Last updated 5 September 2026
FinFlow is a personal finance tracker built and operated by Fenn Saji. This policy explains what data FinFlow collects when you use it, why, and what your options are.
Your email address, used only to sign you in — either directly via a one-time code, or from your Google account if you sign in that way.
Everything else in FinFlow is data you put in yourself: account names and balances, transaction titles, amounts, categories, dates and notes, budgets, goals, and investment records — either typed in directly, or read out of a bank or card statement file you choose to upload. FinFlow never connects to a real bank, card, or brokerage account — there is no bank login, no stored card number, and no way for FinFlow to move real money on its own. A statement is a file you hand it once; it is read, and the transactions in it are added to your own records.
Data is stored in a Supabase-managed Postgres database, encrypted in transit and at rest. Row-level security is enabled on every table, so the only account that can read or write a row is the one that created it — your login, and no one else's, not even another FinFlow user.
As the operator, I don't look at your data. The only exception is if you email in with a support request that requires it, and even then only what's needed to help. Your data is never sold, shared with data brokers, or used for advertising.
A few premium features — a written read of your month, budget suggestions, and reading a statement whose layout FinFlow doesn't already recognise — use Anthropic's Claude API to do part of the work. What each one is allowed to see is deliberately narrow, and different features see different amounts:
Monthly insights and budget suggestions send only numbers already totalled up by FinFlow — category names and sums, budget targets, how much is spare each month — never an individual transaction, its narration, or a payee name.
Reading an unfamiliar statement layout sends only the column headings and a masked sample of the rows, with every actual value — every date, amount and reference number — replaced by a placeholder before it leaves your browser. The statement file itself is never uploaded to Anthropic.
Ask AI, the chat, is the one feature that sees individual transactions, and only after you agree to it once. It can read up to 24 months of your transactions, transfers and refunds (date, amount, category, account and payee), plus balances, card dues, loans and EMIs, investments, budgets, goals and your forecast. Before anything is sent, FinFlow removes your name, email and phone number, every account, card, phone and UPI number, and all notes you've written; people you've paid are sent only as their initials. Your chats are kept for 90 days. Withdrawing consent in Settings stops Ask AI sharing anything and deletes every saved chat.
Anthropic processes this under its standard commercial API terms: inputs and outputs are automatically deleted from its systems within 30 days, and are never used to train its models without explicit permission, which FinFlow has not given. These features only ever run when you press a button or send a question — never automatically, and never on a page you're simply viewing.
Premium subscriptions are billed through Razorpay. Your card or bank details go directly to Razorpay's own checkout — FinFlow never sees or stores them. Razorpay tells FinFlow only whether a payment succeeded and when your subscription renews.
FinFlow uses Vercel Web Analytics for aggregate page-view counts — which pages get visited, roughly how often. It doesn't use cookies and doesn't identify you individually. It has nothing to do with your financial data.
One cookie, used to keep you signed in. No tracking or advertising cookies.
Settings → Delete Account permanently removes your account and everything in it — immediately, no waiting period, no copy kept. Export your transactions first if you want a record; there's a button for that too.
You can access, correct, or erase your data at any time from within the app. If you'd rather not do it yourself, email the address below and I'll handle it.
If this policy changes, the date at the top will change with it.
Questions about this? Email finflow@fennsaji.com.