Privacy Policy

Your personal expenses, income, bills, budgets, loans, and settings (language, currency, theme, notification preferences) are stored in a local database on your device. Unless you turn on Backup & sync (section 8), we do not transmit, collect, or have any access to this data, whether or not you have an account. Uninstalling the app deletes the copy on your device. You may create backup files (JSON/CSV) at any time; those files are saved or shared only where you choose to put them.

The Loans feature lets you record money you have lent to or borrowed from someone. To do that you may type in that person’s name (required) and, optionally, their phone number and address.

We never read your address book — the app has no contacts permission and no contact picker, so anything about another person is there only because you typed it. Loans are personal-only and never shared with a family. They are stored in the local database on your device and, only if you turn on Backup & sync, in your private backup on our server (section 8). They are included in any JSON backup or CSV export you choose to create, so please consider that before sharing an export file with someone.

These are used only at the moment you ask for them:

• Receipt photos. If you attach a receipt to a personal expense, the app asks for camera or photo-library access at that point. The photo you pick is copied into the app’s own private storage. It is uploaded only if you turn on Backup & sync (section 8), to your private backup. Receipts are never shared with a family.
• Saving a report. If you save a monthly report as an image, the app asks for permission to write that one file to your gallery.
• Backup and restore. Creating a backup writes a file where you choose. Restoring opens a file picker so you can select a backup — the app can read only the file you pick, not browse your storage.

If you turn on App Lock, unlocking is handled entirely by your device’s own fingerprint, face, or PIN system. The app is only told whether authentication succeeded or failed. Your biometric data never leaves the secure hardware on your device, and the app never sees or stores it.

The app uses Firebase Analytics and Firebase Crashlytics (Google) to understand which features are used and to fix crashes. These reports never include the titles, notes, locations, names, email addresses or exact amounts you enter (amounts are reported only as broad ranges, and categories you create yourself are reported simply as “custom”). They do include a Firebase app-instance identifier, your device model and OS version, the app version, and — if you use the Family plan — your role in the family (owner, admin, member or teen) and a rough family size, but never who is in it.

The app also uses Firebase Remote Config (Google) to download settings, such as which plan offer to show and when. That request carries a Firebase installation identifier and basic details such as the app version and the device’s language and country, and never any of your records.

The Family plan lets a household share expenses, income, budgets and categories. It needs an account, as do voice entry (section 7), Backup & sync (section 8) and Ask Fimbi (section 10).

• Your account. You sign in with Google (or, on iPhone, Apple) through Google’s Firebase Authentication. We receive your name, email address and a user identifier from the sign-in provider. We do not receive your password.
• What is stored on our server. The family’s name and currency; its members and their roles and permissions; and the expenses, income, budgets and categories that members add to the family (titles, amounts, dates, categories, optional locations and notes, and who paid or earned); and, on Family Pro, the monthly allowance the owner sets for a teen member and a note in the family activity when it is exceeded. Your personal records are not part of the family — only what you add in the family space, or explicitly copy into it. A “stipend” a member records for themselves is saved as personal income and never sent to the family.
• Who can see it. Other members of your family, within the permissions the family owner sets. For example, the owner can let a member see everyone’s income or only their own. We do not sell or share family data with anyone else.
• Where and how. Data travels encrypted (HTTPS) to Fimbi’s server and is stored in its database. A copy is kept on each member’s device so the family space works offline; it is removed from a device when you sign out, leave the family, are removed, or the family is deleted.
• Leaving and deletion. You can leave a family at any time; what you added stays with the family, shown under your name. The family owner can delete the family, which removes everyone’s access to it. You can delete your account in the app (Settings → Account → Delete account) or by emailing us from the address you signed in with (section 14); we will confirm and delete it within 30 days. Deleting your account removes your name and email from our server; entries you added to a family remain there, attributed to “Deleted user”, so the family’s records stay complete. Deleted family records are permanently purged after 90 days.

You can add expenses by speaking instead of typing. It works only when you tap the microphone button:

• Recording and transcription happen on your phone. The app asks for microphone access (and, on iPhone, speech-recognition access) the first time you use it. Your speech is turned into text by your phone’s own speech service — Google’s on Android, Apple’s on iOS — under that provider’s privacy terms. The app never receives or transmits audio.
• Only the text goes to Fimbi’s server, together with the names of your expense categories (including ones you created). The server passes it to Google’s Gemini service to pick out amounts, categories, titles and dates, and returns the result. No saved records and no other data go with it. You need to be signed in to use voice entry; the server keeps only a count of how many entries your account has used, so it can apply your plan’s allowance — never what you said.
• The text is not stored by Fimbi. It is processed and discarded; it is not written to our database or our logs. Google processes it as our service provider under the Gemini API terms.
• Nothing is saved automatically. The suggested rows are placed in the Add Expense form for you to check, change or discard. They are stored only when you tap Save — on your device, or in your family if you are adding to the family space.
• You are asked first. A notice explaining the above is shown before your first voice entry, and you can decline.

