Privacy policy

1. Data we collect

We collect three categories of data to provide the service:

2. How we obtain data

Financial data is obtained through Open Banking API — a regulated, secure interface that allows reading your account information with your explicit consent. We never store your bank login credentials (passwords or PINs).

• You give consent through the Open Banking authorisation flow
• The Open Banking service provider (GoCardless / NUMBER2) transfers data to our platform
• Data is refreshed automatically according to the access you grant
• You can revoke access at any time from your bank settings or through our app

3. How we use your data

• Financial insights: Transaction analysis, spending categories, budget views, and AI-assisted suggestions.
• Product improvement: Understanding how people use features so we can improve the app.
• Technical operations: Error detection, security monitoring, and service stability.
• Email communication: Important account notices, security alerts, and updates you request.

We do not sell your personal data to third parties for advertising purposes.

4. Sharing data with third parties

Your data may be shared only with trusted partners, and only as much as needed to provide the service:

• Open Banking service provider (GoCardless / NUMBER2): To receive account data with your consent. They operate under EU financial regulation (PSD2).
• Analytics tools (e.g. ): Anonymised usage data may be shared with analytics providers for product improvement. This data does not identify you personally.
• Cloud infrastructure: Data is stored on secure cloud servers that meet GDPR requirements.

5. Data storage and security

6. Your rights (GDPR)

As an EU resident, under the General Data Protection Regulation (GDPR) you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to erasure: You can request deletion of your data (“right to be forgotten”). You can submit a request via account settings or email.
• Right to withdraw consent: You can withdraw consent for Open Banking access or other processing at any time. This does not affect processing that was lawful before withdrawal.
• Right to data portability: You can receive your data in a commonly used, machine-readable format.
• Right to lodge a complaint: You may lodge a complaint with State Data Protection Inspectorate (ada.lt) if you believe your rights have been violated.