FinniaPrivacy Policy
Last updated: October 6, 2026
This policy explains what Finnia collects, why, and what you can do about it. Finnia ("the app") is published by CloudArbitration LTDA ("we", "us"). You can reach us at info@cloudarbitration.com.
1. The short version
Finnia does not connect to your bank. Everything in it — accounts, cards, transactions, budgets — is typed in by you, and we store it so it follows you to a new phone. We never ask for bank passwords, card numbers or account numbers. Usage statistics sit under a random identifier that is not connected to your account. The app shows ads, which may use an advertising identifier only if you allow it — or you can subscribe to remove them. Payments are handled by Apple; we never see your card. Your financial data is never used for advertising and we do not sell your personal data.
2. Data we collect
2.1 Account information
To create an account we collect your email address and a display name. If you use Sign in with Apple, we receive whatever Apple sends us — which may be a private relay address instead of your real email. Passwords are handled by our authentication provider and are never visible to us.
2.2 Financial data you enter
Everything you create in the app, which is the reason it exists:
- Accounts: name, bank, type (checking, savings, investment, cash) and balance
- Credit cards: name, bank, limit, closing and due days, statements and whether they were paid
- Transactions: amount, date, description, category, tags, account or card, installments and status
- Recurring bills and income, monthly budgets, savings boxes and your monthly income
- Split groups: the names you give to the other members, the shared expenses and the settlements
- Your preferences: language, reminder times, custom categories and tags
This data is not a link to any bank. Bank names are shown as initials in the bank's colour; the app does not read statements, move money or talk to any financial institution.
Other people's names. In split groups the other members are just names you type — they do not have an account and are not contacted by us. Use only names they would be comfortable with you writing down.
2.3 Usage analytics
To understand which screens deserve to exist, the app records product events: which screen was opened, whether a transaction was added and how many installments it had, whether an ad was shown or skipped. Amounts, descriptions and names are never part of an event. Each event carries a random identifier generated on your device at install, a session number, the event name, the app version, the platform and the time.
That identifier is not linked to your account, your email or your financial data. It is recreated if you delete and reinstall the app.
2.4 Advertising
Finnia is free to use and supported by ads served by Google AdMob. If you subscribe to the No Ads plan, the app does not load ads or the AdMob SDK. Otherwise, depending on your choices and region, AdMob may process your device's advertising identifier (IDFA), general device and network information, and ad interaction data. Your balances, transactions and categories are never sent to AdMob.
On iOS, the advertising identifier is only available if you allow tracking when the system asks. If you decline, the app works exactly the same and you still see ads — just less relevant ones. Google's handling of this data follows its own policies; see How Google uses information from sites or apps that use our services.
2.5 Subscription purchases
The No Ads subscription is sold and charged by Apple through the App Store. We never receive your card or payment details. To turn the plan on for your account, Apple sends us a signed record of the purchase, from which we store the product, the Apple transaction identifiers, the purchase environment, the expiry date and whether it was refunded, linked to your account. Apple also tells our server when the subscription renews, expires or is refunded, so the plan stays accurate.
2.6 Notifications
Daily reminders, statement due dates and scheduled bills are notifications created on your device; their content does not pass through us. Some alerts — for example when a budget is about to run out — are sent by our server through Apple's push service. For those, we store your device's push token and language, linked to your account, and remove them when you sign out.
2.7 What we do not collect
- We do not collect bank credentials, card numbers, account numbers or payment details — not even when you subscribe.
- We do not collect your location.
- We do not access your contacts, photos, camera, microphone or Apple Health.
3. Why we process it
| Purpose | Data | Legal basis (LGPD / GDPR) |
|---|---|---|
| Provide the service: record your finances, calculate balances, budgets and committed income, sync across devices | Account and financial data | Performance of a contract |
| Send budget and statement alerts | Push token, language | Consent (you allow notifications) |
| Understand product usage and fix what is broken | Anonymous usage events | Legitimate interest |
| Provide and verify your No Ads subscription | Purchase records from Apple | Performance of a contract |
| Support the free app with advertising | Advertising identifier, ad interactions | Consent, where required |
Financial data is personal. We use it only to provide the app's features to you — never for advertising, credit scoring or profiling.
4. Who we share it with
We do not sell personal data. We share it only with the providers that make the app work:
- Supabase — hosts our database, authentication and server functions. Processes your data on our instructions.
- Google AdMob — serves ads, as described above.
- Apple — provides Sign in with Apple, delivers push notifications and processes subscription payments.
5. International transfers
Our providers operate infrastructure that may be located outside your country, including in the United States. Where required, transfers rely on the European Commission's standard contractual clauses or an equivalent mechanism offered by the provider.
6. How long we keep it
Account and financial data, including subscription records, are kept while your account exists and are erased when you delete it. Apple keeps its own record of your purchases under its own policy. Anonymous usage events are retained in aggregate; because they are not linked to your identity, they cannot be isolated and removed per person.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these, write to info@cloudarbitration.com from the address associated with your account. We answer within 30 days.
Deleting your account. In the app, go to Profile → Delete Account. The account and all its data are erased immediately and permanently.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
Practical controls — tracking, notifications, deletion — are listed on Your Privacy Choices.
8. Security
Data in transit is encrypted with TLS. Access to the database is restricted by row-level security rules so that an account can only read its own records. Keep your phone locked: anyone who can open the app on your unlocked phone can see what you recorded.
9. Children
Finnia is not directed at children under 13 (or under the minimum age set by your country's law, where it is higher). We do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.
10. Changes to this policy
If we change this policy, we will update the date at the top and, for changes that matter, tell you in the app before they take effect.
11. Contact
CloudArbitration LTDA
info@cloudarbitration.com