Effective date: August 6, 2026
1. Who we are
Fin AI (“Fin AI”, “we”, “us”) is a personal-finance coaching app for students / people operated by Roman Balayar. This policy explains what we collect, why, who we share it with, and the choices you have. It forms part of, and should be read with, our Terms of Service. Questions: romanbalayar0@gmail.com.
2. Information we collect
You give us / your identity (via Clerk, our auth provider): your name, email, and the authentication identifiers needed to sign you in and keep your account secure.
Financial data (via Plaid, only if you connect a bank): with your authorization, Plaid shares your connected account details, balances, and transaction history (merchant, amount, date, category). We use this to compute your spending, goals, and financial-health insights. We store a bank access token encrypted at rest and never expose it to your device. See Plaid’s end-user privacy policy at https://plaid.com/legal/.
Your profile answers (during onboarding): the first name you give us, the city you type, your own estimate of what you spend in a month, and the goal and intent you pick. These are self-reported — we do not collect your device’s location. The app does not request location permission and contains no location-tracking code. We use these answers to set up your starting plan and to phrase guidance for your situation.
Age confirmation (at sign-up): before you create an account we ask for your date of birth to check that you meet our 13+ age floor (§9). We do not store your date of birth. It is checked on your device and discarded; what we keep is only the result — whether you meet the 13+ floor — together with which version of the terms you accepted and when. We keep that record to show the check was carried out. We do not collect parental or guardian consent.
Content you provide: messages you send to the AI coach, and the coach’s replies. To generate a reply, the text of your question is sent to our AI provider (OpenAI). We also store your conversations on our servers so you can scroll back through your chat history across devices; they are deleted when you delete your account (§7). Deterministic financial numbers are computed by our own software, not generated by the AI (see §4).
Usage & diagnostics: product-analytics events (via PostHog) and crash/error reports (via Sentry) to operate, secure, and improve the app. These may include device/app identifiers and technical context.
On-device storage: your session token (in the iOS/Android secure keychain via expo-secure-store) and small app state such as your onboarding status and cached reads (via AsyncStorage). Your coach conversations are not cached on the device — they are read from our servers when you open your chat history, so no copy of them is left in device storage.
3. How we use your information
To provide and personalize the app; compute your spending, goals, and health insights; detect your monthly income automatically from the transactions in a linked account, so your plan reflects what you actually earn; power the AI coach; authenticate you and protect your account; detect and prevent fraud and abuse; diagnose crashes and improve reliability; and comply with law. We do not sell your personal information, and we do not use your financial data for advertising.
4. Your numbers come from math, not AI — and AI can still be wrong
Every financial figure shown to you (e.g. “you’ve spent $620 of your $1,200 budget”) is produced by deterministic calculations over your data. Our AI coach phrases guidance; it does not compute. Before a reply reaches you, our server checks each dollar amount and percentage in it against the values those calculations returned, and withholds the reply if a figure cannot be traced to one.
Fin AI can make mistakes. The AI coach may still produce guidance that is inaccurate, incomplete, outdated, or wrong — including how it interprets your question or describes your situation. Errors can also come from incomplete or misclassified bank data, delayed sync, or software defects. AI-generated guidance is informational only. It is not professional financial, investment, legal, accounting, or tax advice. Verify anything important before you act on it. See the Terms of Service for the full AI disclaimer.
5. Who we share it with (service providers / subprocessors)
We share data with vendors who process it on our behalf under contract, only to provide the service: Clerk (authentication), Supabase (database + backend hosting), Plaid (bank connectivity), OpenAI (AI coach text generation), PostHog (product analytics), Sentry (crash/error monitoring), and Expo/Apple/Google (app delivery + push). We may disclose information if required by law or to protect rights and safety.
6. Security
Each user’s data is isolated at the database level (row-level security keyed to your account); bank access tokens are encrypted at rest; traffic is encrypted in transit (TLS). No system is perfectly secure, but we work to protect your data and limit access to it.
7. Data retention & deletion
We retain your information for as long as your account is active or as needed to provide the service and meet legal obligations.
You can delete your account and its data at any time from within the app (Profile → Delete account). You may also request deletion by emailing romanbalayar0@gmail.com. Deleting your account removes your sign-in identity, your linked-account data and bank access tokens, your budgets, goals, and transactions, and your coach conversations. We delete or de-identify your data from our production systems, except where retention is legally required (for example, for tax, audit, fraud-prevention, or dispute-resolution purposes) and except for residual copies in routine backups, which age out on our standard cycle.
One exception, stated plainly: we keep a security log of sensitive actions (for example, that a bank was linked, or that an account was deleted). When you delete your account, the log entries are stripped of the link to you and retained in that anonymized form for fraud-prevention and security purposes.
If you have a paid subscription, deleting your Fin AI account does not cancel it — cancel that separately in Settings → your Apple ID → Subscriptions, as described in the Terms of Service.
8. Your rights
Depending on where you live (e.g. GDPR/UK GDPR, CCPA/CPRA), you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these, contact romanbalayar0@gmail.com. You can disconnect a linked bank at any time in the app.
9. Children and minors
You must be at least 13 to use Fin AI. The Service is not directed to children under 13, we do not knowingly collect their personal information, and if we learn that we have, we delete it. If you believe a child under 13 has given us data, contact us at romanbalayar0@gmail.com.
Fin AI is not a parental-control app. It does not offer parental monitoring, remote controls, screen-time tools, location tracking of a child, a parent dashboard, or any other guardian-control features. Users aged 13 and up use the same coaching product — there is no supervised or family-managed mode, and we do not require parental or guardian consent to create an account.
Bank connections. Connect only a financial account you own or have authority to link. Do not connect someone else’s account without authorization.
Some jurisdictions set a higher minimum age for consent to data processing; where that applies, the higher age governs.
10. International transfers
We may process and store information in countries other than yours. Where required, we use appropriate safeguards for such transfers.
11. Changes
We may update this policy; we will post the new effective date and, for material changes, provide in-app notice.
12. Contact
Roman Balayar, 111 Stanford Dr SE, Albuquerque, NM 87106 — romanbalayar0@gmail.com / romanbalayar0@gmail.com.