FINANCE FANTASY
Privacy Policy
Last updated: October 5, 2026
Finance Fantasy ("the App", "we", "our", "us") is developed by Viviana Andrango. Contact: financefantasy1@gmail.com.
This policy explains what data the App handles, how, and your rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws. It applies to the app distributed through the Apple App Store.
1. The Short Version
- Your account (email/login) and the transactions you enter (income, expenses, categories, savings goals) are stored in our cloud database, hosted by Supabase, so your data stays in sync across your devices.
- Subscriptions are processed by Apple and managed through RevenueCat. We never see or store your payment card details.
- We do not sell your data. We do not show ads. We do not track you across other apps or websites, and we do not use advertising identifiers.
- We use PostHog, a product analytics tool, to understand how the App is used and improve it. Analytics events are linked to your account ID, but never include your name, email, transaction amounts, or notes, and are not used for advertising.
2. Data We Handle and Why
| Data | Where it lives | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account information: email address and login credentials | Supabase (authentication & database servers) | Create and manage your account, sign you in securely | Performance of contract (Art. 6(1)(b)) |
| Financial entries: transactions, categories, income/expenses, savings goals | Supabase (database servers) | The core function of the App — track, categorize, and calculate your monthly savings | Performance of contract (Art. 6(1)(b)) |
| Gamification progress: levels, streaks, achievements | Supabase (database servers) | Power the App's gamification features | Performance of contract (Art. 6(1)(b)) |
| Subscription and purchase status, anonymized purchase identifiers | Apple and RevenueCat servers | Process your subscription, unlock premium features, restore purchases, prevent fraud | Performance of contract (Art. 6(1)(b)) |
| Usage analytics: your account ID (linked to your account, not your name or email) and in-app events such as onboarding progress, sign-up and sign-in (method used), creating transactions or budgets, viewing the Pro subscription screen, redeeming a code, and deleting your account | PostHog (servers in the European Union) | Understand how the App is used and improve it. Analytics never include transaction amounts, notes, or contact details | Legitimate interest (Art. 6(1)(f)) |
We do not collect: bank credentials or bank account access, contacts, location, health data, or advertising identifiers. We do not track you across other apps or websites.
3. Third Parties (Processors)
- Apple (App Store, StoreKit): payment processing and subscription billing. See Apple's Privacy Policy.
- RevenueCat, Inc.: subscription management (which plan you have, whether it is active). Receives an anonymized app user ID and transaction data. Never your financial entries. See RevenueCat's Privacy Policy.
- Supabase, Inc.: our database and authentication provider. Stores your account credentials and the financial data you enter, protected with encryption in transit. See Supabase's Privacy Policy.
- PostHog: product analytics, hosted on servers in the European Union. Receives the internal account identifier and in-app usage events described in Section 2. See PostHog's Privacy Policy.
We have no other processors at this time. We do not sell your data or share it with third parties for their own marketing purposes, and we do not use analytics data for advertising.
4. International Data Transfers
Some of our processors (e.g. Supabase, RevenueCat) may process data on servers located outside your country, including in the United States. Where such transfers occur, they rely on safeguards recognized under GDPR/UK GDPR, such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
Usage analytics processed by PostHog are stored on servers located in the European Union. If you use the App from outside the European Union (for example, from Latin America), your usage data is transferred to and stored on those servers.
5. Data Retention
- Your account and financial data are retained while your account is active. You can request export or deletion at any time by contacting us.
- Subscription records are kept by Apple/RevenueCat as required for billing and legal compliance.
- If you delete your account, we will delete or anonymize your data within a reasonable period, except where retention is required by law.
6. Your Rights (GDPR & UK GDPR)
If you are located in the EU, UK, or a jurisdiction with similar protections, you have the right to access, rectify, erase, restrict, object to the processing of, and port your personal data, and the right to withdraw consent where processing is based on consent. To exercise these rights, contact us at financefantasy1@gmail.com. You also have the right to lodge a complaint with your local data protection supervisory authority.
7. Children's Privacy
Finance Fantasy is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
8. Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. All network communications between the App and our servers use encryption in transit (HTTPS/TLS). However, no method of storage or transmission over the internet is 100% secure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the App and on this page with a new "Last updated" date.
10. Contact Us
Viviana Andrango — financefantasy1@gmail.com