Privacy Policy

FinSight — Personal Finance Tracker

Last updated: 10 March 2026  |  Version 3.1

FinSight ("the App", "we", "us", "our") is a personal finance management application built as a Progressive Web App (PWA) and available on Google Play as a Trusted Web Activity (TWA). We are committed to protecting the privacy and security of our users ("you", "your"). This Privacy Policy explains how we handle data in compliance with Google Play's User Data policy, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Children's Online Privacy Protection Act (COPPA).

Key Principle: All your financial data is stored exclusively on your device. We do not operate user account systems, databases, or backend servers that store personal data. Our infrastructure consists solely of a stateless Cloudflare Worker proxy with logging disabled by design.

1. Information We Collect

1.1 Data Stored On-Device Only (Not Collected by Us)

The following data is stored exclusively in your browser's localStorage on your device. This data never leaves your device except when you explicitly opt in to specific features described in Section 2. Per Google Play's Data Safety guidelines, on-device-only data is not considered "collected" by us.

1.2 Data We Do NOT Collect

We explicitly do not collect, store, process, or transmit:

1.3 No User Accounts

The App does not require or support user account creation. There are no login credentials, no email verification, and no user registration. All data is anonymous and local.

2. Data Transmitted to Third-Party Services

When you use certain optional or automatic features, limited non-personal data may be transmitted to third-party services. All transmissions use HTTPS encryption in transit.

2.1 AI-Powered Analysis Features User-Initiated

When you explicitly choose to use AI features, the App sends anonymised, non-identifiable data through our Cloudflare Worker proxy to AI providers. You are presented with a disclosure in the App before any AI feature is activated.

FeatureData TransmittedData NOT TransmittedProvider
Portfolio Analysis Anonymous allocation percentages only (e.g. "40% equity, 30% debt"), risk profile label No stock tickers, amounts, balances, or personal identifiers Groq (Llama 3.1) with Google Gemini fallback
Pick of the Day Publicly available market data: stock symbols, prices, moving averages, PE ratios, volume No user portfolio data, no personal information Groq (Llama 3.1) with Google Gemini fallback
Card Recommendations Anonymous spending category percentages (e.g. "Groceries: 15%, Fuel: 8%") No merchant names, transaction amounts, or card numbers Groq (Llama 3.1) with Google Gemini fallback
Statement Parsing Auto-redacted statement text — card/account numbers, names, and email addresses are programmatically stripped before transmission No raw financial credentials or unredacted PII Anthropic Claude (user provides own API key)

Important: AI features are entirely optional. The App functions fully offline with rule-based analysis. AI responses are used solely for in-app display and are not stored on any server.

In-App Disclosure: Before any AI feature transmits data off your device for the first time, the App presents a prominent disclosure modal explaining exactly what data will be sent, what will never be sent, and links to this Privacy Policy. You must explicitly consent before AI features are activated. You can revoke consent at any time by clearing app data.

2.2 Market Data Automatic

To display live stock prices and market information, the App automatically fetches publicly available financial data:

ServicePurposeData SentPersonal Data
Yahoo Finance (via our proxy)Stock prices, market movers, technical indicators for Top Movers and Pick of the Day featuresPredefined stock ticker symbols onlyNone
ExchangeRate-API / Open ER APILive currency conversion ratesCurrency code only (e.g. "INR")None

2.3 Zerodha Kite Connect User-Initiated

You may optionally connect your Zerodha brokerage account using the Kite Connect API to import your portfolio holdings. This integration requires you to provide your own Kite Connect API key and secret.

2.4 Content Delivery Networks (CDN) Automatic

The App loads the following standard open-source libraries from public CDNs for core functionality:

CDN requests are standard HTTP/HTTPS resource fetches. No personal, financial, or user-specific data is included in these requests.

2.5 Cloudflare Worker Proxy

API requests to AI services, Yahoo Finance, and Kite Connect are routed through a Cloudflare Worker (finsight-proxy.finsight-api.workers.dev). This proxy:

3. Google Play Data Safety Declaration

The following reflects our declarations in the Google Play Data Safety section, aligned with Google's 14 data categories.

Data Collection & Sharing Summary

LocationNot collected
Personal info (name, email, phone, address)Not collected
Financial info (payment info, purchase history)Not collected
Health and fitnessNot collected
MessagesNot collected
Photos and videosNot collected
Audio filesNot collected
Files and docsNot collected *
CalendarNot collected
ContactsNot collected
App activityNot collected
Web browsing historyNot collected
App info and performanceNot collected
Device or other IDsNot collected

* Files (CSV/PDF/JSON) are processed entirely on-device in the browser. If you opt in to Claude AI parsing, redacted text (not the file itself) is sent to the AI provider as described in Section 2.1.

Security Practices

Data encrypted in transit✓ Yes (HTTPS/TLS)
Data encrypted at restOn-device (browser storage)
You can request data deletion✓ Yes (Settings > Clear All Data)
Data shared with third partiesNo **

** When you opt in to AI features, anonymised non-personal data (not user data) is sent to AI providers for processing. No personal or financial data is shared.

4. Data Security Measures

5. Data Retention & Deletion

5.1 On-Device Data

All data persists in your browser's localStorage until you choose to delete it. We have no access to this data and cannot retain or recover it.

5.2 How to Delete Your Data

Since no data is stored on our servers, deletion is immediate, complete, and irreversible. There is no server-side data to request deletion of.

5.3 AI Processing Data

Data sent to AI providers (Groq, Gemini, Claude) is processed in real-time and not retained by us. Refer to each provider's privacy policy for their data handling practices:

6. Your Rights

Depending on your jurisdiction, you may have the following rights under applicable data protection laws (including GDPR and CCPA):

7. Third-Party Services & Their Policies

The App integrates with the following third-party services. Their use of any data they receive is governed by their respective privacy policies:

ServicePurposePrivacy Policy
CloudflareWorker proxy, CDN, Pages hostingcloudflare.com/privacypolicy
GroqAI analysis (Llama 3.1)groq.com/privacy-policy
Google (Gemini)AI analysis fallbackpolicies.google.com/privacy
Anthropic (Claude)Optional PDF statement parsinganthropic.com/privacy
Yahoo FinanceMarket data and stock priceslegal.yahoo.com/privacy
Zerodha (Kite Connect)Optional portfolio importzerodha.com/privacy-policy
Google FontsUI typographypolicies.google.com/privacy

8. Permissions

The App requests no special device permissions. Specifically:

File uploads (bank statements, receipts) use the standard browser file picker and are processed entirely on-device.

9. Children's Privacy (COPPA Compliance)

The App is not directed at, designed for, or intended to attract children under the age of 13. We do not knowingly collect personal information from children under 13. Since the App does not collect personal data from any user, there is no risk of inadvertent collection from children.

If you are a parent or guardian and believe your child has used the App in a manner that concerns you, please contact us at the address below and we will address it promptly.

10. International Users

The App is available globally. Since all data is stored on your device, no data is transferred across international borders by us. When you opt in to AI features, data may be processed by AI providers whose servers may be located in different jurisdictions. Please refer to each provider's privacy policy (Section 7) for details on their data processing locations.

11. AI-Generated Content Disclaimer

The App uses AI services to provide educational financial analysis, including portfolio insights, stock screening ("Pick of the Day"), and credit card recommendations. All AI-generated content is:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App's features, legal requirements, or our practices. When we make changes:

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the App's data practices, please contact us:

We will respond to privacy-related inquiries within 30 days.