Privacy Policy

FinPal is operated by LakeSide Software Dev, Inc., a Delaware corporation ("FinPal," "we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and the choices you have, when you use our financial planning application and website (together, the "Service").

By using FinPal, you agree to this Privacy Policy. If you do not agree with it, please do not use the Service.

Account information

Your name, email address, and a password, which you provide when you create an account.

Financial information you enter

To build your plan, FinPal works from the numbers you type in: your debts (balances, interest rates, payment history), your income, your expenses and budgets, your goals, and the payments you record. You enter all of this yourself. FinPal does not connect to your bank or card accounts and does not import your transactions.

Payment information

If you subscribe to a paid plan, your payment is processed by Stripe. Stripe collects your billing and card details directly; FinPal does not see or store your full card number. We keep only a record of your subscription status and history.

Usage data

When you use the Service, we automatically collect some technical information:

• Device and browser information (type, operating system).
• Usage analytics: which features you use and how you move through the Service.
• Log data such as your IP address, access times, and pages viewed.

To provide the Service

• Create and manage your account.
• Build your personalized roadmap, debt strategies, and budget.
• Run the calculations behind your plan and recompute them as your situation changes.
• Send notifications and reminders you have asked for.

To improve the Service

We analyze data in anonymized, aggregated form to understand how FinPal is used and to make it better, for example average debt amounts, typical payoff times, and which strategies help most. By using FinPal you agree to this aggregated, anonymized use. It cannot be traced back to you, and it never includes selling your data.

To communicate with you

• Service messages about your account, plan, and reminders.
• Replies to your questions and support requests.
• Marketing emails, which you can opt out of at any time (service messages will still be sent).

Two things FinPal deliberately does not do with your data, because both protect you:

• No AI. Your financial data is never sent to, or processed by, any artificial intelligence model or large language model. Every calculation comes from our own hand-crafted, deterministic algorithms.
• No bank connections. FinPal does not link to your bank or card accounts, does not pull your transactions, and never moves money. You stay in full control; FinPal is a calculator and planner, not a bank.

You can read more about the no-AI decision in our No AI Policy.

Where it is stored

Your data is stored in our database, hosted by Supabase, with row-level security so that your records are accessible only to your account.

How it is processed

The math behind your plan runs on our own calculation backend, hosted by Railway and kept separate from the database. The financial inputs needed for a calculation are sent there to produce your result; they are not used for any other purpose.

How it is protected

• Encryption in transit (TLS) and at rest.
• Strict access controls, with two-factor authentication available on your account.
• Network-level protection through Cloudflare.
• Passwords are hashed, never stored in plain text.

No method of transmission or storage is ever completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

How long we keep it

We keep your information for as long as your account is active. If you delete your account, we delete or anonymize your personal and financial information within 30 days, except where we must retain something for legal or regulatory reasons. Anonymized, aggregated statistics may remain.

We rely on a small set of trusted providers ("subprocessors") to run FinPal. Each receives only the data it needs for its job, and each is bound by its own privacy and security commitments. We do not sell or rent your data to anyone.

If we add or change a provider, we will update this list and, for material changes, notify you. We will only work with reputable providers that maintain strong privacy and security standards.

Access and update

You can view and update most of your information directly in your account settings.

Export

You can export your data in a machine-readable format from your account settings, or by emailing legal@finpalapp.com.

Delete

You can delete your account and its data at any time from your settings, or by emailing legal@finpalapp.com. Your information is removed within 30 days, as described above.

Email choices

Opt out of marketing emails using the unsubscribe link in any such email, or in your settings. You will still receive essential service messages about your account.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights, and we process your data on these legal bases:

• Performance of a contract: to provide the Service you have signed up for.
• Legitimate interests: to secure, maintain, and improve the Service (balanced against your rights).
• Consent: for marketing emails, which you can withdraw at any time.

You have the right to access, correct, erase, restrict, or port your data, and to object to processing. To exercise any of these, email legal@finpalapp.com. You also have the right to lodge a complaint with your local supervisory authority.

FinPal is based in the United States, so your data is transferred there. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for these transfers.

If you are a California resident, you have specific rights regarding your personal information.

In the past 12 months we have collected these categories: identifiers (such as name and email), financial information (the figures you enter), and internet activity (usage and log data). We collect them for the purposes described in this policy.

• Know and access: request the categories and specific pieces of information we hold about you.
• Delete and correct: request deletion or correction of your information.
• Opt out: of any sale or sharing of personal information. We do not sell or share your personal information.
• Non-discrimination: we will not treat you differently for exercising these rights.

To exercise any of these, email legal@finpalapp.com.

FinPal is based in, and operates from, the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States, where our providers operate. By using the Service you understand and agree to this transfer, subject to the safeguards described above where they apply.

The Service is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, email legal@finpalapp.com and we will delete it.

We may update this Privacy Policy as the Service evolves or for legal reasons. When we do, we will post the new version here, update the "Last updated" date, and, for material changes, email you. Continued use of the Service after a change means you accept the updated policy.

Questions about this policy or your data? We are glad to help.

LakeSide Software Dev, Inc.
legal@finpalapp.com