If you sign in, you can turn on Backup & sync (Settings → Backup & sync). It is off until you turn it on; signing in alone uploads nothing.

• What is stored on our server. Your personal expenses, income, bills, budgets, custom categories and loans, the receipt photos attached to your expenses, and your language, currency, theme and name settings. Loans include the other person’s name and any phone number or address you typed for them (section 2). App Lock, notification times and other device settings are not backed up.
• Why. Only to keep a copy for you and to keep your phones in step: if you lose or change your phone, signing in brings your records back, and a change on one of your phones appears on the others.
• Who can see it. Only you, through your own account. It is not visible to your family (Family plan data is separate, section 6), and we do not sell or share it with anyone.
• How it is protected. It travels encrypted (HTTPS) and is stored encrypted on Fimbi’s servers and storage. It is not end-to-end encrypted: Fimbi’s systems can technically read it in order to store and sync it, and only authorised operations staff can access the servers.
• Turning it off and deleting it. You can turn backup off at any time and choose to keep the cloud copy or erase it. Erasing deletes every backed-up record and photo from our server and turns backup off on your other phones; the data on your phones is not touched. Deleting your account also erases your backup. Signing out stops backing up and leaves your data on your phone and in your backup.

• No account data unless you sign in (for the Family plan, Backup & sync, voice entry, Ask Fimbi or a paid plan)
• No personal records or receipt photos unless you turn on Backup & sync
• No bank, card, or SMS access — all entries are manual
• No location data (a “location” on an expense is text you type)
• No access to your contacts or address book
• No browsing of your photos or files — only the specific items you pick, as described in section 3
• No advertising ID — the app shows no ads and bundles no advertising SDK
• No card or bank details — subscriptions are paid through Google Play or the App Store (section 10)
• No audio recordings — see section 7

The app shows no ads and bundles no advertising SDK.

Paid plans. Pro Single, Pro Couples and Family Pro are auto-renewing subscriptions bought through Google Play or the App Store, using the RevenueCat service. You need a Fimbi account to buy one, so the plan follows your account to your other phones and to your family. RevenueCat receives your Fimbi user id and the store’s purchase record; Fimbi’s server keeps your plan, its status, period, store and renewal date. Neither Fimbi nor RevenueCat ever sees your card or bank details. You cancel in Google Play or the App Store; deleting your Fimbi account does not cancel a subscription, but it does remove your plan record and your RevenueCat customer record.

Ask Fimbi. When you ask the assistant a question (after a one-time notice you can decline), the app sends your question, the last few messages and a summary of the space you are in (dates, amounts, category names and short titles; never notes, places, photos or other people’s names) to Fimbi’s server, which asks Google Gemini for the answer. With Backup & sync on, or in a family, the server may also total the records it already holds for you to answer. Questions, answers and summaries are not stored on the server or in its logs; the conversation is kept only on your phone until you clear it. You need to be signed in to ask, and the server keeps only a count of how many questions your account has used, to apply your plan’s allowance.

AI monthly summary. On paid plans, the Insights screen can write a short summary of a month. It works the same way as Ask Fimbi, using the same kind of summary of that month, and the written summary is kept only on your phone (it is removed when you sign out). On the Free plan the short summary is worked out on your phone and nothing is sent.

The third-party services involved are Google’s Firebase (sign-in, analytics, crash reports, App Check, Remote Config), Google Gemini (voice entry and Ask Fimbi, through Fimbi’s server) and RevenueCat (subscriptions).

Bill and loan reminders are scheduled locally on your device. No notification data is sent to any server.

Fimbi is a general-audience app and is not directed at children under 13. In the Family plan, a family owner may add a family member with the “Teen” role, who can see and add only their own expenses and pocket money, and on Family Pro can be given a monthly allowance. Each member signs in with their own Google or Apple account, under that provider’s own age rules and parental controls.

If we change this policy, we will update this page and the effective date above. Material changes will be noted in the app’s release notes.

Questions or requests, including account deletion: developers@kamxol.com

See also our Terms of Use.