Your planning information stays under your control.

1. Privacy at a glance

Finsway is a manual money-planning application. It does not require online-banking credentials, connect directly to bank accounts, import transaction histories, hold funds, or initiate payments.

• You decide what planning information enters the application.
• Finsway does not sell your financial-planning information.
• Your information is used to operate, secure, support, and improve the service.
• You can ask questions about your information or request account deletion.

2. Information we handle

When you create and use an account, Finsway may handle:

• account details such as your name, email address, and authentication information;
• planning information you enter, such as balances, income sources, direct costs, fund names, allocations, goals, and planned payments;
• technical information needed to operate and secure the service, such as device, browser, log, and diagnostic data; and
• messages, feedback, or support requests you choose to send.

Do not enter online-banking credentials, card numbers, or information you do not have the right to use.

3. Beta and no-registration accounts

Finsway is in early beta, and there are two ways to hold an account.

An ordinary account is created with an email address and a password, and is described by the rest of this policy.

A beta account is created without either: you choose it from the “Try” tab, and Finsway gives the account a placeholder address on a domain reserved for the purpose (guest.finsway.invalid), which can never receive mail and is not an address of yours. No email address, name or password is collected, so nothing in a beta account identifies you unless you type it in. Signing in is by the session Finsway issues at that moment.

What you should know about a beta account:

• It expires after 30 days, and its data is deleted after that. Erasure is done by a sweep that runs weekly rather than at an exact moment, so the data is removed at the first sweep after the 30 days - in practice within a week of expiry, not at the stroke of it. There is no recovery window: a beta account is erased outright, because there is nobody holding it to change their mind.
• Its data is yours alone. A beta account is a separate account with its own space, and the sample funds, income source and account it can start with are created fresh inside it. Nothing is shared with, or visible to, any other beta account.
• You can keep it. Adding an email address and password at any point turns it into an ordinary account, with everything in it, and takes it out of the 30-day expiry.
• Ending it sooner. You can close a beta account yourself, in Settings, without waiting for it to expire. Because a beta account has no password you were given, closing one asks you to retype its address instead of a password - the session you are signed in with is the only credential it has. Be sure before you do: closing it signs you out at once, and a beta account has no address or password to sign back in with, so you will not be able to undo it from the application - even though the erasure itself follows a little later. Otherwise simply stop using it: it expires and is erased on its own.

Everything you enter into a beta account is treated exactly as it would be in an ordinary one: it stays yours, and it is not used to make decisions on your behalf.

4. Subscriptions with more than one person

A Finsway subscription is a shared workspace, not a personal account. The person who created it is its administrator, and they can invite other people into it.

If you are invited into someone else’s subscription, this is what that means for your information:

• The records are the subscription’s, not yours. Funds, income sources, accounts, periods, transactions, planned payments and goals belong to the subscription and are worked on by everyone in it. What you enter is visible to the other members who have been given access to that part of the application, and what they enter is visible to you on the same terms.
• What you can see and change depends on the permissions you are given. The administrator sets these per person and per area of the application, and can change them at any time.
• The administrator can download the subscription’s data, which includes the email address and role of every member alongside the shared records - see section 8.
• The administrator can remove you, and can delete the whole subscription. Deleting it removes the data of everyone in it, not only theirs.
• What you entered stays behind if you leave. Removing a person removes their access and their sign-in details; the records they created remain in the subscription, because the subscription is what they belong to.

Finsway does not decide who may join a subscription - the administrator does. If you enter information about other people, such as the name of a client or a person you are paying, please make sure you are entitled to record it there, and remember that the other members with access to that part of the application can see it.

5. How information is used

Finsway uses information where reasonably necessary to:

• create and manage your account;
• save and display your plan;
• perform calculations requested through the application;
• protect accounts and maintain service security;
• provide support and respond to questions;
• diagnose errors and improve reliability; and
• meet legal obligations.

Where applicable data-protection law requires a legal basis, Finsway processes information as necessary to provide the service requested by users, comply with legal obligations, protect the security and reliability of the service, pursue legitimate interests that do not override users’ rights, or with consent where consent is required.

Planning information is used to provide the features requested by the user. Technical, diagnostic and feedback information may be used to improve security, reliability and usability.

Finsway does not use your planning information to move money or make financial decisions on your behalf.

