Privacy

Vitafin is a product you use, not a product you are. This page says plainly what we store, why, who can see it, and how to remove it. Last updated 16 September 2026.

What we store

• Your account. The email address you sign in with and the name you choose. No password: sign-in is a one-time code sent to that address.
• Your financial records. The accounts, transactions, cards, loans, investments, budgets, reminders, people and groups you enter or import. Amounts are stored exactly, in their own currency.
• Bank messages you choose to import. If you paste or forward a bank SMS or email, its text is kept with the transaction it produced, on your device and on our server, so the app can learn to read your bank. It is never shown to anyone else and never used for anything except your own records.
• Receipts you attach to transactions.
• Billing state. Whether your trial or subscription is active, and the identifiers our payment provider gives us. Never your card number.

What we do not do

• We do not sell, rent or share your data with advertisers or data brokers. There are no ads.
• We do not use your records to train models or to profile you.
• We do not read your bank accounts. Nothing enters Vitafin unless you enter it, import it, or connect a tool that does so on your instruction.
• We do not use tracking cookies on this site or in the app. The app keeps a session token on your device so you stay signed in; that is all.

Where it lives

Your data is stored on servers we operate in Amazon Web Services' Mumbai region (ap-south-1), encrypted in transit. The app also keeps a copy on your device so it works offline; signing out removes that copy. Nightly backups are kept for up to 90 days and then deleted.

Who can see it

• You.
• People you share with. A partner sees only the accounts you choose to share; members of an expense group see that group's expenses. You can stop sharing at any time and their copy is removed.
• AI tools you connect. If you connect ChatGPT, Claude or another assistant over MCP, it can read and write your records on your behalf, only after you approve it with your sign-in code. You can revoke that access from the tool or by signing out everywhere. What the assistant does with what it reads is governed by that provider's own privacy policy.
• Us, only to operate the service, fix a problem you report, or when the law requires it. We do not browse customer data.

Services we rely on

• Dodo Payments handles subscriptions as the merchant of record. Your card details go to them, never to us. Their policy: dodopayments.com/privacy.
• Google Workspace sends our email, including sign-in codes.
• Exchange-rate and market-price providers answer requests for rates and quotes. Those requests carry currency codes and ticker symbols, not your identity or amounts.
• Amazon Web Services hosts the service.

Your choices

• Export. Settings → Export CSV gives you every transaction, any time.
• Delete. Write to us from the address on your account and we delete the account and everything in it within 7 days; backups expire within 90 days after that.
• Correct. Everything in the app can be edited or removed by you directly.

Changes

If this page changes in a way that matters, we say so in the app before it takes effect.

Contact

Questions about privacy go to davudul.hakeem@vitafin.io or the contact form.