Privacy Policy

Last updated: August 3, 2026

1. What this policy covers

This policy explains what data Finami handles, where it is, and what we can and cannot do with it. It covers two things: the Finami app for iOS and Android, and the finami.app website. They work differently, so the website has its own section. It is written to be understood. If anything is unclear, write to us at soporte@theempire.tech.

2. The most important part: we cannot read your financial data

Your transactions, accounts, categories, debts, and reminders are encrypted inside your phone. The key that opens them is derived from something only you know: your PIN, your recovery phrase, or your biometrics. That key never leaves the device. We do not have it. So it is not that we decided not to look at your data: we cannot. Even if someone gained access to our servers, even if an authority demanded it, there is nothing readable to hand over.

3. How Finami works

Everything in the app is something you typed. The app does not connect to your bank accounts and does not import transactions from anywhere. That data is stored in an encrypted database inside your phone. At this stage, syncing is disabled: no financial data is uploaded to any server. Your biometrics (fingerprint or face) are not transmitted or stored anywhere. Your operating system validates them inside the phone, and the app only receives a yes or a no.

4. What we store on our server

This is everything that is on our server. There is nothing else: • Your email address and, if you entered it, your name. • Your password as a hash. The password itself is not stored: we store a mathematical result that cannot be reversed. • An identifier for your device and the date of your last sign-in. • Session tokens, and the temporary codes for email verification and password reset. Those codes expire and are single-use. • An encrypted recovery envelope: an opaque block of data that only opens with your recovery phrase. We cannot open it. All of that serves four purposes: creating your account, verifying your email, signing you in, and letting you recover access. Nothing else.

5. What we do not collect

This is worth stating explicitly, because earlier versions of this document claimed otherwise: • We do not collect data about your transactions, income, bank accounts, or credit cards. That information exists only on your phone, encrypted. With syncing disabled it does not even leave it. When syncing is enabled, it will travel end-to-end encrypted: the server would store it without being able to read it. • There are no usage analytics inside the app. We do not include any analytics or behavior-tracking tool. There are no advertising identifiers, no profiling, and no third parties watching what you do inside the app. • We do not collect demographic information: not age, not gender, not location, not income level. • There is no advertising in the app, and we do not sell or transfer your data to third parties for commercial purposes. • Your profile photo is not uploaded anywhere. It is stored encrypted on your phone.

6. What the server can see even though it cannot read your data

We would rather say this than look perfect. Today, with syncing disabled, the server sees nothing of your financial activity. When syncing is enabled, the server will store encrypted blocks. It will not be able to read their contents, but it will see how many records an account has, what type they are, and how often they change. That is unavoidable in any system that syncs record by record. It does not reveal how much you earn or what you spend it on, but it does reveal that you use the app and how intensely.

7. Permissions the app asks for

• Gallery or photos: only so you can pick a profile photo. That photo is stored encrypted on your phone and is not uploaded anywhere. • Biometrics: only to unlock the app, with the caveat already explained: your fingerprint or face never leaves the operating system. You can deny these permissions and keep using Finami. You only lose the feature attached to them.

8. If you lose your phone, you lose your data

Your data is encrypted on your phone and the key never leaves it. We do not keep a readable copy of your financial information. If the phone is lost, breaks, is stolen, or you uninstall the app, that data is gone. We cannot recover it or hand it to anyone, not even to you. At this stage the app does not offer any backup feature. If you need to keep a history outside the app, keep it on your own. We also cannot remotely delete or lock what is inside your phone, for the same reason: we do not have the key. For that, use your phone's screen lock and the remote wipe tools of iOS or Android.

9. Deleting your account

You can delete your account from within the app, without asking us and without explaining why. When you do, we delete from the server everything listed in section 4: your email, your name if you gave one, your password hash, the device identifier, the tokens, and the encrypted recovery envelope. That does not delete what is on your phone. It stays there, encrypted, until you uninstall the app. When you uninstall it, the data goes with it and cannot be recovered. If you would rather request it in writing, write to us at soporte@theempire.tech.

10. Who we share data with

Only two third parties are involved, and neither receives financial data: • Mailgun, our email delivery provider. It processes your email address and the contents of the account verification and password reset messages. • Our cloud infrastructure provider, where the server and its database run. It hosts what is listed in section 4, including the encrypted recovery envelope, which is unreadable to them as well. Exchange rates are requested by our server from a public source. That source receives no data about you. The app does not communicate with any third party on its own: everything goes through Finami's server. We would only hand data to an authority if the law required it, and the only thing we could hand over is what is in section 4.

11. Where the data is

Our servers are in the United States, in the us-east-1 region. If you live outside the United States, the data in section 4 — your email, your name, your password hash, and the rest — is stored and processed there, under United States law, which may offer different safeguards than your own country's. By using Finami you accept that transfer. It is not much information, but it is fair that you know where it is. Your financial data does not travel anywhere: it stays on your phone.

12. How long we keep the data

Your account data is kept for as long as the account exists. When you delete it, the data is deleted. The email verification and password reset codes expire and are single-use. Session tokens expire or are invalidated when you sign out.

13. Your rights

Over the data we do have — the data in section 4 — you can: • Access it: ask us for a copy of what is on the server for your account. • Correct it: fix your email or your name from the app, or ask us to. • Delete it: delete your account from the app, or ask us in writing. Write to us at soporte@theempire.tech from the email you registered with and we will get back to you. Over your financial data there is nothing to exercise with us: it is already in your hands alone.

14. Minimum age

Finami is not directed at children under 13, and we do not knowingly collect data from people that age. If we find that an account belongs to a child under 13, we delete it. If you are a parent or guardian and believe a child in your care created an account, write to us and we will delete it.

15. The finami.app website

The website is separate from the app and works differently. It uses Google Analytics to know how many visits it gets and which pages are viewed. That tool installs cookies and processes browsing data — such as your IP address and your browser — on Google's servers. You can block those cookies from your browser or install the Google Analytics opt-out add-on. The site also stores a cookie with the language you chose, so it does not have to ask again. If you write to us through the contact form, we receive what you put in it and use it only to reply to you. None of this happens inside the app. The app carries no Google Analytics and no other measurement tool.

16. What we declare on the App Store and Google Play

What this document says is exactly what we declare on the store listings: we collect email address and name, for the purpose of managing your account, linked to your identity, and we do not use them for tracking or advertising. Nothing else. If that ever changes, we will update this policy and the store listings before we publish the version of the app that changes it.

17. Changes to this policy

We may update this policy. When we do, we will change the date shown above and, if the change is significant, we will let you know through the app or at the email you registered with. If a change does not sit well with you, you can delete your account and uninstall the app.

18. Contact

Questions about this policy or about what data we hold? Write to us at soporte@theempire.tech. Address: Estado Miranda, La Trinidad, Urbanización La Bonita, Resd. La Loma, floor 11, Caracas, Venezuela.

Home