Privacy notice
Version 2026-10-24
Finique helps you track your money: what you earn and spend, what you own and owe, and where it is heading. This notice explains what personal data Finique handles, why, who else touches it, how long it is kept, and the rights you have under India's Digital Personal Data Protection Act, 2023. Finique is the Data Fiduciary for your data.
What you agree to
When you sign up you confirm two things, and we record the date, this notice's version and the exact text:
- I consent to the processing of my email and manual ledger data strictly for cloud syncing and financial tracking as detailed in the Privacy Policy.
- I am 18 or older. Finique is not for children.
What we hold, and why
- Your account: name, email, password (stored only as a one-way hash), reporting currency and timezone. To sign you in, to address you and to send messages you ask for.
- What you record: transactions, recurring items, assets, liabilities, goals, budgets, notes, imported statements, and your conversations with Ask Finique. To show your finances, forecast them and give you suggestions.
- What Finique works out: categories, insights, forecasts and advice. Computed from what you record; recomputed when it changes.
- Security records: sign-ins, failed sign-ins, data exports and similar events, with the IP address and browser. To protect your account and to investigate misuse.
We don't sell your data, show you ads, or use your data to train AI models.
How it is protected
- Encrypted in transit (HTTPS) and at rest. Your data is stored in India.
- Each account's data is walled off in the database itself, so one person's request can never read another's.
- Before anything is sent to an AI model, account and card numbers, phone numbers, emails, ID numbers, and your own name and email are masked.
- Staff tools show counts, never anyone's finances; every administrative action is logged and the log can't be edited.
Who processes data for us
| Processor | For | What they get |
|---|---|---|
| Amazon Web Services (Mumbai, India) | Hosting, database, encrypted backups, server logs, encryption keys (AWS KMS) and email delivery (Amazon SES) | Everything you store in Finique; your email address for messages we send you |
| Mesh API (AI models) | Categorising transactions, answering questions, phrasing advice | Transaction descriptions and your questions, with identifiers, your name and your email masked first |
| Langfuse Cloud (United States) | Debugging AI quality | Timings, model names, costs and pass/fail checks under a pseudonymous id; never what you wrote or your data |
| Telegram (only if you link it) | Sending your weekly digest | The digest text and your Telegram chat id |
Some of these services may process data outside India. They act only on our instructions, under agreements that require them to protect it.
How long we keep it
- Your account and records: until you delete them or your account.
- An account nobody signs in to for 12 months is deleted. We email you 30 days before; signing in keeps it.
- Security records: 12 months, as Indian rules require, so misuse can be investigated.
- Records of AI use and of background jobs: 90 days.
- An imported file is deleted as soon as the import finishes (after 7 days if you never finish it).
- Backups are kept for up to 30 days, then overwritten. Your descriptions, notes, names, chats and Finique's advice to you are stored encrypted with a key of your own; deleting your account destroys that key at once, so what any backup still holds can't be read.
Your rights
- Access: download everything Finique holds about you from Settings ▸ Data (JSON or spreadsheet files).
- Correction: edit your profile and records at any time.
- Erasure: delete your financial data (keeping the account) or your whole account from Settings. Deletion is immediate and covers our systems and processors.
- Withdraw consent: as easily as you gave it, from Settings ▸ Privacy. Finique can't work without processing your data, so withdrawing consent deletes your account.
- Nominate someone to exercise these rights if you die or can't, and raise a grievance: write to the contact below.
If something goes wrong
If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires, with what happened, what it means for you and what we are doing about it.
Grievances and questions
Finique Support: janagarajs@gmail.com. We aim to reply within 7 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Changes to this notice
When this notice changes in a way that matters, we'll ask you to read and accept it again the next time you sign in.