Privacy Policy

Data controller

Kyokai Technologies, located at Jacoman 8618 A, colonia Valle del Rubí, C.P. 22630, Tijuana, Baja California, Mexico, is responsible for processing your personal data. Its personal-data department handles your requests at info@financial-cc.com.

The app is intended for people aged 18 and over.

What is stored

The app stores what you enter or import, together with the data needed to operate your account and, if you purchase Premium, your subscription. Nothing is collected from your device for advertising or tracking.

The app does not ask for sensitive data; avoid entering it in descriptions or notes. Financial and asset data require your express consent, which the app asks for and records with its date.

• Account identity: email address, display name and, if you use Sign in with Apple, the stable identifier Apple issues for this app.
• Sign-in credentials: passkeys, a derived password verifier (never the password itself), a second-factor seed and recovery codes.
• Accounts and balances: bank accounts, savings envelopes and their movements.
• Debt: credit cards, statements, payments, interest-free instalment plans, loans and their amortization schedules.
• Transactions: entered, imported or projected movements, with merchant, category and amount.
• Investments: positions, trades, valuations and portfolio returns.
• Payroll and income: pay records, employers, pay periods and benefits.
• Budget and goals: budget concepts, envelopes, savings goals and contributions.
• Debtors and shared services: people who owe you money, and expenses split with your household.
• Assets: recorded property, its maintenance and its valuation.
• Preferences and reminders, including push notification subscriptions if you enable them.
• Premium billing on web/PWA: Stripe customer, subscription and event identifiers, plan status, billing period and checkout sessions. Full payment card details are entered on Stripe; they are not stored in the Financial CC database.

How it is used

Solely to run the application: to show your balances, compute your cash flow and budget, project payments and remind you of dates. There is no advertising, no third-party analytics receives your financial data, and no automated decision-making is performed about you. The only data used for customer operations is what is described below for Namba.

These purposes are necessary for the service you sign up for; your data is not used for marketing or for any purpose that would need additional consent.

Who it is shared with

Nobody, beyond what is strictly required to run the app:

• Cloudflare, which hosts the application and its database.
• When the connection is enabled, Namba receives your name, email, account identifier, customer classification, access status, household membership, complimentary grants and verified subscription references for customer operations. It does not receive bank accounts, balances, transactions, debts, investments, documents or credentials. If usage measurement is also enabled, Namba receives, per account, how many records you have saved in each section (for example, how many accounts, transactions, debts, goals or reminders) and the dates you started and completed initial setup; never their contents, amounts, text or documents, nor your recent activity. Account deletion sends a notice with its identifier, without your name or email, to remove its information; provider accounting keeps only the history it must retain.
• Stripe, to process and manage Premium on web/PWA. It receives your email address and an account identifier, as well as payment and billing details you enter directly on its pages. We do not send it the financial records you enter in Financial CC.
• Apple, to verify your identity if you choose Sign in with Apple, deliver notifications if you enable them on iOS, and process subscriptions purchased in the app. For those purchases we store transaction identifiers, a random identifier linked to your account, and verified product, expiry, renewal and revocation facts. Apple receives that account identifier; payment details are entered and managed directly with Apple.
• The transactional email provider, only to send household invitations if you use them.
• Members of your household, who can view household members’ personal and shared records through the view selector.

Data shared in a household

If you join a household, its members can view one another’s personal records as well as shared records. The personal label organizes records; it does not hide them from other household members. If you delete your account and another member remains, shared records stay with that person; if you were the last member, the household and its shared records are deleted with you.

Asking for a bank to be added

When you upload a statement the app cannot yet read, you can ask for that bank to be added. Doing so stores the text extracted from the document and, by default, the original PDF: they are the only thing a reader for that bank can be built from, and asking you for them again later would be asking you to do the same work twice.

The PDF is encrypted on the server before it is stored, with a key belonging to that document alone. That key is itself stored encrypted in the database rather than beside the file, so the file on its own cannot be opened.

It is kept for at most 30 days. It is deleted sooner if the request is resolved or discarded, and also as soon as your statement is repaired from the app, at which point it has served its only purpose. After 30 days it is deleted regardless, even if nobody has dealt with the request.

Only whoever operates the service can open it, through a single mechanism that records who opened it and when, and it is used to build the reader for that bank. What remains afterwards is the text — deleted when the request is resolved — and, where useful, a test sample carrying no name, address, tax id or account number.

You can ask for your request to be discarded at any time by writing to soporte@financial-cc.com; discarding it deletes both the PDF and the text.

Deleting your account

You can delete your account from inside the app, under Profile → Delete my account. When deletion completes, your attributable records are removed from the active database along with your credentials and notification subscriptions, and your sessions no longer authorize access. There is no grace period or in-app recovery. Historical backups may retain data until their retention expires: 12 weekly, 6 monthly and 3 quarterly copies. These backups are not served to the application.

If you signed in with Apple, the app also asks Apple to revoke the permission granted to this app.

If you purchased a subscription from Apple, cancel it in your Apple account's subscription settings. Deleting Financial CC does not cancel that billing. Account deletion removes the local purchase link and facts; a later notification cannot recreate your account or transfer its purchase to another account. We retain only delivery identifiers and status for notifications without a linked account to resolve errors, without signed contents or purchaser identifiers.

If you have a Stripe subscription, the app cancels it before completing deletion. If it cannot confirm cancellation, it keeps your account so you can retry. Deleting your account does not automatically erase payment records Stripe must retain for its legal and accounting obligations.

Limiting the use of your data

You can limit the use and disclosure of your data from inside the app: delete records, decline to join a household, and turn notifications off. For any other limitation, write to info@financial-cc.com.

Your ARCO rights and withdrawing consent

You have the right to access, rectify, cancel or object to the processing of your data (ARCO rights), and to withdraw the consent you gave. Several of them you exercise directly in the app: viewing and correcting your records, and deleting your account under Profile → Delete my account.

For any other request, write to info@financial-cc.com with your name and a way to reply to you, the right you want to exercise, the data concerned and, for a rectification, the correction and a document supporting it. To verify your identity we will ask you to confirm access to your account; if you act on someone else's behalf, attach the document that proves it.

We will answer within 20 days at most and, if the request is granted, carry it out within the following 15 days. Either period may be extended once by an equal period when the case justifies it.

Withdrawing consent for your financial data means you stop using the app with it: when the withdrawal is carried out, your account and its records are deleted as described above.

If you believe your request was not handled as the law requires, you may go to the Secretaría Anticorrupción y Buen Gobierno, Mexico's personal-data protection authority.

Security

You can sign in with a passkey, a password or Sign in with Apple. A code-based second factor is optional during account setup and is required for password or Apple sign-in once enabled. Passwords are stored as a derived verifier (PBKDF2), never in the clear. Traffic is always encrypted in transit.

Changes to this notice

Any change will be published on this page with its update date. If a change affects what is done with your financial data, the app will ask for your consent again before you keep using it.

Contact

For any question about this notice or your data, write to info@financial-cc.com.