Privacy policy
Updated: July 4, 2026
1. Controller
The controller responsible for data processing on this website and in the Finny app is:
Finny
No summonable address is currently published. This information will be added in the near future.
Email: hallo@fnny.app
2. Data we collect
Finny helps you manage receipts and warranties. To do that, we process these categories of data:
- Account data: email address, authentication method, and display name, if your sign-in provider sends one.
- Receipt data: uploaded receipt photos or PDFs, OCR text, store, date, price, and warranty period.
- Usage data: anonymous statistics such as page views and actions, used to improve the app.
3. Purpose and legal basis
We process your data to provide and improve Finny. The legal basis is Art. 6(1)(b) GDPR for the core service and Art. 6(1)(f) GDPR for anonymous usage measurement.
4. Storage and hosting
Your data is stored on servers in the European Union. We use Supabase as our database provider with EU data residency in Frankfurt am Main.
5. Sharing data with others
We do not pass your personal data to third parties for their own purposes. We use the following processors, each bound by contract to follow GDPR requirements:
- Supabase (database hosting and authentication, EU region)
- Resend (transactional email delivery for authentication and product emails, US processing with Standard Contractual Clauses)
- OpenLimits / LLM provider (OCR extraction, data is not used to train models)
6. Cookies and tracking
We do not use tracking cookies or analytics tools that follow you across websites. The Finny app works without cookies.
7. Your rights
You have the right to request:
- access to the data stored about you
- correction of inaccurate data
- deletion of your data
- restriction of processing
- data portability
- objection to processing
Send requests to hallo@fnny.app. You also have the right to complain to the competent data protection authority.
8. Retention
Receipt data stays in your account until you delete the account or remove the receipt manually. After account deletion, we remove all personal data from our database within 30 days.
9. AI-assisted receipt recognition
To detect the store, price, and warranty period, we use an OpenAI-compatible LLM service (OpenLimits). Uploaded receipts and extracted text are never used to train models. Processing takes place on servers in the EU.
10. Contact
For privacy questions, contact us at hallo@fnny.app.