FinTrack Privacy Policy
Version 1.0 · Last updated 11 October 2026
FinTrack is a personal and shared money-tracking app made by Revopay Private Limited, a company incorporated in Zimbabwe ("Revopay", "we", "us"). This policy explains what personal information FinTrack collects, why, who it goes to, how long we keep it, and the rights you have over it. It applies to the FinTrack mobile app, to fintrack.revopaytech.com, and to revopaytech.com where it relates to FinTrack (together, the "Service").
We have tried to write it plainly. Where a law gives you more protection than this policy describes, that law applies.
The short version
- We do not sell your information, and we do not share it for advertising. FinTrack shows no ads.
- FinTrack records money; it never moves it. We do not connect to your bank or mobile money account, and we never ask for card numbers, PINs or banking passwords.
- Your app-lock PIN and your fingerprint or face never leave your phone.
- When you scan a receipt, the photo is sent to Anthropic, the company behind the Claude AI model, so it can read the merchant, total and date for you. Anthropic does not use it to train its models. Scanning is optional; you can always type a transaction in instead.
- In a shared workspace or savings group, the other members can see what is recorded there. In a savings group, every member can see every member's contributions and loans. That openness is deliberate.
- You can delete your account from inside the app (More › Delete account).
1. Who is responsible for your information
Revopay Private Limited is the controller of the personal information described in this policy (in some laws the "data controller" or "responsible party").
| For | Contact |
|---|---|
| Privacy questions, requests about your information, our data protection officer | legal@revopaytech.com |
| Help with the app or your account | support@revopaytech.com |
| General and business enquiries | admin@revopaytech.com |
2. What we collect
Information you give us
Account details: your name, email address and password. Your password is stored only as a secure hash by our authentication provider; we cannot read it.
Preferences: your language, your country, your default workspace and how the app should lock.
Your financial records. Everything you enter to track your money:
- accounts, with their names, types, currency, balance and the bank or mobile money provider you type or pick;
- transactions, with amounts, dates, notes, merchants, categories and tags;
- budgets, savings goals and recurring transactions.
These are records you create. They are not drawn from any bank, and FinTrack has no access to the real accounts they describe.
Photos you choose to add: pictures of receipts, and in savings groups, pictures of a proof of payment that a treasurer attaches to a contribution.
Shared workspaces and savings groups:
- your membership and role;
- in a savings group, its contributions, payouts, loans and repayments, votes and ballots, share-outs, and its change log (which records who changed what, and why).
Information about other people. When you invite someone, you give us their email address. Records you keep may also name other people, for example in a note or as a merchant. Please only share what you are entitled to share.
Messages to us. If you contact support, we keep the conversation and whatever you include in it.
Information collected as you use FinTrack
- Device and security information: the type of device (iOS or Android), when it was last used, and whether a PIN has been set up on it. The PIN itself is stored only in your phone's secure storage (the iOS Keychain or Android Keystore). Fingerprint and face unlock are handled entirely by your phone's operating system, and we never receive them.
- Subscription information: if you buy a paid plan, the store you used (Apple App Store or Google Play), the product, its status and renewal date, and the store's transaction reference. We never receive your card or payment details; Apple and Google handle payment.
- Service records: notifications we show you in the app; records that keep offline changes from being applied twice; a count of the receipts you have scanned each month; and a log of deletions, which protects the integrity of shared records.
- Crash and error reports. If the app crashes or hits an error, it sends a diagnostic report through Sentry (see section 5): the device model, operating system and app version, and the technical details of the error. We set it up so that it does not send your name, email address, financial records or photos.
- On our websites: standard server logs (such as your IP address, browser type and the pages you request), kept for security. We use only the cookies needed to run the site and keep you signed in. We do not use advertising or tracking cookies.
What we do not collect
FinTrack does not access your location, your contacts, your microphone or your phone's advertising identifier. It does not read your text messages or your bank or mobile money statements. We do not currently use any analytics or advertising tools. If that changes, we will update this policy first.
