1. Who is responsible
Personal-data controller: Maksim Andreevich Pankrushov, an individual who is not registered as an individual entrepreneur, Rudny, Republic of Kazakhstan. Service: Use Finance (also displayed as MyFinance in the interface).
For privacy questions, rights requests, or complaints, email usemyfinance.support@gmail.com.
2. Scope
This Policy applies to usemyfinance.com, the web application, the installed PWA, user accounts, and support communications.
Third-party links lead to services with their own policies. Their independent processing is not governed by this Policy.
3. Data we process
- Account data: email, display name, user ID, email-confirmation status, and account creation/sign-in dates.
- Preferences: language, primary currency, country or region, time zone, and date format.
- Financial records: income, expenses, amounts, dates, descriptions, categories and groups, budgets, plans, assets, liabilities, and capital history.
- Import data: confirmed transactions, file name and hash, sheet, source type, and processed/skipped counts. The complete original file is not uploaded to the application database.
- Technical data: IP address, browser and device type, request logs, errors, access times, and security data that may be processed by hosting and infrastructure providers.
- Support data: email, message content, and information you voluntarily provide to resolve an issue.
4. Sources of data
Most data is provided directly when you register, complete forms, import records, or contact support. Technical data is generated when the site, authentication, and infrastructure security operate.
We do not connect to your bank account or receive bank transactions unless you enter or import them yourself.
5. Purposes
- Create and protect accounts, sign users in, and restore access.
- Store, display, calculate, and synchronize financial records and preferences.
- Import confirmed data, export a copy, and delete an account.
- Provide support, diagnose errors, prevent abuse, and maintain security.
- Comply with law and protect the rights of users and the owner.
- Improve the service using de-identified or aggregated information that cannot reasonably be linked to an individual.
6. Legal bases
Depending on the country and context, processing relies on performance of the user agreement, your consent, legal obligations, and legitimate interests in securing and maintaining the service where that basis is available.
For Kazakhstan, registration includes separate electronic consent to collection and processing. Withdrawal may make continued service impossible but does not invalidate prior lawful processing or legal retention duties.
8. Storage location and international processing
As of this Policy, the project’s primary Supabase database is in ap-northeast-2, Seoul, Republic of Korea. The application is hosted on Vercel; content delivery, technical logs, and request processing may use Vercel’s international infrastructure and providers.
Data may therefore be transferred and processed outside your country. We use provider contractual terms and other available safeguards, but laws and protection levels may differ.
For users in Kazakhstan, we plan to localize primary storage in the Republic of Kazakhstan. Until migration is complete, this disclosure and consent to cross-border transfer do not replace mandatory data-localization requirements under applicable law.
If the current storage geography is unacceptable to you, do not create an account or export and delete your existing account.
9. Retention
Account data and financial records are retained while the account is active or as needed to provide the service. Individual records can be deleted in the interface.
When an account is deleted, active records are removed from the primary database. Limited copies may temporarily remain in backups, security logs, or provider systems for their retention cycles or where required by law, fraud prevention, or dispute resolution. They are then deleted or de-identified.
Support messages are retained as reasonably necessary to answer, document fulfillment, and protect legitimate interests.
10. Your rights
Depending on applicable law, you may request confirmation, access and a copy, correction, completion, erasure, restriction or cessation, portability, withdrawal of consent, information on sources and recipients, and the right to complain to a competent authority.
You can edit profile data, export JSON/CSV, and delete your account in the app. For other requests, email usemyfinance.support@gmail.com. We may need to verify your identity and account.
Rights are not absolute: law may permit or require retention of certain information or refusal of a specific request with reasons.
11. Security
We use HTTPS, Supabase Auth, database row-level access controls, account ownership checks, server-side privileged keys, and credential re-verification before account deletion.
No transmission or storage method is completely secure. Use a unique password, secure your device, and sign out from devices you do not control.
13. Children
The service is for adults aged 18 and over. We do not knowingly collect children’s data. Contact us if you believe a minor created an account so we can investigate and erase the data.
14. Changes and contact
We may update this Policy when the service, providers, law, or processing practices change. The current date and version appear above, and material changes may receive additional notice.
Privacy contact: usemyfinance.support@gmail.com. The Russian version controls in case of translation differences unless mandatory law requires otherwise.