Privacy Policy — FinanceXE
Last updated: September 28, 2026
This policy explains what data FinanceXE collects, why, and what your rights are, in line with Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
Who is responsible
The data controller is Pablo Rodrigo Alves da Silva, contact: help@financexe.com.br.
Data we collect
- Account: name, email and password (the password is stored encrypted by the authentication provider; we have no access to it). If you sign in with Apple or Google, we receive the name and email those services provide.
- Financial data you enter: expenses, income, categories, cost centers, accounts and cards (name, closing and due days, limit, last digits if you provide them), bill payments, budgets, recurrences, transfers, savings goals, net worth (assets and debts you enter), categorization rules and, for expenses in another currency, the original amount and currency.
- Attached photos: when you attach a photo (invoice, receipt) to an entry on the Premium plan, it is uploaded to our private storage so it appears on your other devices and for your family.
- Receipt scanning: when you use "Scan receipt", the recognized text is saved with the expense.
- Subscription: plan, expiry and purchase identifiers provided by the App Store or Google Play, to unlock Premium.
- Family: if you join a family, your name and, if you turn on sharing, your entries are visible to the other members.
- These stay only on your device and are not sent to us: preferences (language, hide values), the issuer details for receipts you generate (name, tax ID, city and logo), exchange rates you typed and the backup files you export.
We do not collect precise location, contacts or browsing data, and we never connect to your bank (no Open Finance, no bank passwords). On the free plan, Google's ad service collects the data described in "Ads (free plan)".
What is read only on your device
- Receipt photos: reading happens on the device (Vision on iPhone, ML Kit on Android). The photo is never sent to any server and is deleted right after reading. Only the recognized text is kept.
- Shared receipts: when you share a receipt (image or PDF) from another app with FinanceXE, it is read on the device to fill in the expense and the file is deleted right after.
- Imported statements (OFX/CSV): the file is read on the device. Only the entries you confirm are saved.
- Bank notifications (Android, optional): if you allow notification access, the app reads only notifications from the banking apps on our list, and only those with an amount, to suggest entries in the Inbox. They stay on the device until you log or dismiss them; nothing is sent to us. You can turn this off anytime in Android Settings › Notification access.
- Apple Pay via the Shortcuts app (iPhone, optional): the automation you set up passes amount, merchant and card name only so the app can open the pre-filled expense.
On-device artificial intelligence
On the Premium plan, on an iPhone with Apple Intelligence (iOS 26 or later) or an Android device with Gemini Nano, FinanceXE uses the AI model that runs on the device itself to suggest categories, fill in an entry from a sentence, read receipt text and write the monthly summary. The analyzed text is processed on the device and is not sent to us, Apple, Google or anyone else. You always review the result before saving.
Home screen widget
If you add the balance widget, it shows your account balance and this month's spending on the home screen. With "Hide values" on, amounts appear as ••••.
Web version
The web version (https://app.financexe.com.br) is part of Premium and uses the same account and data as the app.
- No financial data stays in the browser: entries are loaded from the server each time you open it and kept only in the tab's memory. When you close the tab, they are gone from the computer.
- Signed in only until you close the tab: the session is kept in the tab's own storage (sessionStorage) and deleted when you close it. Signing out also clears what was loaded.
- Stored in the browser: only preferences (language, hide values, alerts already seen) and your Premium expiry, in the site's local storage.
- No ads, no tracking cookies and no analytics tools.
- Attached photos go straight to our private storage (the web keeps no copy).
- Files you download (reports, receipts, backup) are saved to your computer's downloads folder.
- Signing in with Google or Apple takes you to their page, which follows their own privacy policy.
How we use data
- To show your finances and sync them across your devices and with your family.
- To check with the App Store or Google Play that your subscription is valid (fraud prevention).
- To send account emails (sign-up confirmation and password recovery).
We do not sell or rent your data, and your financial data is never used for advertising. The free plan shows ads (see below); Premium has no ads.
Who we share data with
- Supabase (Supabase Inc.): hosting of the database, attached photos and authentication.
- Transactional email provider (Resend), only to send your account emails.
- Cloudflare (Cloudflare Inc.): hosting of the website and the web version. To deliver the pages and protect them from attacks, it receives your IP address and technical request data (browser, time) — not your financial data.
- Apple (App Store) and Google (Google Play), to process and verify your subscription.
- Members of your family in the app, as described above.
- Google (AdMob), only on the free plan, to show ads — see "Ads (free plan)".
These services may store data outside Brazil, with the safeguards required by the LGPD.
Ads (free plan)
On the free plan, the app shows banner ads provided by Google AdMob. To show and measure ads and prevent fraud, Google's SDK may collect: device and app information (model, OS, language), IP address (used for approximate location), ad interactions, diagnostics and the device's advertising identifier — on iPhone only if you tap "Allow" on the tracking prompt; on Android, the advertising ID, which you can reset or turn off in the device settings.
- Your financial data (entries, amounts, categories, accounts) is never sent to Google or used to choose ads.
- Where the law requires it (e.g. the European Union and the UK), we ask for your consent first; you can change your choice in Settings → Ad privacy. On iPhone, also in Settings → Privacy & Security → Tracking.
- Premium subscribers see no ads and the ad SDK is not started.
- How Google uses this data: https://policies.google.com/technologies/partner-sites
Storage and security
Data travels encrypted (HTTPS) and is stored in a database with per-user access rules: each person sees only their own data and what their family shares. Attached photos are kept in private storage under the same rules. A copy stays on your device so the app works offline. On the free plan (after the 7-day free Premium) sync is off: new entries stay on the device only until you subscribe — use Settings › Backup to keep a copy.
How long we keep data
- For as long as your account exists.
- Items you delete are marked as deleted (so your other devices know) and permanently erased within 180 days.
- When you delete your account, your data and attached photos are erased from our servers immediately; the provider's automatic backups are purged within 7 days.
- Subscription purchase receipts follow Apple's and Google's rules.
Your rights
Under the LGPD you may confirm processing, access, correct, export (Reports → Excel or Settings → Backup) and delete your data, and withdraw consent.
Children
FinanceXE is not intended for anyone under 18.
Changes
If this policy changes, we will let you know in the app. The date at the top shows the version in force.