Phone permissions
| Permission | When and why |
|---|---|
| Camera | Only when you choose to photograph a receipt or a payment. |
| Photos | Only when you choose to pick a picture from your phone. |
| Face ID / fingerprint | To unlock the app, handled by your phone. It's optional, and a PIN works instead. |
| Notifications | To tell you about reminders and receipts, if you allow it. |
You can withdraw any of these permissions in your phone's settings. The feature that needs it then stops working, and nothing else changes.
3. How we use your information, and why we are allowed to
| What we do | Why the law allows it |
|---|---|
| Create and run your account; store, sync and display your records on your devices; run shared workspaces and savings groups as their members set them up | It's needed to provide the Service you signed up for (performance of our contract with you) |
| Read a receipt you scan and suggest the details | Performance of our contract: you ask for it each time. You always review the suggestion, and nothing is saved until you confirm it |
| Send account emails (sign-up codes, password resets) and in-app notices (reminders, receipts, invitations, changes to a group's terms) | Performance of our contract |
| Process subscriptions, and apply the limits of your plan | Performance of our contract |
| Keep the Service secure: prevent fraud and misuse, enforce our Terms, keep shared records reliable | Our legitimate interest in a safe, trustworthy service, and in some cases a legal obligation |
| Diagnose crashes and fix bugs | Our legitimate interest in a working app. Reports are kept to the technical minimum |
| Answer your messages | Performance of our contract, or our legitimate interest in helping you |
| Meet legal, tax and accounting obligations, and respond to lawful requests | Legal obligation |
Financial information. Some laws treat information about a person's finances as sensitive. Where a law requires it, we process your financial records on the basis of your explicit consent, which you give when you create your account. We use them only to provide the Service. You can withdraw that consent at any time by deleting your account; withdrawing it doesn't affect what we did before.
No automated decisions about you. FinTrack does not make automated decisions that have legal or similarly significant effects on you. A receipt scan only suggests details for you to check. In a savings group, the treasurer or a vote of the members makes every decision, including whether to approve a loan, never FinTrack.
4. Reading receipts with AI
When you choose to scan a receipt, FinTrack:
- uploads the photo to our secure storage;
- sends it to Anthropic PBC (based in the United States), whose Claude model reads the merchant name, total, date and tax;
- shows you what it read, so you can check it, change it or discard it.
Before your first scan, the app explains this and asks whether you want to continue. We record your answer, and you can say no and simply type your transactions in. Anthropic acts as our service provider for this. Under its commercial terms, it does not use your photos to train its models, and it keeps them only for the limited period those terms allow. Photos can show things beyond the purchase, such as a card's last digits or a shop's address. If you'd rather a receipt wasn't read, type the transaction in yourself. The photo stays in our storage, attached to your transaction, until you delete it or your account.
5. Who we share it with
We share personal information only as described here.
Other members of your workspaces. This is the point of a shared workspace:
- In a household or other shared workspace, members see the records kept there, including who added each transaction.
- In a savings group, every member can see each member's contributions, payouts, loans and statement, and the group's change log.
Invitations show who sent them and which workspace they are for. What you put in a shared workspace stays visible to its members while it remains there.
Service providers who process information for us, under contracts that limit them to doing so on our instructions and require them to keep it secure:
| Provider | What they do | Where |
|---|---|---|
| Supabase, Inc. | Hosting, database, sign-in and file storage | European Union (Ireland), on Amazon Web Services |
| Anthropic PBC | Reading the receipts you scan | United States |
| Functional Software, Inc. (Sentry) | Crash and error reports | European Union (Germany) |
| Our email delivery provider | Sending sign-up codes and account emails | Varies by provider |
Apple and Google. They distribute the app and handle subscription payments. They do this under their own privacy policies, as independent controllers, and not on our behalf.
Exchange rates. We fetch currency rates from public sources: the Frankfurter service, and for ZiG, the Reserve Bank of Zimbabwe. No information about you is sent to them.
When the law requires it. We may disclose information if a law, court order or lawful request of a public authority requires it, or where it's needed to protect someone's safety, to prevent fraud or to defend legal claims. Where we are allowed to, we will tell you first.
If our business changes hands. If Revopay is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it. It stays protected by this policy, and we will tell you before it becomes subject to a different one.
