AFINCE provides read-only personal finance insights. This Privacy Policy explains what information we collect, how we use it, how we protect it, when we share it, and how users can request access, correction, disconnection, or deletion.
1. Information We Collect
- Account information: name, email address, authentication identifiers, profile settings, and support communications.
- Read-only financial information: account names, account type, balances, transaction history, merchant names, categories, dates, and similar data made available through user-authorized financial data providers such as Plaid.
- App activity: settings, budget categories, recurring expense preferences, device type, app version, diagnostic events, error logs, and security events.
- Support information: details a user chooses to provide when contacting us.
2. Plaid and Financial Connections
AFINCE uses Plaid or similar financial data providers to connect user-authorized financial accounts. Users complete connection flows directly through the provider. AFINCE receives access tokens and read-only financial data needed to provide the service. AFINCE does not receive or store bank login credentials.
Users may disconnect a financial institution inside the app when available, through their financial institution, through Plaid where supported, or by contacting support@afince.com.
3. How We Use Information
- Provide account visibility, transaction organization, budgets, balance insights, and recurring expense insights.
- Authenticate users, protect accounts, detect abuse, troubleshoot errors, and maintain service reliability.
- Respond to support, security, privacy, and deletion requests.
- Improve app performance and user experience using aggregated or de-identified analytics when practical.
- Comply with legal, security, tax, accounting, and operational obligations.
4. Sharing and Third Parties
AFINCE does not sell personal information or financial data. We share information only as needed to operate the service, protect users, comply with law, or complete a user request.
- Financial data providers: Plaid and similar services used to connect accounts.
- Cloud and infrastructure providers: hosting, database, authentication, logging, monitoring, and storage providers.
- Support and operations: tools used to respond to support and privacy requests.
- Legal and safety: when required by law, legal process, fraud prevention, security investigation, or protection of rights.
5. Security Measures
AFINCE uses administrative, technical, and organizational controls designed to protect personal and financial information. These include encrypted transport using HTTPS/TLS, restricted internal access, least-privilege practices, multi-factor authentication for administrative systems where supported, logging of sensitive administrative activity, and deletion procedures for data that is no longer needed.
6. Retention
AFINCE keeps information only as long as reasonably needed for the service, security, legal compliance, dispute resolution, and legitimate business operations. Account and profile data is generally retained while an account is active. Financial data is retained as needed to provide insights and is deleted or de-identified after account deletion or disconnect requests, subject to legal, security, backup, and audit requirements.
7. Deletion and Account Closure
Users may request deletion of their account and associated personal data by contacting support@afince.com. We may need to verify the request before processing it. When a deletion request is verified, AFINCE will delete or de-identify account data from active systems within a commercially reasonable period and remove remaining copies from backups according to backup lifecycle schedules.
8. Privacy Rights
Depending on location, users may have rights to request access, correction, portability, deletion, restriction, or objection to certain processing. Users may also opt out of sale or sharing where applicable. AFINCE does not sell personal information. Requests can be sent to support@afince.com.
9. Children
AFINCE is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information was collected, we will take reasonable steps to delete it.
10. International Processing
AFINCE may process information in the United States or other locations where our service providers operate. By using AFINCE, users understand that information may be processed outside their state, province, or country.
11. Changes to This Policy
We may update this Privacy Policy to reflect product, legal, or operational changes. When changes are material, we will provide notice through the website, app, or other reasonable means.
12. Contact
Privacy, data access, disconnection, and deletion requests should be sent to support@afince.com.