Privacy Policy

Account information. Your name, email address, password (stored only as a hash), and, if you sign in with Google or Apple, the account identifier they give us. Your settings, such as country, currency and two-factor authentication, and how you heard about FinWise.

Financial information. Accounts, balances, transactions, investment holdings, budgets, categories, tags, notes, files you upload (for example CSV files), and data you import from Vault22. To import from Vault22 you sign in with your Vault22 details, which we pass to Vault22 and do not store.

Bank connection information. When you connect a bank or other institution, we receive your account and transaction data through our connection providers: Plaid, Yodlee (Envestnet), GoCardless and Gathr. You sign in to your bank through the provider; FinWise never receives or stores your online banking login details. We store the access tokens and identifiers providers give us, encrypted, so the connection can keep syncing.

Support and feedback. Messages you send us through in-app chat or email (Intercom), feedback and votes you post on our feedback board (Featurebase), and your Discord account identifier if you link it.

Device and usage information. IP address, device and operating system, app version, push notification token, how you use the Service (product analytics), and error and crash reports.

Payment information. Payments are processed by Stripe on the web and by Apple or Google in the mobile apps (managed through RevenueCat). We receive your subscription status and payment history, not your full card number.

• To provide the Service: syncing your accounts, showing your finances, budgets and net worth, and converting currencies.
• To categorize transactions and suggest merchants. To suggest a category we send OpenAI a transaction's description, amount and merchant name, the institution and account it came from (name, type and currency), a few of your past categorized transactions as examples, and your category names.
• To take payments and manage subscriptions, trials and referrals.
• To communicate with you: account and security emails, service notices, support replies, and product emails you can unsubscribe from.
• To keep the Service secure: detecting fraud and abuse, rate limiting sign-in attempts, and investigating incidents.
• To understand how the Service is used, fix bugs, and improve it.
• To measure whether our own advertising works (see Cookies and advertising below).
• To comply with legal obligations.

We do not sell your personal information.

We don't make decisions with legal or similarly significant effects on you based solely on automated processing. Automated categorization only labels your transactions, and you can change any label.

We process your information because it is necessary to provide the Service you signed up for (contract); for our legitimate interests in keeping the Service secure, understanding how it is used, improving it, and keeping records of bank connections; to comply with the law (for example tax records); and, where the law requires it, with your consent, which you can withdraw at any time.

We share personal information only with the service providers and partners below, as needed for the purposes above:

• Hosting and infrastructure: Heroku (servers and database, United States) and Cloudflare (network and security).
• Bank connections: Plaid, Yodlee (Envestnet), GoCardless and Gathr. Plaid's handling of your data is described in the Plaid End User Privacy Policy.
• AI categorization: OpenAI.
• Payments and subscription analytics: Stripe, RevenueCat, Apple, Google, ChartMogul, and Rewardful (referral and affiliate tracking).
• Email and support: Resend (email delivery), Intercom (support chat and email, including its AI assistant), Featurebase (feedback board), Discord (community) and Slack (internal team notifications).
• Analytics and error tracking: Mixpanel (stored in the EU), PostHog, Google Analytics, Cloudflare Web Analytics, Firebase Analytics (mobile apps) and Sentry.
• Advertising measurement: Google Ads and Apple's SKAdNetwork.

We also disclose information when you tell us to, and when we must:

• AI assistants you connect. If you connect an AI assistant (such as Claude, ChatGPT or Grok) to the FinWise MCP server, it can read the data you allow and, if you allow it, change your data on your behalf. Data you share with an AI assistant is handled under that provider's privacy policy.
• API keys and apps you authorize. Anyone holding an API key you create can access your data through the FinWise API.
• Businesses and advisors you authorize. If you grant a business or financial advisor access through FinWise Connect, they can see the data you share with them.
• Legal and safety. When required by law or legal process, or to protect the rights, property or safety of our users, FinWise or others.
• Business transfers. If FinWise is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it, subject to this policy.

You can revoke access for AI assistants, API keys and authorized businesses at any time in the web app's settings.