6. Service providers and sharing

Finsway uses a small number of service providers, which process information on our behalf and only as needed to provide their service. They are:

• a cloud hosting provider, which runs the servers and the database the application and this website are served from - everything you enter is stored there;
• an email delivery provider, which sends account email such as address confirmations, password resets and invitations, and therefore handles the address it is sent to;
• Grafana Labs (Grafana Cloud), which receives the application’s operational measurements, server logs and performance traces, so that faults and outages can be found and fixed. Passwords and sign-in tokens are stripped before anything is sent, and your planning information is not sent at all. What these records can contain is the technical detail of an operation and the account it concerned - including, in some log lines, an email address, an account identifier or the IP address a request came from - together with counts of accounts and subscriptions used to watch the health of the service;
• Google (Google Analytics), which measures visits to the finsway.app website only, and only as section 7 describes. The Finsway application at my.finsway.app is not measured, and loads nothing at all from Google or from any other third party - its fonts, styles, scripts and images are all served from Finsway.

If paid plans are introduced, a payment provider will be added to this list before any payment is taken, and named here. Finsway does not hold card details itself.

Finsway is operated from Dubai, United Arab Emirates, and these providers may process information in other countries - including in the European Union and the United States. Information you enter may therefore be processed outside the country you are in.

Information may also be disclosed when required by law or reasonably necessary to protect users, the service or legal rights. Finsway does not sell personal data or planning information.

7. Cookies and analytics

The Finsway website (finsway.app) uses Google Analytics to count visits and see which pages are useful. The Google tag loads on every visit, so Google receives technical information about that visit whether or not you accept. What your answer changes is storage: analytics cookies are placed on your device only if you accept, and those cookies are what allow separate visits to be recognised as the same person. You are asked on your first visit and declining takes one click. Your answer is remembered on your device - that record is stored whichever way you answer - and can be changed at any time through “Cookie settings” in the site footer; withdrawing consent also deletes the analytics cookies already set. The cookies concerned are Google Analytics’ “_ga” identifiers, which expire up to two years after your most recent visit unless you withdraw sooner.

Google may process technical information such as the pages you view, an approximate location derived from your IP address, your device and browser type, and the site that referred you. Google acts as a service provider for this purpose and processes that information under its own terms. Finsway does not send planning information to Google, and the Finsway application itself (my.finsway.app) is not measured with website analytics.

Storage that is strictly necessary is used without asking, because the service cannot work without it: remembering your analytics answer, and keeping you signed in to the application.

The Google tag described above is the only thing this website loads from anyone else. Everything else - fonts, stylesheets, scripts and images - is served from finsway.app itself, so no other company learns that you visited. The tag is the exception, and it loads before you answer, which is what the first paragraph of this section explains.

8. Retention and your choices

Information is retained for as long as reasonably necessary to provide the service, maintain security, meet legal requirements, and resolve disputes. Backup copies may remain for a limited period after account deletion.

What deletion does and does not remove. When a subscription is deleted, everything entered in it is erased: funds, income sources, accounts, periods, transactions, planned payments, goals, and the member accounts themselves, together with their passwords and sign-in tokens. Two things are kept. The first is the billing record of payments already made, which is Finsway’s accounting record as much as the subscriber’s. The second is our own internal note of the subscription’s status over time, which is what the service is measured by. Both are attached to a subscription record that has had its owner address and its name removed, so what remains identifies no one - but it is honest to say that it remains, rather than to describe the deletion as removing everything.

You may request access, correction, or deletion of personal information, subject to applicable law and legitimate retention requirements. You may also stop using Finsway at any time.

You do not have to ask for a copy of your information: an account administrator can download the subscription’s account and planning data - funds, income sources, accounts, periods, transactions, planned payments, goals, billing records and the list of members with their roles - as a single file, from Settings, at any time, including while a deletion is pending. It is the data people entered, not the whole of what Finsway stores: passwords and sign-in tokens are never included, and neither are internal records such as our own history of the subscription’s status.

Depending on applicable law, you may also have rights to data portability, restriction or objection to processing, withdrawal of consent, and making a complaint to a competent data-protection authority.

9. Security

Finsway uses reasonable technical and organisational measures designed to protect information. However, no online service can guarantee absolute security. Keep your login details confidential and contact support@finsway.app if you believe your account has been accessed without permission.

10. Automated decisions

Finsway does not use personal data to make solely automated decisions that produce legal or similarly significant effects.

11. Children’s privacy

Finsway is intended for users aged 18 or older and is not directed to children. If we learn that a child has provided personal information, please contact us so that we can take appropriate action.

12. Policy changes

We may update this Privacy Policy when the service, our practices or applicable requirements change. The updated version will be posted here with a revised “Last updated” date. Where a change materially affects users, we will provide additional notice where reasonably appropriate.

13. Contact

Questions about this policy or your information can be sent to support@finsway.app.