Legal
Privacy Policy
Effective date: August 25, 2026
This Privacy Policy explains how WiseFin collects, uses, stores, and shares personal and financial information. It is written for PIPEDA and similar Canadian privacy laws, and for Google Play and Apple App Store requirements.
1. Who we are
WiseFin is operated by Shalin Patel. For privacy requests, email support@wisefin.ca.
WiseFin is a personal finance tracker. You enter or import your own financial records. We do not connect directly to your bank.
2. Information we collect
Account identifiers: your Supabase Auth user ID, and the name and email associated with the Google (or Apple) account you use to sign in.
Financial information you provide: household profile names, account nicknames and institutions, balances, transactions (amount, date, description, category), budgets, and categories.
Credit cards (optional): you may link a credit card account to a product in our bundled Canadian catalog (or enter reward rates yourself). We store the product name, catalog id, and cached benefit summaries — never a card number (PAN), CVV, or expiry date.
Insurance (optional): you may record a policy for your own reference — type, a name you choose, provider, coverage amount, and notes. We do not store policy numbers, policy PDFs, or claim documents.
Statement import: when you import a PDF or CSV, the file is read on your device only. We extract candidate transaction rows for your review. The statement file is not saved to WiseFin's ledger and is not uploaded to our servers. After parsing — or if you cancel — the staged copy is discarded. Only transactions you explicitly import are stored. On iOS, sharing a PDF into WiseFin may briefly place a copy in the app group until import starts; that temporary file is removed after successful handoff. Pending shares older than one hour are discarded the next time the app checks for a share; this is not a background deletion timer.
Security data: a one-way hash of your app PIN, salt, lockout state, and whether biometric unlock is enabled. The PIN itself is never stored or synced. On Android this material is kept in EncryptedSharedPreferences (Android Keystore); on iOS in Keychain (AfterFirstUnlockThisDeviceOnly, not iCloud backup).
Device registration: a random device identifier stored only on that phone or tablet, plus platform, a short device label, and last-seen time. We keep at most two devices signed in per WiseFin account so we can sync your household and sign a removed device out.
We do not run a separate analytics or advertising SDK. Sign-in uses Google or Apple through Supabase Auth. We do not sell this data.
We do not ask for government ID, Social Insurance Number, full card numbers, or bank passwords. If a statement you import contains sensitive numbers, that text may be parsed locally and transaction descriptions may be stored.
3. How we use information
To create and authenticate your account; limit sign-in to two devices; sync your data across those devices; show dashboards, budgets, and spending; import and classify transactions; look up credit-card product benefits; lock the app with PIN or biometrics; diagnose problems; and comply with law.
We do not use your ledger to train public generative-AI models. On-device Gemini Nano (Android ML Kit GenAI Prompt API) may receive transaction descriptions and your category list to suggest clean merchant names and categories. See the AI Disclosure.
4. Where data is stored
On device: Room (SQLite) holds your ledger. Android stores databases in noBackupFilesDir (Auto Backup and device transfer are disabled). iOS stores data in Application Support with backup exclusion and NSFileProtectionComplete.
In the cloud: when you are signed in, profiles, accounts, transactions, budgets, categories, holdings, held-card product links, and insurance entries sync to a Supabase PostgreSQL database scoped by household membership. Supabase (and its infrastructure providers) may process this data in the region chosen for the project, which may be outside Canada.
Statement PDFs and CSVs are not kept in Room or Postgres after import. PIN hashes do not sync. Sign-out is blocked when queued local changes remain. A completed sign-out wipes the local database on that device; it does not by itself delete cloud data.
5. Sharing
We do not sell your personal or financial information.
Processors: Supabase (Authentication and PostgreSQL hosting), Google (Sign-In / Credential Manager, and on Android ML Kit), and Apple (Sign in with Apple). Credit-card product benefits come from a catalog shipped in the app, not from a live web lookup. They act as service providers under their terms.
We may disclose information if required by law, to protect rights and safety, or in connection with a transfer of the app's operations (you would be notified if practicable).
Household profiles share one signed-in account. Anyone who unlocks WiseFin on a device can see all profiles on that account. That is expected family sharing, not a transfer to a third party.
6. Security
We use hashed PINs, optional biometrics, FLAG_SECURE on Android recents, an inactivity lock, and OS file protection. Cloud rows are scoped by household membership and enforced with PostgreSQL row-level security.
No method of transmission or storage is 100% secure. You are responsible for device lock, PIN secrecy, and who can use your Google account.
7. Retention
We keep cloud data until you delete your account or we delete it after an inactivity or legal requirement. Local data remains until you log out, uninstall, or wipe the device.
Backups Supabase or its infrastructure providers retain may persist for a limited period after deletion. We will not use residual backups to restore your account except as required by law.
8. Your rights
Subject to PIPEDA and similar laws, you may request access, correction, or deletion of personal information we hold, and withdraw consent where processing is consent-based (for example by deleting your account).
In-app: you can edit or delete profiles, accounts, transactions, budgets, categories, held cards, and insurance policy names. Logout wipes local data. For full account and cloud ledger deletion, follow the Data & Account Deletion policy or email support@wisefin.ca.
You may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner if you are not satisfied with our response.
9. Children
WiseFin is not directed to children under 13, and you must be the age of majority to create an account. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.
10. International transfers
Supabase, Google Sign-In, and Apple may store and process data in the United States and other countries. Those countries may have different privacy laws than Canada. By using WiseFin you consent to that transfer for the purposes described here.
11. Changes
We may update this policy. The effective date will change. Material changes will be noted in the app or store listing where practical. Continued use after the effective date means you accept the updated policy.
12. Contact
Privacy contact: Shalin Patel, support@wisefin.ca.
Public copy of this policy: https://wisefin.ca/privacy.html