Privacy policy

The short version

• We never sell your data, and we never use it for advertising. There are no ads in Peak.
• Only the people you invite to a Space can see what's in it.
• You can export everything, or delete your account, at any time from Settings.
• No third-party trackers, ad networks or session recordings.

What we collect, and why

• Your account: name, email, password (stored only as a one-way hash), optional photo, and display preferences such as language, time zone and currency. We need these to sign you in and show numbers the way you read them.
• What you enter into a Space: accounts, balances, valuations, transactions, payees, categories, tags, notes, budgets, recurring items and receipts you attach. This is the service itself.
• Security records: sign-ins, failed sign-ins, password and email changes, role changes, exports and deletions, with the device and approximate location. We keep these to protect your account and to tell you about new sign-ins.
• Product analytics: counts of things like “a transaction was added” or “a budget was created”, with the page pattern (never the full address, amounts, names, payees or notes). No cookies are used for this, and it runs on our own analytics server.

Who can see your data

Members of a Space see that Space's data: Owners and Editors can change it, Viewers can only look. People outside a Space can't tell it exists. Our staff access data only when you ask us to help, or when we must to keep the service running or meet a legal obligation, and that access is logged.

Service providers

We use a small number of providers who process data only on our instructions:

• Hosting and database (servers, encrypted storage and backups).
• Email delivery (verification codes, security alerts and the notifications you choose).
• Web Push services run by your browser maker, if you turn on alerts (no amounts are sent).

We'll list each provider by name and the region your data is stored in before launch.

Your rights

• Access and export: Settings → Data and privacy → “Export all my data” gives you a ZIP of your profile and every Space you own, as spreadsheets plus your receipts. Owners and Editors can export a Space from its settings.
• Correction: you can change anything you entered, and your profile, at any time.
• Deletion: Settings → Data and privacy → “Delete account”. You have 30 days to change your mind, then your account and every Space where you're the only member are permanently deleted.

These rights apply wherever you live, including under the GDPR and Australia's Privacy Act.

How long we keep things

• Your data stays while your account exists.
• Items you delete sit in Trash for 30 days, then they're removed.
• Exports are deleted 24 hours after they're ready.
• Backups are kept for 35 days. So after you delete your account, a copy can remain in encrypted backups for up to 35 more days before it expires. We never restore deleted accounts.
• If you leave a shared Space or delete your account, what you added to other people's Spaces stays there, shown as added by “Former member”.

Contact

Questions or requests about your data: privacy@fintrekking.com. We reply within 30 days. If you're unhappy with our answer, you can complain to your local privacy regulator (in Australia, the OAIC).