Privacy Policy
This Policy explains how Fin collects, uses, discloses, stores, and protects personal information.
1. Who is responsible for your information
Madcode AI Studio, a sole proprietorship registered in Quebec, Canada, operates Fin and is responsible for personal information under its control. Privacy Officer: Owner and Privacy Officer, Madcode AI Studio Email: admin@madcode.org Address: 2525 Boulevard Cavendish, Montreal, Quebec H4B 2Y6, Canada
2. Information we collect
Depending on the features you use, we collect: • Account information: name, email address, profile information, authentication identifiers, and account settings. • Financial records: transactions, accounts, balances, budgets, goals, categories, notes, receipts, and split-group records. • Connected-account data: selected account details, balances, liabilities when enabled, and transaction history supplied by Plaid or another disclosed provider. • AI content: prompts, messages, responses, and relevant Fin context when you choose an AI feature. • Device and service data: app version, operating system, notification tokens, security events, request identifiers, diagnostics, and privacy-safe usage events. • Subscription and support data: entitlement status, app-store transaction references, support messages, and privacy requests.
3. Sources of information
We receive information directly from you, from features you use, from people who interact with you in collaborative features, from authentication and app-store providers, and—only after you choose to connect an account—from the connected-account provider. Fin does not receive or store your bank username or password.
4. How we use information
We use personal information to: • create, authenticate, and secure your account; • store, display, categorize, and synchronize financial records; • provide budgets, goals, analytics, alerts, receipts, and split features; • provide optional AI features when requested; • manage subscriptions and enabled notifications; • detect abuse, investigate incidents, debug failures, and improve reliability; • answer support, access, correction, export, and deletion requests; and • comply with legal obligations and enforce our Terms. Fin does not use connected financial data for targeted advertising, does not sell personal information, and does not use it to make lending or investment decisions.
5. Connected financial accounts
Connecting a financial account is optional. Plaid or another disclosed provider handles institution sign-in and sends the data you authorize to Fin. Fin keeps provider access credentials on the server with application-level encryption and does not send them to the mobile app. You can disconnect a bank in Fin to stop future synchronization and request provider revocation. If you plan to delete your entire Fin account, disconnecting first is the clearest way to revoke the provider connection. Account deletion removes Fin's stored connection credentials from active systems, subject to limited security, legal, and backup retention described below.
6. Optional AI processing
AI features are optional and activate when you choose to use them. The prompt and relevant context needed for the request may be sent to Fin's AI processing provider. Do not include information you do not want processed for that request. AI responses may be stored with your chat history so you can revisit them. You may delete individual chats or your account. AI output is not used to make a legally binding decision about you.
7. When we disclose information
We disclose only what is reasonably needed to: • cloud hosting, database, storage, authentication, security, email, notification, diagnostics, subscription, app-store, connected-account, and AI service providers; • other users when you deliberately use a collaborative feature such as a split group; • professional advisers or a successor organization under confidentiality safeguards; or • authorities or other parties when reasonably required by law, safety, fraud prevention, or protection of rights. Providers may include Microsoft Azure, Google or Apple for sign-in, Plaid for connected accounts, Apple and Google app stores, RevenueCat for subscription entitlements, and a private AI processing provider when AI is used.
8. Processing outside Quebec or Canada
Some providers and systems may process or store information outside Quebec or Canada, including in the United States. Information handled in another jurisdiction may be available to courts, law enforcement, or national-security authorities under that jurisdiction's laws. We use contractual, access, encryption, and vendor-review safeguards appropriate to the information and service.
9. Retention and deletion
We retain account and financial information while your account is active and as needed to provide the features you request. When you delete your account, Fin deletes or de-identifies associated active account data, subject to records reasonably needed for security, fraud prevention, disputes, legal compliance, and backup recovery. Backups and operational logs expire through controlled retention and backup-rotation processes. Service providers may retain limited records under their own legal and security obligations. We do not retain personal information longer than reasonably necessary for the stated purpose.
10. Your choices and privacy rights
Subject to applicable law, you may ask to access, correct, or obtain a portable copy of your personal information; withdraw consent for optional processing; disconnect a bank; delete chats or other records; delete your account; and complain about our handling of your information. You may use Fin with manual information without connecting a bank. You may also choose not to use AI features. Withdrawing consent does not affect processing already lawfully completed and may make an optional feature unavailable. Submit a request in Settings or email admin@madcode.org. We may verify your identity before completing a request.
11. United States privacy disclosures
Fin provides access, correction, deletion, and export request options regardless of state, subject to lawful exceptions. Fin does not sell personal information and does not share it for cross-context behavioural advertising. Residents of a state with additional privacy rights may contact us to exercise those rights or appeal a denied request. We will not discriminate against you for making a privacy request.
12. Canada and Quebec privacy disclosures
You may request access to and correction of personal information, withdraw valid consent, and raise a complaint with our Privacy Officer. Quebec residents may also request computerized personal information in a structured, commonly used technological format where the law applies. If we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec, as applicable.
13. Security and incidents
We use safeguards including HTTPS/TLS, authentication and authorization controls, encrypted server-side connected-account tokens, restricted operational access, and logging designed to avoid unnecessary financial content. No system can guarantee absolute security. We investigate suspected incidents and notify affected people and regulators when required by applicable law. Never send bank passwords or full financial credentials to support.
14. Age requirement
Fin is intended only for people who are at least 18 years old. We do not knowingly create accounts for children. Contact us if you believe a person under 18 has provided personal information so we can investigate and take appropriate action.
15. Changes and contact
We may update this Policy when our services, providers, or legal obligations change. We will provide reasonable notice of material changes by email, in-app notice, or another appropriate method. The date and version above identify the applicable Policy. Privacy Officer: Owner and Privacy Officer, Madcode AI Studio Email: admin@madcode.org Address: 2525 Boulevard Cavendish, Montreal, Quebec H4B 2Y6, Canada