This Privacy Policy explains how the Personal Finance application collects, uses, stores, and protects information when you use the service, including when you sign in with Google or Facebook.

1. Information we collect

• Account and sign-in information from an approved OAuth provider, such as a provider user identifier, display name, and email address when the provider supplies it.
• Personal profile information you choose to provide, including name, contact email, phone number, city, country, preferred language, and default currency.
• Financial information you enter into the application, including recurring income settings, additional income, allocation settings, expenses, savings allocations, savings goals, custom categories or items, payment methods, and related notes.
• Authentication session information and limited technical request information needed to operate, secure, and troubleshoot the service. Hosting and authentication providers may process technical information such as IP address, browser/device information, request metadata, and cookies as part of delivering their services.

2. How we use information

• Authenticate you and maintain your signed-in session.
• Provide personal finance features such as income management, budgeting and allocation, expense and savings entry, reports, alerts, and dashboard insights.
• Remember your language, currency, profile, and account preferences.
• Protect account isolation, investigate errors, prevent abuse, and maintain service reliability.
• Improve the application based on functional and security needs.

3. Google and Facebook sign-in data

Google and Facebook are used only as sign-in providers for the MVP. The application uses the identity information returned by the provider to authenticate the user and, when available, prefill basic profile/contact information.

The application does not use Facebook Login to publish posts, access a friends list, or run advertising on your behalf. The application currently requests only the account information necessary for authentication and profile creation, such as public profile and email when available.

4. How information is shared

We do not sell personal or financial information. Information is processed only as needed to operate the application and may be handled by service providers that support the service, including Supabase for authentication/database services and Vercel for application hosting and delivery. Google or Facebook process information when you choose their respective sign-in option under their own privacy terms.

Information may also be disclosed when required to comply with applicable law, a valid legal process, or to protect the security and integrity of the service and its users.

5. Data isolation and security

Financial and profile data is treated as sensitive. The application uses authenticated user identifiers and Supabase Row Level Security to isolate each user’s data. Service-role or other server secrets are not exposed in the browser application.

No security measure can guarantee absolute security, but the application is designed to minimize access and keep user-owned financial records separated by account.

6. Data retention and deletion

Information is retained while it is needed to provide the service, preserve the financial records you choose to keep, meet security requirements, or satisfy applicable legal obligations. When data is no longer required, it may be deleted or anonymized as appropriate.

You may request access, correction, or deletion of your personal data. For privacy or data-deletion requests, use the support contact listed for the Personal Finance application in its Meta/Facebook app information or contact the application administrator. A dedicated self-service account-deletion workflow may be added in a future release.

7. Your choices

• You can update editable Personal Information from the application settings.
• You can sign out at any time using the Log out / Thoát khỏi tài khoản action.
• You can choose whether to sign in with Google or Facebook when those providers are enabled.
• You can request correction or deletion of information associated with your account through the privacy contact described above.

8. Changes to this policy

This policy may be updated when the application, data practices, service providers, or legal requirements change. The effective date shown at the top of this page identifies the current published version.

9. Contact

For privacy questions or requests related to Personal Finance, use the support contact published with the Personal Finance Meta/Facebook application or contact the application administrator. Do not send OAuth client secrets, passwords, or other authentication secrets in a support request.