Privacy notice
Your finances are personal and sensitive information. This notice explains what data Fineri keeps, what it uses it for, where it stores it, how it protects it and what rights you have over it, under Mexican law on the protection of personal data held by private parties.
1. Who is responsible for your data
Fineri, a personal-finance service operated from Mexico (web at fineri.app and apps for iPhone, iPad and Android), is responsible for processing your personal data. The full name or legal name of the party responsible and its address will be stated in the final version of this notice.
2. Our commitments
- Fineri does not sell your data and does not trade with it in any way. That is not our business model: Fineri is funded by its paid plans.
- We only keep what the service needs to work.
- Any other use of your data in the future would only happen with your explicit confirmation, which we would ask for first.
- We only use cookies needed for your session, security and preferences such as language. We do not use advertising cookies.
- Your data travels encrypted (HTTPS/TLS) and is stored encrypted at rest.
3. What data we process
- Account data: name, e-mail address, profile photo (if you upload one), language, country and currency, and any profile details you choose to add.
- Access and security data: your password, stored only in encrypted, irreversible form (a hash); your passkeys (only their public part, never your fingerprint or face); the setup of your second verification step and your backup codes; your sessions, with the IP address and the type of device or browser you sign in from.
- If you sign in with Google: the name, e-mail, photo and language Google shares with us.
- Financial data you record: accounts, balances, transactions, categories, tags, budgets, goals, savings, recurring expenses, notes and the names of the people you share expenses with.
- What you send to the artificial-intelligence features: your messages to the assistant, the audio if you dictate, and the documents you upload to the reader (statements, receipts, invoices).
- Plan data: the plan you have and the status of your subscription. Your card details are received and stored by Stripe, not by Fineri.
- Technical data needed to operate and protect the service, such as error and security logs.
By their nature, your financial data are data about your assets (“datos patrimoniales” under Mexican law). Fineri does not ask for your bank passwords.
4. What we use it for
We use your data for these purposes, all needed to provide the service:
- creating and managing your account and letting you sign in securely;
- storing, showing and syncing your information between the web and your devices;
- calculating your analyses, budgets, goals, forecasts and suggestions;
- answering your questions in the assistant and reading the documents you upload;
- charging for and managing your plan, if you have a paid one;
- sending you necessary e-mails about your account (for example, about security or your plan);
- preventing fraud and unauthorized access, and fixing errors;
- complying with legal obligations.
We do not use your data for advertising, we do not build profiles for third parties and we do not sell it. If in the future we wanted to use it for a different purpose, we would tell you first and would only do so with your explicit confirmation.
5. Legal basis and consent
We process your data because it is necessary to perform the contract you accept when you create your account (the terms and conditions) and with your consent. Since your financial data are data about your assets, we ask for your express consent: you give it by ticking the acceptance box when you sign up, after reading this notice. We store the date and the version you accepted.
You can withdraw your consent at any time by deleting your account or writing to us. Keep in mind that without that data we cannot keep providing the service.
6. Artificial intelligence and your data
When you use the assistant or the document reader, we send artificial-intelligence model providers only the part of your message, your data or the document needed to answer you. Those providers process it to generate the answer, under their own terms. Wherever the provider allows it, we choose the options under which that information is not used to train its models.
What the artificial intelligence proposes is not saved to your account until you confirm it.
7. Where it is stored and how we protect it
Your data is stored on servers of cloud-infrastructure providers, which may be outside Mexico (for example, in the United States). We protect it like this:
- encryption in transit: all communication with Fineri travels over HTTPS/TLS;
- encryption at rest: the database that holds your information is stored encrypted;
- access to your account with a second verification step (authenticator app or passkey) and extra confirmations for sensitive actions, such as changing your factors or deleting your account;
- internal access limited to what is needed to operate and support the service.
No system is completely infallible. If a security breach significantly affecting your rights occurred, we would tell you without undue delay, as the law requires.
10. How long we keep it
We keep your data while you have your account. When you delete it, we erase your account and your financial data. Backups that might contain them are deleted as those backups are renewed, within a limited period. We only keep what a law requires us to keep (for example, payment records for tax obligations) and only for as long as that law says.
11. Your rights
You have the right to access your data, rectify it, cancel it and object to its processing (the “ARCO” rights under Mexican law), as well as to withdraw your consent and limit its use. You can do many of these things yourself in the app:
- access: you see all your information in the app and can download your transactions;
- rectification: you edit your profile details and financial information whenever you want;
- cancellation: you delete your account and your data from your profile;
- objection and withdrawal: you can write to us to object to a specific use or withdraw your consent.
To exercise any of these rights in writing, write to us through the contact channel at the end of this notice with your name, your account's e-mail, the right you want to exercise and a clear description of your request. To protect your account, we may ask you to confirm your identity. We will answer within the time limits set by law. If you believe we did not handle your request, you can go to the competent Mexican data-protection authority.
12. Minors
Fineri is meant for adults. We do not knowingly collect data from minors. If you believe a minor created an account, write to us and we will delete it.
13. Changes to this notice
Fineri reserves the right to change this notice in the future. We will always tell you beforehand and in full what changes, and ask you to read and accept the new version before applying it; a new use of your data would never start without your explicit confirmation. Each version has a date and a version number at the top.
14. Contact
For questions about this notice or to exercise your rights, write to us through the contact channel shown on fineri.app (the “Contact” link at the bottom of the home page).