Privacy Policy

Effective date: 25 September 2026

Finano ("the App") is a personal and household finance tracker developed by Volodymyr Symonchuk ("we", "us"). This policy explains what data the App handles, where it is kept, who can see it, and the choices you have.

The short version

• The App works without an account. In that mode your financial data stays on your device and nothing about you is sent to us.
• If you sign in with Apple, we create a cloud account so that you can share a household with family members. Your accounts, categories, transactions, budgets and recurring rules are then synchronised to our server and to the devices of the people in your household.
• We use crash reporting (Sentry) to fix bugs. Reports contain technical details, never your transactions or notes.
• We do not sell data, show advertising or use analytics or tracking SDKs.

Data the App stores on your device

• Accounts, categories, transactions, budgets, recurring rules, family members and settings you create.
• Transactions and card balances imported from your bank, if you connect one.
• Exchange rates downloaded to convert between currencies.

All of this lives in a local database inside the App's private storage. It is protected by your device's security (passcode, biometrics, encryption) and by the App's own lock if you enable it in Settings → Security. It is included in device backups you control (for example iCloud backups on iOS).

Cloud account and family sync (optional)

You can use the App entirely offline. Signing in is only needed for household sharing.

When you sign in with Apple we receive from Apple a stable identifier for your Apple ID and, if you allow it, your name and e-mail address (Apple may give us a private relay address instead of your real one). We store these together with the language of your device in order to identify your account and to greet you by name.

Once you are signed in, the following data is synchronised to our server and from there to the other members of your household: accounts, categories, transactions (amount, currency, date, category, note), budgets, recurring rules, family members and category rules for imported bank transactions. Everyone in the household can see and edit this shared data; that is the purpose of the feature. Bank tokens are never synchronised.

We also keep a record of the devices you use with your account (platform, device name, language and a push-notification token) and a short security log of account events such as sign-in, joining or leaving a household and account deletion, together with the IP address and time of the event. We keep this log to investigate abuse and account problems.

Data is stored on servers rented from Hetzner Online GmbH in Helsinki, Finland (European Union), transmitted only over encrypted connections and backed up nightly; backups are deleted after 14 days.

Bank connections (Monobank)

Connecting Monobank is optional. To do so, you obtain a personal API token from Monobank and enter it in the App.

• The token is stored in the operating system's secure keychain on your device. It is never sent to us or synchronised.
• The App sends the token only to api.monobank.ua to request your card list, balances and statements.
• Imported statements are stored locally like any other transaction and, if you are signed in, synchronised with your household like any other transaction.
• You can disconnect at any time in Settings → Banks; this deletes the token from your device. Imported transactions remain until you delete them.

Monobank's handling of your data is governed by Monobank's own terms and privacy policy.

Exchange rates

To convert between currencies the App downloads daily rates. Without an account they come directly from open.er-api.com; with an account they come from our server, which fetches them from the same source. The only information sent is the three-letter code of your base currency (for example "UAH"). You can turn automatic updates off in Settings → Exchange rates and enter rates manually.

Notifications

Budget alerts and daily reminders are scheduled locally on your device and do not leave it. If you are signed in, we additionally send push notifications about household activity (for example when a family member adds a transaction) through Apple's push service. For this we store a push token issued by Apple for your device. You can switch notifications off in your device settings at any time.

Crash reports

To find and fix bugs the App and our server send error reports to Sentry (Functional Software, Inc.), hosted in the European Union. A report contains the type of error, the code location, the App version, the device model and operating system version, and a random identifier of your account if you are signed in. The App is configured not to send screenshots, personal details, request contents or your financial data. Reports are kept by Sentry for 90 days.

Sharing and export

We do not sell or rent your data and do not share it with anyone except the service providers named in this policy (Hetzner for hosting, Apple for sign-in and push, Sentry for crash reports), who process it only on our behalf. We will disclose data if required by law. When you use Export, a file is created on your device and handed to the system share sheet; where it goes from there is entirely your choice.

Your choices and rights

• Use the App without an account: nothing is sent to us.
• Leave a household in Settings → Family: your device keeps its copy of the data, and the household keeps the data that was shared while you were a member.
• Delete your account in Settings → Delete account. This immediately deletes your account, your devices and push tokens on our server. Households you own pass to the longest-standing member; a household in which you were alone is deleted together with all its synchronised data. Data already on your device stays there and keeps working offline. The security log entry recording the deletion is kept without your name or e-mail.
• Deleting the App from your device deletes the local database and the stored bank token.
• You can ask us to access, correct or delete the data we hold about you by e-mail. If you live in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your data-protection authority.

Children

The App is not directed to children under 16 and we do not knowingly process data of children.

Changes

We may update this policy when the App changes. The effective date at the top shows the latest version; material changes will be announced inside the App.

Contact

Questions about this policy: vova.symonchuk@gmail.com