← App

🔒 Privacy Policy

Finance Tracker is designed for personal use. We collect only what we need, use it only to run the Service, and never sell it.

Effective: 27 May 2026 Last updated: 27 May 2026

Contents

  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. Third-Party Services
  5. How AI Processes Your Data
  6. Data Retention
  7. Data Security
  8. Your Rights
  9. Deleting Your Data
  10. Children
  11. Changes to This Policy
  12. Contact
1. Who We Are

Finance Tracker ("the Service", "we", "us") is a personal finance tracking application operated by adjiebrotot, based in Australia. The Service is accessible worldwide via a web application and a Telegram bot.

Contact: adjiebrotots@gmail.com


2. Information We Collect
2.1 Account Information

When your account is created by an administrator, we store:

DataPurpose
UsernameYour primary identifier within the Service
Display nameThe name shown in the interface
PasswordStored as a one-way bcrypt hash
Telegram user IDStored only if you link your Telegram account to the Service
2.2 Financial Data

All financial data you enter is stored in our secure database:

Database access is heavily guarded and separated from the web interface. Direct database credentials and unrestricted database access are not exposed through the admin page.
  • Accounts: name, aliases, type (cash, credit, investment, receivable, payable), currency, and balance
  • Transactions: date and time, action type, account names, amounts, currency, exchange rate, category, and any notes you add
  • Recurring rules: schedules, amounts, and linked accounts you configure for automated reminders
  • Categories: spending category names you create
2.3 AI-Processed Input

When you submit a text message or image for automatic transaction parsing:

  • Your message text is sent to an AI service for interpretation
  • Receipt or document images are encoded and forwarded to the AI service — they are not stored by us before or after processing; they are transmitted inline and discarded once the AI returns a result
  • The full AI response (the structured transaction interpretation) is stored alongside the resulting transaction record as a processing log

The following contextual information is included with every AI request to enable accurate parsing:

  • Your username and family member usernames
  • Your account names, aliases, types, and currencies
  • Your spending categories
  • Current date and time, and approximate geographic region (derived from your configured timezone)
Note on images: Receipt photos are never written to our database or disk. They exist only in memory during the AI request and are discarded immediately after.
2.4 Error Logs

When an error occurs during processing, we log:

  • Your username and Telegram chat ID (if applicable)
  • The first 500 characters of the input that triggered the error
  • The error message and technical stack trace
  • The AI response at the time of the error (if applicable)

Error logs are used solely for diagnosing and fixing bugs.

2.5 Session Cookie

We use a single session cookie (ft_session) to keep you signed in:

  • It is HttpOnly (not accessible to JavaScript on the page)
  • It uses SameSite=Lax to protect against cross-site request forgery
  • It contains a cryptographically signed session identifier; it does not contain your password or any financial data

We do not use tracking cookies, advertising cookies, or third-party analytics cookies of any kind.


3. How We Use Your Information
PurposeData used
Providing the Service (transaction tracking, reporting) Account and financial data
AI-powered transaction parsing Message text, images (not stored), contextual account metadata
Authentication and session management Username, password hash, session cookie
Debugging and service improvement Error logs
Multi-user family grouping Usernames, family membership
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes. We do not use your data to train AI models.

4. Third-Party Services
4.1 AI Processing

When you use AI-assisted transaction input (text or image), your data is transmitted to OpenRouter (openrouter.ai), an AI API aggregator. OpenRouter routes requests to underlying model providers, which may include OpenAI and Google. Your data is subject to OpenRouter's privacy policy and the terms of the model provider that processes your specific request.

What IS sent to OpenRouter and the model provider

Your input text or encoded receipt image (images sent inline, not stored by us) · Account names, categories, family member usernames · Current date and time, approximate region

🚫

What is NOT sent

Your transaction history or past records · Your password or authentication tokens · Full account balances

See the AI data flow diagram in Section 5 for a visual overview.

4.2 Telegram

If you access the Service via Telegram:

  • Your Telegram user ID and chat ID are stored to route responses back to you
  • Messages you send to the bot are processed by our server
  • Your use of Telegram is also subject to Telegram's own Privacy Policy
4.3 Infrastructure

The Service is deployed on third-party hosting and infrastructure providers. These providers may process standard request metadata (such as IP addresses and server access logs) in the course of delivering the Service. No personal or financial data is shared with infrastructure providers beyond what is technically necessary to serve your requests.


5. How AI Processes Your Data

When you send a text message or upload a receipt, here is exactly what happens.

📱 You
Send a text message or upload a receipt image via Web App or Telegram
🖥️ Finance Tracker Server
Packages your input with context:
account names · categories · username · date/time · region

Images held in memory only
HTTPS
🔀 OpenRouter
AI API aggregator
🤖 Model Provider
OpenAI or Google processes the request and returns a structured JSON result
JSON response
🖥️ Finance Tracker Server
Parses the JSON → creates the transaction record
Stores the raw AI response alongside the transaction for auditing
✅ You
Transaction created and shown in your account
Receipt images are transmitted in steps 1–4 and are never written to our database or disk. They exist only in memory during the AI request and are discarded immediately after the model responds.

6. Data Retention
Data typeRetention
Account and financial data Retained while your account is active. Upon account deletion, all personal data is deleted upon request.
Transaction records Retained until you delete them via the History screen, or until account deletion is requested
Error logs Retained for a limited period for diagnostic purposes only
AI response logs Retained alongside the associated transaction record
Receipt images Discarded immediately after AI processing

7. Data Security

We apply appropriate technical safeguards:

No internet-connected system can be guaranteed 100% secure. If you suspect unauthorised access to your account, contact us immediately at adjiebrotots@gmail.com.


8. Your Rights

Finance Tracker is operated from Australia and is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Under these laws, you have the right to:

To exercise any of these rights, contact us at adjiebrotots@gmail.com.


9. Deleting Your Data

You may delete individual transactions and accounts from within the app at any time using the History screen and account management tools.

To request full deletion of your account and all associated data, email adjiebrotots@gmail.com. We will action your request within 10 business days.


10. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will delete it.


11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.


12. Contact
✉️

adjiebrotot

Email: adjiebrotots@gmail.com
Website: fintrack.adjiebrotots.com