Last updated 25 August 2026
FinFlow is a personal finance tracker built and operated by Fenn Saji. This policy explains what data FinFlow collects when you use it, why, and what your options are.
Your email address, used only to sign you in — either directly via a one-time code, or from your Google account if you sign in that way.
Everything else in FinFlow is data you type in yourself: account names and balances, transaction titles, amounts, categories, dates and notes, budgets, and investment records. FinFlow never connects to a real bank, card, or brokerage — there is no bank login, no card number, and no way for FinFlow to see or move real money. It is a manual ledger.
Data is stored in a Supabase-managed Postgres database, encrypted in transit and at rest. Row-level security is enabled on every table, so the only account that can read or write a row is the one that created it — your login, and no one else's, not even another FinFlow user.
As the operator, I don't look at your data. The only exception is if you email in with a support request that requires it, and even then only what's needed to help. Your data is never sold, shared with third parties, or used for advertising.
FinFlow uses Vercel Web Analytics for aggregate page-view counts — which pages get visited, roughly how often. It doesn't use cookies and doesn't identify you individually. It has nothing to do with your financial data.
One cookie, used to keep you signed in. No tracking or advertising cookies.
Settings → Delete Account permanently removes your account and everything in it — immediately, no waiting period, no copy kept. Export your transactions first if you want a record; there's a button for that too.
You can access, correct, or erase your data at any time from within the app. If you'd rather not do it yourself, email the address below and I'll handle it.
If this policy changes, the date at the top will change with it.
Questions about this? Email finflow@fennsaji.com.