Privacy

Vitafin is a product you use, not a product you are. This page says plainly what we store, why, who can see it, and how to remove it. Last updated 17 September 2026.

What we store

• Your account. The email address you sign in with and the name you choose. No password: sign-in is a one-time code sent to that address, or your Google account (see below).
• Your financial records. The accounts, transactions, cards, loans, investments, budgets, reminders, people and groups you enter or import. Amounts are stored exactly, in their own currency.
• Bank messages you choose to import. If you paste or forward a bank SMS or email, its text is kept with the transaction it produced, on your device and on our server, so the app can learn to read your bank. It is never shown to anyone else and never used for anything except your own records.
• Receipts you attach to transactions.
• Billing state. Whether your trial or subscription is active, and the identifiers our payment provider gives us. Never your card number.
• Google Calendar connection, only if you turn it on: the token Google gives us to write to your calendar, the address of the Google account you connected, your time zone, which kinds of due dates you chose to include, and the identifiers of the events Vitafin created so it can update or remove them later.

Google account and Google Calendar

Two optional features use Google, and each asks Google for only what it needs.

• Continue with Google asks for your basic profile: email address, name and Google account identifier. We use them to sign you in and to tie your Google account to your Vitafin account. Nothing else from your Google account is requested or read.
• Google Calendar (Settings → Google Calendar) asks for permission to view and edit events on your calendars (calendar.events). Vitafin uses it for one thing: to add your own upcoming money dates as events (bills and subscriptions, card payment dates, loan instalments, planned expenses and reminders you created in Vitafin), and to update or delete those events when the underlying item changes or is paid. Vitafin only lists, creates, updates and deletes the events it created itself, which it recognises by a tag it sets on them. It does not read, store or process any other event on your calendar. You choose which kinds go on the calendar, and Disconnect removes the upcoming events Vitafin added, revokes the permission at Google and deletes the token from our server. You can also revoke it at any time from your Google account's third-party access page.

Data received from Google is never sold, never used for advertising, never used to train models, and never shared with anyone other than you and, where it is part of your records, the people and tools you have chosen to share with. Vitafin's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we do not do

• We do not sell, rent or share your data with advertisers or data brokers. There are no ads.
• We do not use your records to train models or to profile you.
• We do not read your bank accounts. Nothing enters Vitafin unless you enter it, import it, or connect a tool that does so on your instruction.
• The app uses no analytics or tracking; it keeps a session token on your device so you stay signed in, and that is all. This marketing site (vitafin.io) uses Google Analytics, through Google Tag Manager, for aggregate visit statistics. It is on by default outside the EU and UK and off until you agree inside them; the bar at the bottom of the page lets you decline at any time, and we remember that on this device.

Where it lives

Your data is stored on servers we operate in Amazon Web Services' Mumbai region (ap-south-1), encrypted in transit. The app also keeps a copy on your device so it works offline; signing out removes that copy. Nightly backups are kept for up to 90 days and then deleted.

Who can see it

• You.
• People you share with. A partner sees only the accounts you choose to share; members of an expense group see that group's expenses. You can stop sharing at any time and their copy is removed.
• AI tools you connect. If you connect ChatGPT, Claude or another assistant over MCP, it can read and write your records on your behalf, only after you approve it with your sign-in code. You can revoke that access from the tool or by signing out everywhere. What the assistant does with what it reads is governed by that provider's own privacy policy.
• Us, only to operate the service, fix a problem you report, or when the law requires it. We do not browse customer data.

Services we rely on

• Dodo Payments handles subscriptions as the merchant of record. Your card details go to them, never to us. Their policy: dodopayments.com/privacy.
• Google Workspace sends our email, including sign-in codes.
• Google Sign-In and Google Calendar, only if you use them, as described above. Google's policy: policies.google.com/privacy.
• Exchange-rate and market-price providers answer requests for rates and quotes. Those requests carry currency codes and ticker symbols, not your identity or amounts.
• Amazon Web Services hosts the service.
• Google Analytics counts visits to this marketing site only. Google's policy: policies.google.com/privacy.

Your choices

• Export. Settings → Export CSV gives you every transaction, any time.
• Delete. vitafin.io/support/delete-account (also Settings → Delete account in the app) removes the account and everything in it immediately, after a code to your email confirms it is you; backups expire within 90 days after that.
• Correct. Everything in the app can be edited or removed by you directly.
• Disconnect Google. Settings → Google Calendar → Disconnect removes Vitafin's events and the calendar permission. Signing in by email code instead of Google needs nothing more than using the email option.

Changes

If this page changes in a way that matters, we say so in the app before it takes effect.

Contact

Questions about privacy go to davudul.hakeem@vitafin.io or the contact form.