Privacy policy

1. Who we are

Fyntra is made by Zahin Mohammad, an independent developer (“we”, “us”). This policy explains what the Fyntra app for Android does with your information. You can reach us using the details under Contact.

2. What stays on your phone

Everything you record in Fyntra is stored in the app’s private storage on your phone:

• your accounts and their balances;
• transactions: amounts, dates, categories, payees and notes;
• categories and monthly budgets, repeating transactions and projects;
• investments, savings goals, and the people you lend to or borrow from with your loans (a name, and a relationship, phone number and photo only if you add them);
• photos of receipts you attach to transactions;
• your settings, such as currency, language, theme and notifications.

You can use Fyntra without any account, in which case none of this leaves your phone. Fyntra keeps its data out of Android’s device backup, so without a Google Drive backup, uninstalling the app or losing your phone also loses the data.

3. Google sign-in and your Drive backup

Signing in with Google is optional. If you do, Fyntra asks for access to a hidden “app data” folder in your own Google Drive (the drive.appdata permission). It can’t see, open or change any of your other Drive files. Your records, receipt photos and settings are saved in that folder, so you can restore them on a new phone and keep two phones in step.

This data travels directly between your phone and Google. We never receive it. Google stores it in your Google account under Google’s privacy policy, and it counts towards your Google storage.

4. What our server knows

Only if you sign in with Google, the app sends your Google sign-in token to our account-status service, which checks that the sign-in is genuine. It then keeps this record about you:

• your email address and Google account ID;
• when you first and last used the app;
• the app version and your phone’s platform (Android);
• whether access has been suspended, and why.

We use it to keep the service working, to tell an app version that’s too old to update, and, if necessary, to suspend access in cases of abuse. It is never used for advertising. The record is kept while you use Fyntra with Google, and deleted when you ask (see Delete your data).

The service runs on Cloudflare, which processes your IP address to deliver and protect it (for example, to limit how many requests one address can make). Without an account, the app only downloads public settings, such as the oldest supported version and announcements, and sends nothing that identifies you.

5. Crash reports

If Fyntra crashes, it asks whether to send a report, unless you’ve turned on Settings › Send crash reports to send them without asking. A report says what went wrong in the app’s code, the app and system version, and which screen was open. Email addresses, record IDs and long numbers are taken out before it’s sent.

A report never includes your accounts, amounts or anything else you entered, and carries no account or device ID, so it can’t be tied to you. Identical problems are grouped into one entry with a count, and we keep at most 2,000 such entries. Because nothing links a report to a person, reports can’t be looked up or removed for one person.

6. App updates

Fyntra downloads improvements through Expo’s update service (expo.dev). When the app checks for an update, that service receives your IP address, the app version and the platform. Installs and app updates from Google Play are handled by Google.

7. Permissions

Fyntra doesn’t ask for your location or contacts, and it never reads your text messages or other apps’ notifications.

8. Who else is involved

• Google: sign-in, your Drive backup, and distribution through Google Play.
• Cloudflare: runs our account-status service.
• Expo: delivers app updates.
• Vercel: hosts this website and keeps standard access logs. It also counts visits to this website with Vercel Web Analytics, which uses no cookies and doesn’t identify you: we see totals such as the pages viewed, the site that linked here, the country and the type of device. The app sends nothing to it.

We don’t sell, rent or share your information with anyone else, unless the law requires us to.

9. Security

Everything the app sends travels over encrypted connections. If you set an app PIN, it never leaves your phone and is kept only as a scrambled code in the phone’s secure storage. Unlocking with a fingerprint or face uses keys held by Android, which the system removes if the phone’s fingerprints or faces change.

10. Your choices

• Export your transactions as a CSV file at any time (Settings › Export transactions).
• Sign out, choosing whether to keep the copy on your phone. Your Drive backup stays either way.
• Delete everything with Settings › Delete my data, which permanently deletes your Drive backup and your phone’s copy and removes Fyntra’s access to your Google account.
• Remove Fyntra’s access at any time from your Google account’s third-party access page.
• Ask us to delete your sign-in record. Here’s how.

11. Children

Fyntra isn’t directed at children under 13, and we don’t knowingly collect their information.

12. Changes to this policy

If this policy changes, we’ll update the date above, and tell you in the app about any change that affects how your information is handled.

13. Contact

For questions about privacy, or to have your sign-in record deleted, send a message to Zahin Mohammad on Facebook (isherezahin).