Privacy Notice

Draft: awaiting lawyer review

Last updated: November 2026 (2026-11-draft)

Faina is your money companion for the Philippines, operated by [Company or Owner Name] ([Contact Email], [Registered Address]). This Privacy Notice explains what personal data Faina collects, why we collect it, where it goes, how long we keep it, and how you can export or delete it under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Who can use Faina

You must be 18 or older to create an account or use Faina. Faina is not intended for anyone under 18.

What we collect and why

• Account details: Your email address (and Google profile identifier if you sign in with Google) so you can sign in and keep your records separate from everyone else's.
• Money records you enter: Account names, starting balances, transactions, categories, recurring income and bills, loans, and savings goals so Faina can calculate your balances and future predictions.
• Photos and screenshots: Receipts and payment screenshots you choose to upload so Faina can draft transactions for you to check before saving. Only the last 4 digits of account numbers are stored; never upload full card numbers, CVVs, passwords, or OTPs.
• Chat and investing guidance: Questions you ask Faina, guidance answers, saved step-by-step checklists, and facts you ask Faina to remember.
• Problem reports: Messages you send through Settings when reporting an issue.

Where your data goes

To run the app, your data is processed by three service providers, which may process data on servers outside the Philippines (including in Japan and the United States):

• Google (Gemini API): Reads receipt photos and screenshots you upload, answers your chat and investing guidance questions, and runs live Google Search when you check current rates. Faina uses a paid Gemini API configuration with conversation storage turned off (store: false).
• Supabase: Stores your database records, authentication credentials, and private receipt images in Tokyo, Japan, protected by row-level security so each user can only access their own data.
• Vercel: Hosts the Faina web application and server functions (running in Tokyo, Japan) that serve the app to your browser or phone.

We do not sell your personal or financial data to anyone, and no financial provider can pay for placement in Faina.

How long we keep your data

• Uploaded images (receipts and screenshots): Automatically deleted after 30 days. The transaction details you confirmed and saved remain in your history until you delete them.
• Account records, chats, memories, and checklists: Kept until you delete them or delete your account.
• Encrypted backups: Weekly encrypted database backups are kept for up to 90 days for disaster recovery and then automatically deleted. When you delete your account, your live records and uploaded images are removed right away, and any copy in encrypted backups ages out within 90 days.

Your rights: export and delete

• Export: You can download all of your records at any time from Settings → Export my data in CSV or JSON format.
• Delete: You can delete individual transactions, memories, or chat history, or delete your entire account and all associated database rows and uploaded images immediately from Settings → Delete my account.
• Questions or privacy requests: Contact [Data Protection Officer / Contact Name] at [Contact Email]. You may also lodge a complaint with the National Privacy Commission (NPC) of the Philippines ([NPC Contact Details]).