Finess
Get started

Privacy Policy

Version of July 23, 2026

This is an English translation of the Russian-language Privacy Policy. If there is any discrepancy, the Russian version prevails.

Contents

1. General provisions

1.1.This Policy describes what data is processed when you use the Finess service (the “Service”), for what purposes, to whom it may be disclosed, and what rights the user has.
1.2.The personal data operator is Andrey Aleksandrovich Astapov (the “Operator”).
1.3.This Policy applies to the web version of the Service at https://finess.app and to the Finess mobile app for iOS.
1.4.By using the Service, the user confirms that they have read this Policy and consent to the processing of their data on the terms set out in it.
1.5.The current version is published at https://finess.app/privacy (in Russian) and https://finess.app/en/legal/privacy (English translation).

2. What data is processed

2.1. Account data
Email address. It is used for signing in, restoring access, and sending notifications related to the Service.
2.2. Data entered by the user
Information about income, spending, accounts, categories, recurring bills, and savings that the user enters themselves or imports from another app with a file.
The Operator has no access to the user’s bank accounts, cards, or other financial instruments and does not request such access. All information about money movements appears in the Service only because the user entered it.
2.3. Technical data
IP address, device type and model, operating system and its version, app version, data about events within the Service, and error logs.
2.4. Payment data
Date, amount, and status of the payment, and the subscription term.
Bank card details are not transferred to or stored by the Operator. Card details are entered on the payment provider’s side.

3. Why data is processed

3.1.Providing access to the Service and its operation: calculations, syncing between devices, and storing the information entered.
3.2.Identifying the user at sign-in and restoring access.
3.3.Processing subscriptions, accepting payments, and generating and sending receipts.
3.4.Responding to support requests.
3.5.Keeping the Service reliable and secure, and detecting and fixing errors.
3.6.Understanding how the Service is used in order to improve it. Information about events within the Service is used for this.
3.7.Producing anonymized aggregate statistics on use of the Service to develop and improve it. Such statistics do not make it possible to identify a specific user and do not contain information about their financial transactions in a personally identifiable form.
3.8.Data is not sold to third parties and is not used to show advertising.

4. Legal grounds

4.1.Data is processed on the basis of the user’s consent given at registration and for the performance of a contract to which the user is a party.
4.2.Payment data is also processed to comply with obligations under the tax laws of the Russian Federation.

5. Cookies and analytics

5.1.The website and the web version of the Service use two types of cookies:
  • essential — required for signing in and for the session to work; the Service doesn’t work without them;
  • analytics — used by web analytics services to collect visit statistics.
5.2.The user can disable cookies in their browser settings. If essential cookies are disabled, signing in to the Service becomes impossible.
5.3.Third-party web analytics services are used to assess how the Service performs. They receive information about page visits and events within the Service. Information about the user’s income, spending, accounts, and other financial transactions is not shared with such services.

6. Who data is shared with

6.1.Data may be shared with the following categories of recipients only to the extent necessary for the Service to work:
  • cloud infrastructure and data storage providers;
  • the payment provider, to accept payments;
  • the email delivery service, to deliver emails;
  • web analytics services, to the extent of information about visits and events.
6.2.Data is shared with other parties only on grounds provided for by the laws of the Russian Federation.
6.3.Data is transferred over a secure connection.

7. Retention period

7.1.Account data and information entered by the user are stored for as long as the account exists.
7.2.When an account is deleted, its data is deleted immediately. Backup copies are deleted within no more than 30 (thirty) calendar days.
7.3.The Operator may delete an account that has had no activity and no active subscription for more than 12 (twelve) months, after sending a notice at least 30 (thirty) calendar days before deletion.
7.4.Records of completed payments are kept for the period required by the tax laws of the Russian Federation, regardless of account deletion.

8. User rights

8.1.The user has the right to:
  • obtain information about what of their data is processed;
  • correct inaccurate data;
  • export the data they entered — from Profile, at any time, whether or not they have an active subscription;
  • delete their account together with all the data they entered — from Profile;
  • withdraw consent to the processing of personal data.
8.2.Withdrawing consent results in deletion of the account, since the Service cannot be provided without processing data.
8.3.Requests regarding data processing should be sent to support@finess.app. The response time is no more than 10 (ten) business days.

9. Data protection

9.1.User data is accessible only to the user under their own account. Access control is enforced at the database level: one user cannot access another user’s data.
9.2.The Operator has the technical access to the database needed to maintain the Service. This access is used only to fix malfunctions and keep the Service running.
9.3.Passwords are not stored in plain text.
9.4.Data is transferred between the user’s device and the Service over an encrypted connection.
9.5.The Operator takes reasonable measures to protect data but cannot guarantee the absolute security of information transmitted over the internet.

10. Minors

10.1.The Service is not intended for use by persons under 18 without the consent of their legal guardians.
10.2.If the Operator learns that a minor’s data is being processed without such consent, the Operator deletes it.

11. Changes to this Policy

11.1.The Operator may change this Policy. A new version takes effect upon publication at https://finess.app/privacy; the English translation is updated at https://finess.app/en/legal/privacy.
11.2.Material changes are communicated to users at the email address associated with their account.

12. Contact

For questions about personal data processing:
Email: support@finess.app