Privacy Policy

1. Who we are

Finiverse is a personal finance app for iPhone and Android, developed and operated by Finiverse LTD, a company registered in England and Wales (company no. 17440736), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Finiverse LTD is the data controller for the personal data described here.

This policy applies to the Finiverse iOS app, the Finiverse Android app, and this website (finiverseapp.com). For any privacy question, write to hello@finiverseapp.com.

2. Data we collect

We only collect what we need to run the features you use. Most of it is information you type in yourself.

a) Account information

Your name, email address, country, preferred currency and language. If you sign in with Apple or Google, we receive the name and email those services share with us. Passwords are handled by Firebase Authentication; we never see them in plain text.

b) Financial records

Income, expenses, debts, savings goals, wishlist items, payment reminders and card information that you choose to add. Sensitive fields such as card details and personal notes get an extra layer of encryption (see Security).

c) Emotional check-ins

Mood, energy and stress levels, and notes you record. These power your emotion × spending insights. Because this can say something about your wellbeing, we treat it with the same care as health data.

d) Conversations with Sam

Messages you send to Sam and Sam's replies, stored so Sam can keep context between sessions. If you talk to Sam by voice, your phone's speech service (from Apple or Google) turns the audio into text; Finiverse only receives and stores the text, never the recording.

e) Photos of receipts and cards

When you scan a receipt or a card, the text is read on your phone (Apple Vision on iOS, Google ML Kit on Android). The photo does not leave your phone, unless no clear total is found and you choose to send that receipt to Sam.

f) Health data (optional)

Sleep, heart rate variability, workouts and, on iPhone, State of Mind, read from Apple Health or Health Connect only if you allow it. Section 4 explains exactly what we read and why.

g) Approximate location (optional, Android)

If you allow it, the Android app uses your approximate (not precise) location to show the local weather on the home screen. The coordinates are sent to Open-Meteo only to fetch the forecast. Finiverse does not store your location or link it to your account.

h) Bank and investment accounts (optional)

If you connect them, account and transaction data from your bank (through Plaid) or your brokerage (through SnapTrade). See section 8.

i) Purchases and subscriptions

Subscriptions are paid through the Apple App Store or Google Play. We receive the plan, status, renewal dates and a transaction ID so we can unlock your features. We never receive your card number or payment details.

j) Notifications

A push token from Apple or Google (Firebase Cloud Messaging) and your reminder settings, so we can send the reminders you turned on.

k) App diagnostics and usage

Through Firebase Analytics and Firebase Crashlytics we collect app events (for example, which screens are opened), crash reports, device model, operating system, app version and approximate country. We use this to fix bugs and improve the app. It is never used for advertising, and the Android app does not collect the advertising ID.

l) Security signals

Firebase App Check confirms that requests come from the genuine Finiverse app (App Attest on iPhone, Play Integrity on Android). If you turn on Face ID, Touch ID or fingerprint lock, your phone checks it; Finiverse never receives biometric data.

m) This website

If you allow it, Google Analytics measures how the site is used. Contact form and waitlist entries (name, email, message) are stored in our Firebase database so we can reply. Blog read counts are anonymous. See the Cookie Policy.

3. How we use your data

• To run your account and the app's features, and keep them in sync across your devices.
• To show your emotion × spending insights, reports and recommendations.
• To let Sam answer with your financial context.
• To send the reminders and notifications you turned on.
• To unlock the plan you paid for and handle support requests.
• To keep the service secure, prevent abuse and fix crashes.
• To understand, in aggregate, how the app is used so we can improve it.
• Only if you turn it on: to train Sam and our prediction models (see section 7).

Finiverse does not make automated decisions that have legal or similarly significant effects on you. Insights and Sam's suggestions are just that: suggestions you can ignore.

4. Health data (Apple Health and Health Connect)

Health access is optional and off until you turn it on. Finiverse only reads; it never writes or changes anything in Apple Health or Health Connect.