We use cookies and similar technologies (such as local storage) to keep you signed in, remember your preferences, measure how the Service is used (Mixpanel, PostHog and Google Analytics), attribute referrals (Rewardful), and measure our advertising (Google Ads, which on the web app also receives your email address, hashed in your browser before it is sent, to match conversions). The mobile apps send sign-up and purchase conversion events, along with Firebase's standard app usage events such as first opens and sessions, through Firebase Analytics, and the iOS app also uses Apple's SKAdNetwork, for the same reason. We do not access the iOS advertising identifier (IDFA), we do not use your financial data for advertising, and we turn off Google's ad personalization, so our ad tags aren't used for remarketing or to build ad audiences.

On our website and web app, Google advertising and analytics storage is off by default in the EEA, the UK and Switzerland. You can also block or delete cookies in your browser settings.

Browser "Do Not Track" signals have no agreed standard, and we don't respond to them. Our website and web app do honor Global Privacy Control (see your privacy choices below).

We keep your information for as long as your account exists. When you delete your account, we delete or scrub what identifies you, except as listed below. We delete your profile, financial data, bank connections, uploaded files and the emails we sent you; ask our bank connection providers to delete your data; delete your Mixpanel profile, your PostHog person and events, and the Intercom contact linked to your account; remove your name and email from RevenueCat and Stripe; and cancel a web subscription.

We keep pseudonymous records, without your name or email, so our usage and revenue history stays accurate, and a few records we need to keep:

• Product analytics events in Mixpanel and purchase history in RevenueCat and Stripe, keyed by ids rather than your name or email. Older analytics events may include your email address; ask us and we will delete them.
• A record of each bank connection you made (institution, dates, and the provider's connection identifiers and tokens, still encrypted) for audit, security and dispute purposes.
• Payment records at Stripe (invoices, charges and payment methods), as long as tax and accounting law requires. Records already created keep the name and email they were made with.
• Logs of bank connection attempts (institution, timing and outcome), without your user id.
• Encrypted database backups, which expire within 35 days.
• Error reports and server logs, which may include your user id and IP address, kept by Sentry for up to 90 days.
• Intercom keeps deleted contacts for 7 days before destroying them. Support conversations may stay in Intercom until you ask us to delete them. Email delivery logs held by Resend expire on their own.
• If our team deletes your account for you, we keep the email telling you how to cancel an App Store subscription.
• Feedback you posted on our public feedback board stays; ask us and we will remove your details from it.
• Copies of your name or email in our internal team notifications (Slack), subscription analytics (ChartMogul) and referral records (Rewardful) stay until you ask us to remove them.

You can delete your account in the mobile app under Settings → Profile → Delete Profile, in the web app under Settings, or by emailing [email protected]. Deleting your account cancels a web (Stripe) subscription and a Google Play subscription. An App Store subscription can only be cancelled by you in your Apple account settings, so while one is still renewing the app asks you to cancel it before deleting your account.

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy of it in a portable format, object to or restrict how we use it, and withdraw consent. You can export your transactions in the web app at any time. To use any of these rights, email [email protected]; we will respond within the time the law requires, and will not treat you differently for asking.

You can also complain to your data protection authority, for example your local supervisory authority in the EEA, the Information Commissioner's Office in the UK, or the Information Regulator in South Africa.

We collect the categories of information described in section 1: identifiers, financial information, commercial information (subscriptions), internet and device activity, and approximate location derived from your IP address. We do not sell personal information for money. Sending conversion events to Google Ads and Firebase to measure our advertising may count as "sharing" for cross-context behavioral advertising under California law.

Your privacy choices: to opt out of that sharing, enable Global Privacy Control (GPC) in your browser, which our website and web app honor. The mobile apps don't read GPC; on Android you can delete your advertising ID in your device settings. We use sensitive personal information (your financial account data) only to provide the Service you asked for.

FinWise is based in the United States, and your information is stored and processed in the United States and in the other countries where our providers operate. When we transfer personal information out of the EEA, the UK, Switzerland or South Africa, we rely on safeguards such as the European Commission's Standard Contractual Clauses and, where a provider is certified, the EU-U.S. Data Privacy Framework.

We protect your information with encryption in transit and at rest, additional encryption for bank connection tokens and two-factor authentication secrets, access controls, automated testing and security scanning, and regular security reviews. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires. To report a vulnerability, see our Security page.

FinWise is only for people aged 18 or over. We do not knowingly collect personal information from anyone under 18, and will delete it if we learn we have.

We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, tell you by email or in the app before they take effect.