IZ Finance ("the app", "we") helps you budget and track your net worth. This policy explains what we collect, why, and who we share it with. In plain terms: we collect only what's needed to run the app, we never sell your data, and you can ask us to delete it at any time.
What we collect
- Account details — your email address, handled by our authentication provider (Supabase).
- Financial data you enter — income, expenses, budget limits, net-worth balances and targets, and any notes you add.
- Payment notifications and bank SMS (Android app, only if you turn on auto-logging)— the app reads notifications from the payment apps you choose and business SMS from banks (they start with “RM0”). On your phone it keeps only the ones that look like a payment and cuts card and account numbers to the last 4 digits; only those are sent, and we store the amount, the shop and which app or bank it came from — not the message itself. Chats, messages from people, OTP/TAC codes and promotions never leave your phone. Turn it off any time in Settings → Capture & alerts.
- Devices for alerts— if you turn on alerts, a push address for that phone or browser and a name for it (e.g. “Android phone · Pixel 8”), so you can see and switch off each device.
- Telegram link — if you connect Telegram, we store your Telegram chat ID so the bot can message you. You can unlink at any time in Settings.
- Usage & performance — anonymised, aggregate analytics (page views, load speed) via Vercel Analytics, and error diagnostics to help us fix crashes.
How we use it
To provide the service: store and display your finances, generate your monthly report, and (if linked) send Telegram messages. Expense text and report figures are processed by OpenAI to categorise entries and write report summaries; this data is sent only to produce your result and is not used to train models.
Who we share it with
We use a small set of trusted processors, each only for its stated purpose:
- Supabase — database & authentication.
- Vercel — hosting & anonymised analytics.
- OpenAI — expense categorisation & report text.
- Telegram — only if you link your account.
- Google Firebase / Apple — delivering alerts to your phone or browser, only if you turn alerts on.
- Resend — sending workspace-invite emails.
- Sentry — error monitoring (diagnostics, not your financial data).
- RevenueCat / Apple / Google — in-app purchase processing in the mobile apps.
We never sell your data or share it for advertising. IZ Finance shows no ads, on the web or in the apps.
How we protect it
Every table enforces row-level security, so your data is isolated to your own account and workspace. Traffic is encrypted in transit (HTTPS). Access to production data is restricted.
Your choices & rights
You can view and edit your data in the app, unlink Telegram, export a copy of your data (Settings → Account → Your data), and permanently delete your account and everything in the workspaces you own (Settings → Account → Delete account) — deletion is immediate. We retain your data for as long as your account is active. If you can no longer sign in, email us from your registered address and we'll delete it for you.