Privacy Policy

Self Finance · Version 2026-10-22 · October 22, 2026

1. Service and data processed

Self Finance organizes personal and family finances. We process email, account ID, name, optional photo, preferences, authentication links, invitations and acceptance records. Income, expenses, amounts, currencies, categories, descriptions, schedules, work days and hours are provided by users for financial features and reports.

2. Purposes and family sharing

We use data to authenticate users, maintain accounts, process invitations, display records and reports, store preferences, prevent abuse and handle requests. By accepting an invitation, the user authorizes the intended sharing with family members in the service. Avoid entering third-party or sensitive information in descriptions. Data is not offered for sale.

3. Social authentication

Google, Microsoft and Facebook may provide their provider ID, name, email and photo according to authorized permissions. Supabase Auth processes authentication. The service does not receive your password for these providers. Linking must respect the account's verified email; matching email alone does not replace authentication. You may request disconnection in My profile while keeping another working sign-in method.

4. Infrastructure, storage and providers

We use Supabase for authentication, database and file storage; Sites infrastructure hosts the application, running on Cloudflare when necessary. Cloudflare Turnstile helps prevent automated abuse. These providers may process technical data such as IP address, browser, timestamps and security events required for their services. Processing may occur outside your country, subject to providers' terms and safeguards.

5. Security and access

The site uses HTTPS and database access rules (RLS) to restrict data by account, family and permissions. Server secrets must not be sent to browsers. These measures reduce risk but do not guarantee absolute security. We do not claim end-to-end encryption for financial records or that authorized infrastructure operators cannot technically access them. Protect your credentials and use trusted devices.

6. Cookies and browser storage

Cookies and local or session storage maintain authentication, login flow, preferences and, if selected, browser trust for up to 15 days. Turnstile may use mechanisms necessary to prevent abuse. This policy does not authorize advertising or optional tracking. Clearing browser data may end sessions and remove local preferences.

7. Retention and deletion

Account and financial data are retained as needed for the service and stated purposes. Facebook data deletion removes that provider's links and unnecessary data without deleting the main account or financial records. If Facebook is the only sign-in method, strictly necessary information may remain until an alternative is established. Minimum records for security, obligations and proof of requests may be retained as required. Backups follow providers' cycles and are not necessarily erased immediately.

8. Rights and contact

Subject to applicable law, you may request information, access, correction, portability where available, processing review, consent withdrawal and deletion. Withdrawal does not undo prior lawful processing. For general requests or account closure, contact the person who provided your invitation and identify the request as “Privacy — Self Finance”. This is the available operational channel; do not send passwords or tokens. For Facebook data, use the public deletion page or My profile. Requests requiring identification will be verified before fulfillment.

9. Grounds and updates

Processing is performed to provide the requested service, protect accounts, meet applicable obligations and, when needed, with specific consent. Accepting the terms is not blanket consent for any use of data. Material changes to this policy will be presented in the service with a new version.