Privacy notice

Faldo is a personal money app. This notice explains what it collects, why, who helps run it, how long things are kept and what you can do about it. Faldo is operated by [operator's legal name], [contact address]. Questions: [privacy contact email].

What Faldo collects

• Your account: email address, display name, and a scrambled (hashed) form of your password. If you sign in with Google or Apple, the account id they give Faldo and the email they share.
• What you record: accounts (names, types, balances you enter and, if you add them, the last four digits of a card or account), transactions, budgets, goals, bills, money owed, planned purchases, notes and things you ask Faldo to remember.
• Receipts and statements you add: photos (re-saved without location or other photo data) and bank or e-wallet CSV files you import.
• Chats with Faldo: your messages and Faldo's answers, and short summaries used to recall earlier chats.
• Sign-in and device details: which browser and device each signed-in session is on, and when it was last used. If you turn on phone notifications, the address your browser gives for sending them.

Faldo never asks for full card numbers, CVVs, PINs or bank passwords, and doesn't connect to your bank or e-wallet.

Why

• To run the app for you: show your balances, calculate Safe to Spend, forecasts and budgets, and keep your records.
• To keep your account secure: sign-in, sessions, limits on repeated attempts, and emails for resetting a password or confirming your address.
• To answer your questions and read receipts with AI, only if you allow it (below).

Faldo doesn't sell your data, show ads, or use analytics or tracking tools.

AI

Faldo's numbers always come from its own calculations. An outside AI service is used only to write answers, read typed entries it can't understand on its own rules, read receipt photos and word short summaries, and only after you allow it. You can say no or change your mind in Settings, Your data; Faldo then works on its own rules.

Checking which AI service this Faldo uses…

Faldo limits how much it sends: it doesn't send your whole history, only a summary of your money and what a question needs. What an AI service does with data is governed by its own terms, linked above; deleting your Faldo account doesn't delete what was already sent to it.

Who helps run Faldo

• Vercel hosts the app. Faldo's server runs in Vercel's Tokyo region.
• [Database host and region] stores your data.
• The AI service listed above, if you allow it.
• [Email provider] sends password-reset and confirmation emails, if email is set up.
• Google or Apple, if you choose to sign in with them.
• Your browser's push service (for example Google, Apple or Mozilla) delivers phone notifications, if you turn them on.

Cookies and storage on your device

• faldo_session keeps you signed in. It can't be read by the page's scripts. With “Remember me” it lasts 30 days from your last visit; without it, it ends when you close the browser.
• faldo_oauth exists for up to 10 minutes while you sign in with Google or Apple, to check the sign-in really started here.
• Your browser also keeps a few preferences for this device, like theme, sounds and whether amounts are hidden.

These are needed for the app to work; there are no advertising or analytics cookies.

How long things are kept

• Your records, receipts and chats: until you delete them or your account.
• Signed-in sessions: they end after 30 days without use (12 hours without “Remember me”), or when you sign out or sign out other devices.
• Password-reset links: 30 minutes. Email confirmation links: 72 hours.
• Records that stop a double tap from saving twice: 7 days. Counters that limit repeated attempts and daily AI use: up to 2 days, without your name or email.
• Server error logs, with emails, keys and reset links removed: [hosting log retention].
• Database backups kept by the database host: [backup retention].

Your choices

• See and download your data: Settings, Your data (a readable copy, or a full backup).
• Correct or delete any record in the app, or delete your whole account in Settings, Your data.
• Allow or stop outside AI, hide amounts on a device, and turn notifications on or off.
• Sign out other devices in Settings, Password and devices.

[Rights and complaint routes under the Philippine Data Privacy Act of 2012 and any other law that applies, to be written with a qualified professional.]

Security

Faldo keeps each person's data separate in the database, stores passwords only in hashed form, uses secure cookies, and limits repeated sign-in attempts. No system is perfectly secure; if something goes wrong that affects your data, [breach notification commitment].

Changes

If this notice changes in a way that matters, Faldo will say so in the app before the change applies.