Legal · Privacy Policy

Privacy Policy.

What we collect, how we use it, and the rights you have over your data. In short: your financial data is yours, and we don't sell it.

Last updated · 2026-11-11
01

Introduction

MyFinanceTools ("we", "us", "our") is a personal finance tracking and planning application. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using MyFinanceTools, you agree to the collection and use of information as described in this policy.

02

Information we collect

Account information

When you create an account, we collect:

  • Your email address
  • Your name, if you sign in with Google or another provider
  • The page you signed up from and, if any, the campaign that brought you there

If you choose to fill them in, we also store your date of birth (for retirement planning calculations), country of residence and preferred currency and language. All of these are optional.

Financial information

To provide portfolio tracking and financial planning, we store data you enter:

  • Monthly income and expenses
  • Savings rate and risk tolerance scores
  • Investment horizon and retirement goals

Portfolio data

If you use portfolio tracking, we store:

  • Cash, investment, pension, crypto, debt, real estate and alternative investment accounts
  • Account balances and holdings (stock / ETF tickers, quantities, cost basis)
  • Periodic portfolio snapshots for historical tracking

Subscription data

If you subscribe to a premium plan, we store your Stripe customer ID to manage your subscription. We never store credit card numbers or full payment details – these are handled entirely by Stripe.

Usage data

We collect anonymized usage data through analytics tools to understand how the application is used and improve the experience. This does not include personally identifiable information.

03

How we collect information

  • Directly from you – when you create an account, enter financial data, or use calculators
  • OAuth providers – if you sign in with Google or another provider, we receive your name and email
  • Automated analytics – anonymized page views and feature usage
04

How we store your data

  • Database – your data is stored in Supabase (PostgreSQL) with row-level security (RLS), ensuring you can only access your own data
  • Hosting – the application is hosted on Vercel
  • In transit – all data is transmitted over HTTPS
  • Local storage – your browser may cache preferences (currency, language) and authentication tokens locally
05

How we use your information

  • Providing the core service – portfolio tracking, net worth calculations, financial planning tools
  • Generating portfolio snapshots and financial insights
  • Processing premium subscriptions
  • Improving the application based on anonymized usage patterns

Your financial data is only visible to you. No other user and no third party can access your personal financial information. We do not sell your data. We do not use your financial data for advertising or share it with third parties for their marketing purposes.

If you use our calculators without being logged in, nothing you enter is stored: all calculations happen in your browser and your inputs are not sent to our servers.

06

Third-party services

We use the following third-party services:

  • Supabase – database hosting and user authentication
  • Vercel – application hosting and analytics
  • Umami – cookieless, anonymized usage analytics, hosted by us
  • Stripe – payment processing for premium subscriptions

Some features pass personal data to service providers acting on our behalf, only when you use them:

  • Email delivery: your email address and the content of the emails we send you (weekly summary, reminders, the newsletter if you subscribed), which can include how your portfolio moved
  • AI provider: when you ask for a suggested column mapping for an import file, the column headers and five sample rows, with account numbers, IBANs, emails and phone numbers masked; when you have AI sort imported expenses into your categories (Premium), each merchant or booking text once and the names of your categories, with the same details masked and without amounts or dates; when you use the Premium AI Advisor, your question and the profile and portfolio figures it needs (such as age, country and holdings), without your name or email
  • Contact form: the name, email address and message you send us

These providers are based in the United States, so this data is transferred outside Switzerland and the EU.

Each third-party service is governed by its own privacy policy. We recommend reviewing their policies for details on their data practices.

07

Cookies and local storage

  • Authentication tokens – stored locally to keep you signed in
  • Preference caches – currency, language, and profile data cached for performance
  • No analytics cookies – our analytics (Umami, which we host ourselves, and Vercel Analytics) are cookieless and store nothing on your device.

We do not use advertising cookies or tracking cookies for third-party ad networks.

08

Your rights

You have the right to:

  • Access – view all data we hold about you through your account dashboard and profile
  • Export: download your accounts, holdings and expenses as CSV files from your profile at any time, or contact us for a copy of anything else we hold
  • Correction – update your information at any time through your profile settings
  • Deletion: delete your account from your profile, which cancels any active Premium subscription and permanently removes all your data (profile, accounts, snapshots, goals, and achievements)
09

Data retention

  • Active accounts – your data is retained as long as your account is active
  • Deleted accounts – all associated data is permanently deleted via database cascade. This includes your profile, all financial accounts, portfolio snapshots, goals, and achievements. Any active Premium subscription is cancelled at the same time.
  • Analytics data – retained per each analytics vendor's own policy
10

Security

  • Row-level security (RLS) in Supabase ensures users can only access their own data
  • All communication is encrypted via HTTPS
  • Authentication is required for all personal data access
  • We do not store passwords directly – authentication is handled by Supabase Auth
11

Data breach notification

In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable data protection regulations.

12

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13

Contact

If you have questions about this Privacy Policy or your data, please contact us.