profile picture.
- Financial data you enter — accounts and balances, transactions, categories, budgets, scheduled payments and investment holdings. We do not connect to your bank and never receive your bank credentials.
- Optional integrations — if you connect Gmail, read-only access to bank notification emails so we can detect transactions; if you link WhatsApp, your phone number and the messages you send to the FinTrack assistant.
- Payment data — if you buy a plan, the payment is processed by Stripe. We receive confirmation of the purchase, never your card number.
- Technical data — error reports (browser, device type, the page and the error) so we can fix problems, plus the server logs our hosting provider keeps.
2. How we use it
- To provide the app: store your finances, calculate balances and show your reports.
- To run the AI features you choose to use (the AI Advisor, the WhatsApp assistant and transaction detection from emails).
- To process payments and give you access to the plan you bought.
- To keep the service secure and fix errors.
We do not sell your data, show you ads, or use your financial data for marketing.
3. AI processing
AI features are powered by Claude, a model from Anthropic. When you use them, the relevant data — for example a summary of your finances for the AI Advisor, the text of a bank email, or a WhatsApp message — is sent to Anthropic to generate the answer. Anthropic processes it under its commercial terms and does not use API data to train its models. These features only run when you use them.
4. Who we share it with
We share data only with the providers needed to run FinTrack:
- Supabase — database and sign-in.
- Vercel — hosting.
- Anthropic — AI features (see section 3).
- Google — Google sign-in and, if you connect it, Gmail access.
- Twilio — WhatsApp messaging, if you link a number.
- Stripe — payments.
- Sentry — error reports.
- Frankfurter — currency exchange rates (no personal data is sent).
Some of these providers process data outside Mexico, mainly in the United States. We may also disclose data when required by law.
5. Gmail data
If you connect Gmail, FinTrack requests read-only access and only reads messages from known bank senders to detect transactions. We store the access token needed for this and the transactions we create, not your emails. We do not use Gmail data for advertising or share it beyond the AI processing described above. You can disconnect at any time in Settings or from your Google account.
6. How long we keep it
We keep your data while your account is open. When you delete your account in Settings, your data is deleted immediately from our database; copies in our providers' backups expire on their normal schedule.
7. Your rights
Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and similar laws, you can access, rectify, cancel (delete) and object to the use of your personal data (ARCO rights), and withdraw your consent. You can export all your data and delete your account yourself in Settings, or email diegozubietap@gmail.com. We will answer within 20 business days.
8. Security
Data is encrypted in transit, and access to each user's records is restricted at the database level. No system is perfectly secure; if a breach affects you, we will tell you.
9. Children
FinTrack is not intended for people under 18, and we do not knowingly collect their data.
10. Changes
If we change this policy we will update the date above, and for significant changes we will notify you by email or in the app.