1. Current safeguards
- HTTPS data transmission.
- Authentication and session management through Supabase Auth.
- Row Level Security policies on user tables to limit access to account-owned records.
- Privileged keys used only in the server environment and not intended for the browser.
- Email and password re-verification before irreversible account deletion.
- Controls to end the current, other, or all user sessions.
- Data export for personal backups.
2. Infrastructure
Database and authentication run on Supabase; the site and server functions run on Vercel. These providers apply their own technical and organizational safeguards. Application configuration remains the service owner’s responsibility.
3. User responsibilities
- Use a unique, long password and never share it, including with support.
- Protect your device with a PIN, encryption, and current updates.
- Avoid untrusted devices and end sessions on shared or lost devices.
- Check the usemyfinance.com address and do not enter credentials through suspicious links.
- Secure exported files because they may contain your complete financial history.
4. Limitations
Despite safeguards, software defects, attacks, compromised user devices, provider failures, and other risks remain. We do not claim absolute security or uninterrupted availability.
The service is not designed to store passwords, secret keys, full card details, state secrets, or other information requiring a specialized system.
5. Reporting an incident
Email usemyfinance.support@gmail.com with “Security” in the subject. Include the date, affected page, expected and actual behavior, browser, and device. Do not attach passwords, tokens, full exports, or other people’s data.
Do not continue testing if it could damage data, reduce availability, or expose another user’s information.
6. Response
We will aim to acknowledge the report, assess risk, contain impact, remediate, and notify affected people and competent authorities where and when required by applicable law.
Response time depends on severity, the information provided, and provider involvement.
7. If your account is at risk
- Change the password from a trusted device.
- End other or all sessions in Settings.
- Review transactions, profile settings, and email.
- If you cannot sign in, email usemyfinance.support@gmail.com from the account address.