What we never do with health data

• Sell it, or use it for advertising or marketing.
• Send it to our AI providers (OpenRouter, Anthropic). Sam's cloud replies don't include your health data.
• Use it to decide credit, insurance or any eligibility.
• Use it to train AI models, even if you turned on “Help improve Sam”.
• Share it with anyone, except our storage provider (Google Firebase) to keep your own check-ins, or when the law requires it.

Turning it off

iPhone: Settings › Health › Data Access & Devices › Finiverse. Android: open Health Connect › App permissions › Finiverse (on some phones: Settings › Security & privacy › Privacy › Health Connect). Turning access off stops new reads right away. Sleep already saved in past check-ins stays until you delete those check-ins or your account.

5. Android app: permissions and protections

The Android app is published on Google Play by Finiverse LTD. It asks for each permission only when you use the feature that needs it, and you can change any of them in Settings › Apps › Finiverse › Permissions.

What the Android app never asks for: contacts, SMS, call logs, precise location, photos and files, or the advertising ID (it is removed from the app).

How the Android app protects your data

• Card details and personal notes are encrypted on the device before they are saved. The key is protected by the Android Keystore and is excluded from Android backups and device transfers, so it can't be copied off your phone.
• Google Play Integrity (through Firebase App Check) blocks requests that don't come from the genuine app.
• Optional fingerprint or face unlock uses Android's own biometric prompt.
• All traffic uses HTTPS/TLS. Bank and brokerage credentials never reach your phone or our database; they stay with Plaid and SnapTrade.
• Payments go through Google Play Billing. Finiverse never sees your payment method.

Our Google Play “Data safety” section describes the same practices in Google's format.

6. Sam and AI processing

Sam's replies can come from three places:

• Cloud: Claude, a model by Anthropic, reached through OpenRouter. Your message and the financial context Sam needs (for example balances and categories) are sent to generate the reply.
• On your phone: on supported devices, Apple Foundation Models (iPhone) or Gemini Nano through Android AICore (for example Pixel 9 and newer). These replies never leave your phone.
• Offline templates: simple replies built on your phone when there is no connection.

To personalise replies, Sam keeps a memory of facts you share and a profile of your preferences built from your conversations and check-ins. Both are stored in your account and deleted with it.

OpenRouter and Anthropic do not use your data to train their models and do not keep it after processing the request, under our agreements with them. Health data is never part of what is sent. Sam is not a financial adviser: see the Terms of Service.

7. Training Sam with your data (optional)

Sam gets better by learning from real conversations. We only use yours for that if you turn on Help improve Sam in Settings › Privacy Center on iPhone or Android. It is off by default, and Finiverse works exactly the same whether it's on or off.

What we use when it's on

• Your conversations with Sam (your messages and Sam's replies).
• Your check-in moods and notes.
• Your spending patterns (amounts, dates, categories and descriptions), to improve features such as recurring-payment detection.

How we protect it

• Before anything is used, we remove your name, email, account ID, links and long numbers such as card, account or phone numbers. Each person is replaced by a random code.
• Health data from Apple Health or Health Connect is never used for training.
• The training is done by Finiverse to build Finiverse's own version of Sam. Your data is never sold or given to other AI companies to train their models.
• Training files are deleted once a version of Sam has been trained and checked.

Changing your mind

You can turn it off at any time in the same place. From then on your data is left out of every future training run. A version of Sam that was already trained can't “unlearn” what it saw, but it holds no names or account details, and deleting your account removes all your source data.

Separately, to personalise your own replies, Sam keeps a memory and a preference profile inside your account (see section 6). That is not training and is only ever used for you.

8. Bank and investment connections

Connecting a bank or brokerage is optional, needs your explicit action in the app, and may not be available in every country.

Banks, through Plaid

Plaid Technologies, Inc. connects to your bank on your behalf. We may receive: account holder and institution name, account type, the last 4 digits of the account number, current and available balances, and transactions (description, amount, date, merchant). Access is read-only: Finiverse can never make payments or transfers.

