Last updated 21 August 2026
Finyea keeps your financial records on your device. Your individual transactions, the merchants and payees on them, your categories and notes, and your account names are stored in the app and are never transmitted to Finyea or to anyone else.
There is no Finyea account, no sign-up, no email address and no password. Finyea contains no advertising and no third-party tracking or analytics SDKs.
A small amount of information does leave your device, because some things cannot be done offline: market prices, public blockchain balances, and answering questions you type into the assistant. Everything below explains exactly what, and to whom.
Finyea is built and operated by an independent developer, who is the data controller for the purposes of this policy. The developer's legal name is shown on Finyea's app store listing.
For anything in this policy, or to exercise any of the rights described below, email [email protected].
All of the following is stored only on your device, in the app's own local database and protected by the operating system's file encryption:
Finyea offers no backup or sync service today, so nothing copies any of it off the device, and deleting the app deletes all of it.
Of the list above, your transactions, merchants, payees, categories, notes and account names never leave your device at all. Two things on it do leave, in specific cases and nowhere else: your wallet addresses, when a balance or transaction history has to be read from a public blockchain, and aggregate totals derived from your balances, when you ask the assistant a question. Both are described in full below.
Finyea operates a small server, referred to here as the proxy, hosted in Frankfurt, Germany. It exists so that API keys for market-data providers are not shipped inside the app. It sends the following, and nothing else:
| What | When | Why |
|---|---|---|
| A device attestation key identifier and a signature | Every request | Proves the request came from a genuine, unmodified copy of Finyea, using Apple's App Attest. It is generated on your device, is not linked to your Apple ID, name or any device identifier, and cannot be traced back to you. |
| A cryptocurrency wallet address and which blockchain it is on | When you add a wallet or refresh it | To read its balance and transaction history from the public blockchain |
| Cryptocurrency symbols, such as BTC | When prices refresh | To fetch current and historical market prices |
| Currency codes, such as EUR | When exchange rates refresh | To convert amounts into your base currency |
| A summary of your finances, and your conversation with the assistant | Only when you use the assistant | To answer the question. Detailed immediately below. |
| Whether this installation has an active Plus subscription | Only when you use the assistant | To apply the monthly question allowance for your tier. It is a single word, free or plus, and carries no purchase or payment detail. |
When, and only when, you send a message to the assistant, Finyea builds a short summary and sends it with your question. The summary contains your base currency, your total net worth, how your money is split across asset classes, today's date, and for each of the most recent months, the month it covers, your total income, your total spending, and your largest spending categories by name and amount.
It does not contain individual transactions, the dates or amounts of any of them, merchants, payees, account names or account numbers. The assistant genuinely cannot see them, and will say so if you ask it about a specific payment.
So that the assistant can follow a conversation, the recent messages in the current conversation — your earlier questions and its earlier answers, up to the last ten exchanges — are sent with each new question. Starting a new conversation in the app discards that history, and it is not sent again.
Your question is free text, so please avoid typing anything into it that you would not want sent to an AI provider.
The server keeps exactly one record per installation of the app, containing:
That is the complete record. Wallet addresses, balances, transactions, financial summaries and assistant questions are not stored — they are used to answer the request and then discarded. Market prices and exchange rates are cached, but that is public market data, identical for every user, and contains nothing about you.
Server logs record which endpoint was called, the attestation key identifier, and — when a request fails — the reason it failed. They are deleted automatically after 14 days.
Your device's IP address is visible to the server while your request is being handled, as it must be for any internet request to return an answer. It is not written to any log and is not stored. The market-data, blockchain and AI providers never see it at all, because the proxy, not your device, is what connects to them.
| Recipient | Receives | Purpose | Where |
|---|---|---|---|
| Apple (for the iOS app) | App Attest attestation; subscription purchases | Device integrity, and billing | European Union and United States |
| A cloud hosting provider, in Frankfurt, Germany | Runs the proxy | Hosting | European Union |
| Blockchain data providers | A wallet address and which network it is on | Balances and transaction history | Outside the EEA |
| Market data providers | Cryptocurrency identifiers and currency codes | Prices and exchange rates | Outside the EEA |
| An AI model provider | The financial summary and your conversation | Answering the question | Outside the EEA |
None of these receive your name, email address or any account of yours, because Finyea does not hold any. The specific providers behind each category are named on request — write to the address at the end of this policy.
The proxy itself runs in the European Union, but as the table shows, some of the providers it calls are outside the European Economic Area, including in the United States. So when you add a wallet, refresh prices, or ask the assistant a question, data leaves the EEA.
What leaves is deliberately narrow. No name, email address, account or device identifier is attached to any of it, because Finyea holds none — a blockchain provider receives an address and nothing about who is asking, and the AI provider receives aggregate totals and your question with nothing attached that identifies you or links two questions together.
You can ask which safeguard applies to a specific provider, and be told, by writing to [email protected].
Blockchain addresses are pseudonymous but permanent and public. The data providers that serve those lookups necessarily learn which addresses Finyea is asking about. They are not told who is asking, but if someone already knows an address belongs to you, they would be able to see that it is being queried.
Your summary and conversation are passed to an external AI model provider, reached through a routing service. That routing account is configured to send requests only to model providers that operate under zero data retention — they do not store the request, do not train on it, and do not publish it to public datasets — and to refuse a request outright rather than fall back to a provider on weaker terms. The routing service's own optional prompt logging, which would keep a copy in exchange for a discount, is switched off.
These are settings held with that vendor rather than guarantees Finyea can enforce by itself, and they are stated here as the configuration in force on the date at the top of this page.
No device identifier is attached to the request, so the AI provider has no way to tell one Finyea user from another, or to link two questions to the same person.
Subscriptions are processed entirely by the app store you bought through — Apple, for the iOS app. Finyea never sees your payment details and learns only whether a valid subscription exists. The store's handling of that transaction is covered by its own privacy policy.
Where the UK and EU General Data Protection Regulation applies:
No data is used for marketing or profiling, and there is no automated decision-making that produces legal effects concerning you or similarly significantly affects you.
Providing this information is not a legal or contractual requirement, and you are not obliged to provide it. It is what the individual features need in order to work: without a wallet address a balance cannot be read, and without a summary the assistant cannot answer. Nothing happens if you simply do not use those features — the rest of the app works offline.
Your right to object. Where processing rests on legitimate interests — that is, device attestation and the monthly question counter — you have the right to object to it at any time. Write to [email protected].
Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, and to object to it. You also have the right to complain to your local data protection authority.
In practice most of this is already in your hands, and it is worth being straightforward about why. Everything personal Finyea holds about you is on your device, so you can read it, change it, and destroy it at any time without asking. The single record on the server is keyed to an attestation identifier that only your device holds; I have no way to connect it to a person, which is a deliberate design choice and also means I cannot look yours up if you write to me. Deleting the app abandons that record permanently.
If you want that record deleted rather than abandoned, get in touch and I will explain what is needed.
Finyea is not directed at children, and collects nothing that would identify one.
Any change is published on this page with a new date at the top.
Finyea is actively developed, and future versions may add capabilities — a web version, or optional backup and sync — that would change what leaves your device. No such change will be made quietly. Before any release that transmits or stores something this policy currently describes as staying on your device, the change will be announced in the app ahead of time, and where the new processing requires your consent it will be asked for rather than assumed.