Scope and contact
This notice describes how FinEpoch handles information when you use finepoch.com. Contact FinEpoch at aksayatakan7@gmail.com with privacy questions or requests. Paddle independently handles payment information under its own privacy notice.
Information we process
Account information includes your name, email address, securely hashed password, account preferences and subscription status. Authentication records may include your IP address, browser information and session timestamps. A hashed device identifier helps prevent registration abuse.
You may provide purchase names, prices, categories, reasons, links and notes; goals and savings entries; income, recurring expenses and subscriptions; onboarding answers; challenge activity and notification preferences. These are the records used to calculate your insights. Do not include bank credentials, card details or sensitive information in notes.
If you enable browser notifications, we store the push subscription endpoint and associated keys, delivery status and preferences. If you email support, your message and contact details are processed to respond. Hosting and security providers may process technical request and error logs.
Purposes and legal grounds
We process account and financial planning records to provide the service you request and administer your subscription. Where applicable, this is necessary to perform our contract with you. We process limited technical and device records for our legitimate interests in security, fraud prevention and reliable operation, subject to your rights.
Optional browser notification permission is your choice and can be withdrawn in your browser. Where applicable, consent is the basis for optional notifications; service and security communications may be necessary to operate your account. Legal obligations may require the retention or disclosure of certain records.
Providers, payments and international processing
FinEpoch uses Supabase for its application database and Vercel for hosting and server execution. Paddle processes checkout, billing, tax and payment support as merchant of record. Your browser or operating system’s push service processes notifications if you enable them. Email sent to our Gmail support address is handled by Google’s email service.
FinEpoch does not receive or store your full payment card number or security code. It receives identifiers and subscription details needed to provide Pro access. We do not sell your personal financial records or use them for targeted advertising.
Our database is hosted in the EU, but hosting execution, provider support, email and payment processing may involve other countries. An EU database does not mean all processing stays in the EU. For information about the applicable transfer arrangements and safeguards for your data, contact us. We may disclose information where legally required or necessary to protect the service and users.
Cookies and local storage
Essential session cookies keep you signed in. The remember-me option may keep a session active for up to one year unless you sign out or the session is revoked. A device cookie supports registration abuse prevention, and local storage remembers your language preference. Browser notification permission and a service worker support optional push delivery.
These technologies are used for service functionality, not advertising profiling. You can clear site storage or block cookies in your browser, but sign-in and other features may stop working. Clearing cookies alone does not delete your server-side account.
Retention and deletion
Application records are kept while your account is active so your history and goals remain available. Permanent account deletion removes the associated records from the active application database. Provider backups, security logs and independently retained payment or email records may remain under the relevant provider’s retention rules or where legally required; account deletion is not an instant erasure of every provider backup.
We do not promise an unverified fixed retention period for provider logs or backups. Contact us for details about retention and a specific deletion request. Support correspondence is kept only as needed to address the request and related legal or security requirements.
Your choices and rights
You can update profile and financial records, export your data and delete your account through Settings. You can disable notifications in Settings and your browser. For other access, correction, erasure, portability, restriction or objection requests, email aksayatakan7@gmail.com. Rights depend on your jurisdiction and may be subject to lawful exceptions; we may need to verify your identity.
Where processing relies on consent, you may withdraw it without affecting prior lawful processing. Where applicable, you may complain to your local data protection authority. We do not make lending, insurance or other legally significant eligibility decisions from your records.
Security, young users and updates
We use authentication, access controls and encrypted connections, but no online service can guarantee absolute security. Protect your account and report suspected unauthorised access to our support email.
FinEpoch is not intended for children below the age at which they can lawfully use the service or consent to the relevant processing. If you believe a child has supplied data without required permission, contact us. We may update this notice as the service changes; the date above identifies the current version.