Plaid's handling of your data is covered by the Plaid End User Privacy Policy.

Investments, through SnapTrade

SnapTrade connects to your brokerage so you can see holdings and portfolio value. We receive positions, balances and transaction history, read-only. Finiverse cannot place trades. See the SnapTrade Privacy Policy.

How it's used and how to stop it

This data is used only to fill in your records, show balances and give Sam accurate context. It is never sold or used for advertising. You can disconnect any account from the app's settings at any time; this stops new data immediately. Data already imported stays until you delete it or your account.

9. Legal basis (UK GDPR)

For people in the United Kingdom and the European Economic Area, we rely on these lawful bases:

• Contract (Art. 6(1)(b)): your account, financial records, Sam, subscriptions and the features you choose to use.
• Explicit consent (Art. 6(1)(a) and 9(2)(a)): health data, mood and stress check-ins, and using your data to train Sam, because they can reveal information about your health. You give it when you turn these features on and can withdraw it at any time.
• Consent (Art. 6(1)(a)): approximate location, bank and brokerage connections, push notifications, and analytics cookies on this website.
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, crash reports and aggregate app analytics. You can object at any time by writing to us.
• Legal obligation (Art. 6(1)(c)): records we must keep by law, such as for tax or to answer lawful requests.

10. Who we share data with

We don't sell, rent or share your personal or financial data for marketing or advertising. Your data is yours. We only use service providers that process data on our instructions to run Finiverse:

We may also disclose data if the law requires it, to protect people's safety, or to a buyer if Finiverse LTD is ever sold or merged. In that case this policy would continue to protect your data and we would tell you first.

11. International transfers

Finiverse LTD is in the UK, and some providers process data in the United States or other countries. These transfers use recognised safeguards: the UK Extension to the EU-US Data Privacy Framework where the provider is certified (for example Google), and otherwise the UK International Data Transfer Addendum or EU Standard Contractual Clauses.

Write to hello@finiverseapp.com if you'd like more detail about these safeguards.

12. Security

• Data is encrypted in transit (HTTPS/TLS) and at rest in Google Firebase.
• Database security rules keep each account's data separate: only you can read your records.
• Card details and personal notes have an extra layer of field-level encryption on top of database encryption. On Android the key is protected by the Android Keystore.
• Firebase App Check (App Attest on iPhone, Play Integrity on Android) blocks requests that don't come from the real app.
• Optional Face ID, Touch ID or fingerprint lock for the app.
• Bank and brokerage credentials are never stored by Finiverse.

No system is 100% secure. If a breach ever puts your data at risk, we will tell you and the relevant authority as the law requires.

13. How long we keep data

14. Deleting your account

You can delete your Finiverse account and all its data whenever you want, on any platform.

In the app (iPhone or Android)

1. Open Finiverse and go to Settings › Security.
2. Tap Delete account and confirm.
3. Your account, financial records, check-ins, Sam conversations and bank links are erased from our active systems right away.

Without the app

Email hello@finiverseapp.com from the address on your account with the subject “Delete my account”. We will confirm and complete the deletion within 30 days.

Residual copies in our providers' backups and logs expire automatically, normally within 30 days. We may keep minimal records the law requires (for example, invoices) for as long as required.

15. Your rights

Wherever you live, you can ask us to:

• Give you a copy of the data we hold about you.
• Correct anything that's wrong.
• Delete your account and data (see section 14).
• Restrict or object to certain processing.
• Export your records in a portable format (you can also export from the app).
• Withdraw any consent, such as health access or notifications, at any time.

Write to hello@finiverseapp.com. We'll acknowledge within 48 hours and answer within one month. If you're in the UK and unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority.

16. Children

Finiverse is not meant for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

17. Changes to this policy

We may update this policy as Finiverse changes. The date at the top shows the latest version. For significant changes we'll tell you in the app or by email before they take effect.

18. Contact

Finiverse LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: hello@finiverseapp.com.

Related: Terms of Service · Cookie Policy