Privacy notice

Who we are

FinEase is run by the small team behind this site. For anything about your information, write to hello@finease.bond.

What we store

• Your name, email address, phone number (if you add one) and your role in the household.
• Bank accounts: nickname, bank, type and last four digits. The full account number and branch code are encrypted.
• Cards: card number, expiry date, notes and the optional CVV, all encrypted. A PIN is never stored.
• Your expenses, payments, transactions, categories and budgets.
• Bank statements and payment slips you upload, kept as files on a private disk and only served to people allowed to see them.
• Your South African ID number, only if you save it. It is encrypted, used only to open password-locked statement PDFs, and only its last four digits are shown again.
• A profile picture, if you add one. It is cropped, shrunk and stripped of camera data such as location. Anyone with its link can open it.
• Your notification choices and the wording you set for reminders.
• An audit trail of changes and sign-ins, with the IP address and browser used.
• Anonymous counts of which buttons are seen and pressed. These store only the button's name, never who pressed it or any text.

How we protect it

• Encrypted fields are locked with the application's secret key. That protects them if the database alone leaks, but not from someone who has both the database and the key.
• Showing a full card or account number needs your password again, only works for the owner, disappears after 30 seconds and is written to the audit trail.
• Nobody sees another adult's money. Administrators manage people, not money.
• When an administrator helps by viewing FinEase as you, a banner shows it on every page, they cannot reveal secrets or change your sign-in settings, and the visit is recorded in your household's audit trail.

Who else sees it

• Resend delivers our emails, and Panacea Mobile delivers text messages if you switch them on.
• An AI provider (OpenAI unless we configure another) receives the text of a PDF statement only when its bank has no built-in reader. When you ask it to draft reminder wording, it is told only which message and channel, not anything about you. Capitec, FNB, Investec and GoTyme statements, and every CSV, are read on our server and never sent to it.
• Our hosting provider runs the server and database.

We do not sell your information.

How long we keep it

Audit entries are deleted automatically after two years. When you remove an account, card, expense or statement it disappears from FinEase but stays in the database. Deleting your profile under Settings removes your login and the records linked to it. Uploaded files and audit entries are not yet removed by that step, so if you want everything gone, write to us and we will do it.

Your rights

You can ask us what we hold about you, ask us to correct or delete it, and object to how we use it. Most details you can change yourself in FinEase. If you are not happy with our answer, you can complain to the Information Regulator of South Africa.