1. Overview
My Finances (“we”, “us”, or “our”) is a personal finance tracking application available at https://www.my-finances.site. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
By using My Finances, you agree to the practices described in this policy.
2. Information We Collect
Account information
When you sign up, we collect your name and email address. These are used solely to identify your account.
Financial data you enter
All investment transactions (stocks, mutual funds, gold, crypto, EPF, FD, RD), expense records, and goals are entered by you and stored in your account. This data is never shared with third parties.
Profile information
You may optionally provide your phone number and PAN number to enable PDF password derivation for email imports. Your PAN number is encrypted using AES-256-GCM before being stored and is never logged or transmitted in plain text.
Vault (optional)
The Vault is an optional, PIN-locked store for details such as bank accounts, credit cards, insurance policies and logins. It works differently from everything else in the app: your entries are encrypted inside your own browser using a key derived from your PIN (PBKDF2-SHA256, 310,000 iterations) before anything is sent to us.
- Your vault PIN is never transmitted to or stored on our servers.
- We receive and store only the encrypted result, which we encrypt a second time with a server-side AES-256-GCM key before writing it to the database.
- We cannot read your vault contents, and we cannot recover them for you. Support cannot unlock a vault.
- Because of this, a forgotten PIN means the data is permanently unreadable. The only remedy is to destroy the vault and start again.
- Repeated failed unlock attempts are rate-limited on our side, which requires us to store a failure count and lockout timestamp against your account.
A 6-digit PIN is short by design, for usability. It protects your entries from anyone who obtains database access alone; it is not intended to withstand an attacker who has also obtained our server-side encryption key.
Shared wallets (optional)
A wallet lets you share selected details from your Vault with other My Finances users — for example, pooling which credit card earns a discount where. Sharing is deliberate and granular:
- You choose which individual fields to share. Fields you do not tick are never encrypted into the wallet and never leave your Vault. Card numbers, CVVs, ATM PINs and passwords are unticked by default.
- Each wallet has its own encryption key, generated in your browser. The wallet name and every entry are encrypted with it before reaching us, so we cannot read a wallet’s contents any more than we can read your Vault.
- Invite links carry that key in the part of the URL after the
#, which browsers never send to a server. Treat an invite link like a key and share it only with people you intend to let in. You approve each request before anyone can see the contents. - To make sharing work, each user gets a public/private key pair. The public half is stored unencrypted so others can share with you; the private half is encrypted under your Vault PIN.
- Removing someone generates a fresh wallet key and re-encrypts everything, so they cannot read anything from that point on. It cannot undo what they already viewed or copied.
- Members can see the name and email address of everyone else in a wallet, and who contributed each entry.
Sharing full credit card credentials generally breaches your card issuer’s terms and can void zero-liability fraud protection. That choice is yours to make; the defaults are set to avoid it.
Gmail access (optional)
If you choose to connect your Gmail account, we request read-only access (gmail.readonly scope) to search for specific financial statement emails from CDSL (eCAS@cdslstatement.com) and SafeGold (estatements@safegold.in).
- We only access emails matching those specific senders.
- We only download PDF attachments from those emails.
- We do not read, store, or process the body or subject of your emails.
- We do not access any other emails in your inbox.
- Your Gmail OAuth refresh token is encrypted with AES-256-GCM before being stored in our database.
- You can disconnect Gmail at any time from the Integrations page, which permanently deletes the stored token.
Our use of data obtained via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
3. How We Use Your Data
- To display your financial portfolio, transactions, and analytics within the app.
- To parse financial statement PDFs and populate your transaction records.
- To authenticate your account securely.
- To calculate portfolio metrics (XIRR, P&L, net worth, savings rate).
We do not use your data for advertising, profiling, or any purpose beyond operating the app for you.
4. Data Storage & Security
- All data is stored in a private MongoDB database.
- Sensitive fields (PAN number, Gmail refresh token) are AES-256-GCM encrypted.
- Vault entries are end-to-end encrypted in your browser with your PIN, then encrypted again server-side. We hold no key capable of reading them.
- Shared wallet entries are encrypted with a per-wallet key that only members hold, then encrypted again server-side. Wallet names are encrypted too.
- Authentication uses JWT tokens stored in httpOnly cookies.
- All communication between client and server uses HTTPS.
- The application backend is hosted on Render; the database is hosted on MongoDB Atlas.
5. Data Sharing
We do not sell, rent, or share your personal or financial data with any third party. The only external services we communicate with are:
- Yahoo Finance — to fetch live stock prices (your data is not sent; only stock symbols are queried).
- MFAPI — to fetch mutual fund NAV history (scheme numbers only).
- CoinDCX — to fetch crypto prices (coin symbols only).
- SafeGold API — to fetch gold rates (no user data sent).
- Google (Gmail API) — only if you explicitly connect your Gmail account.
6. Data Retention & Deletion
Your data is retained as long as your account exists. You can delete individual transaction types at any time from the Profile page (Data Management section). To permanently delete your account and all associated data, contact us at the email below.
Your vault can be erased at any time with “Destroy vault”, which deletes every entry along with the salt used to derive your key. This is immediate and irreversible.
Deleting a wallet you own removes it for every member. Leaving or being removed from a wallet revokes your access to it, and entries you contributed can be withdrawn by you at any time.
7. Your Rights
- You can view and edit all your data within the app at any time.
- You can disconnect Gmail integration at any time from the Integrations page.
- You can delete all data for any asset type from the Profile page.
- You can request full account deletion by contacting us.
8. Changes to This Policy
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.