We do not sell personal information. We do not share it for cross-context behavioural advertising, and we do not let anyone use it to market to you.
6. Transfers to other countries
Our main database is in the European Union (Ireland). Some providers process information in other countries, notably the United States for receipt reading. When information leaves the country where you live, we rely on safeguards the law recognises. These include an adequacy decision for the destination, standard contractual clauses approved by the relevant authority, or, where the law allows, the fact that the transfer is needed to provide the service you asked for. You can ask us for details of these safeguards at legal@revopaytech.com.
7. How long we keep it
- Your account and records: for as long as your account is open.
- Receipt and payment photos: until you delete them, or the workspace they belong to is deleted.
- When you delete your account:
- We delete the workspaces only you belong to, with everything in them, and your settings, devices, notifications and subscription records.
- We remove your name and email address.
- Records you added to a shared workspace or savings group stay there, without your name, because the other members rely on them. A group's contribution history, for example, can't have holes in it.
- You must hand over ownership of any workspace other people still use before you delete your account. The app takes you through this.
- Backups: deleted information can stay in our encrypted backups until they are replaced, usually within 30 days.
- Crash reports: for up to 90 days.
- Purchase records: as long as tax and accounting law requires.
- Invitations: they expire after 7 days if they're not used.
8. How we protect it
- Information is encrypted in transit (TLS) and at rest.
- Access is enforced inside the database itself: each person can reach only the workspaces they belong to, in the role they hold.
- Changes to money records go only through checked server functions, so a balance can't be edited directly.
- The app locks by default.
- Our staff and providers have access only where their work needs it.
No system is completely secure. If a breach affects your information, we will notify you and the relevant authorities where the law requires it, and tell you what we are doing about it. Please keep your password and your phone's lock secure. If you think someone has got into your account, write to support@revopaytech.com straight away.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you, and receive a copy;
- correct it if it's wrong or incomplete;
- delete it;
- receive it in a portable format, or have it sent to another provider;
- object to, or ask us to restrict, how we use it;
- withdraw your consent where we rely on it;
- complain to a data protection authority.
You can do much of this yourself in the app: edit your records and profile, or delete your account. For anything else, email legal@revopaytech.com. We will need to confirm it's really you before acting. We aim to reply within 30 days, or sooner where the law requires. Exercising your rights is free, unless a request is clearly unfounded or excessive.
Some information belongs to a group as much as to you. For example, your contributions to a savings group also form part of the other members' records. If you ask us to delete or change something like that, we will balance your rights against theirs, and explain our decision.
Complaints. We would like the chance to put things right, so please write to us first. You may also complain to your local data protection authority at any time. In Zimbabwe, that is the Postal and Telecommunications Regulatory Authority of Zimbabwe, in its role as the Data Protection Authority.
10. Additional information for certain regions
Zimbabwe. We process personal information in line with the Cyber and Data Protection Act [Chapter 12:07] and the regulations made under it.
European Economic Area, United Kingdom and Switzerland. The legal bases in section 3 are those of the GDPR and UK GDPR. Section 6 explains our transfers. You may complain to the supervisory authority where you live or work.
South Africa. We process personal information in line with the Protection of Personal Information Act, 2013. You may complain to the Information Regulator.
Brazil. You have the rights in Article 18 of the Lei Geral de Proteção de Dados (LGPD), including confirmation that we process your data, access, correction, anonymisation, portability, deletion, information about sharing, and revoking consent. Our data protection officer (encarregado) can be reached at legal@revopaytech.com. You may also contact the Autoridade Nacional de Proteção de Dados (ANPD).
India. Under the Digital Personal Data Protection Act, 2023, you may access, correct, complete and erase your data, nominate someone to exercise your rights if you die or become unable to, and seek redress for grievances. Our grievance contact is legal@revopaytech.com. If we don't resolve your grievance, you may approach the Data Protection Board of India.
United States. We do not sell personal information, or share it for cross-context behavioural advertising. Where a US state law gives you rights to know, delete or correct your information, or to opt out, you can use them by writing to legal@revopaytech.com. We will not treat you differently for doing so.
Elsewhere. If you live somewhere else and your law gives you rights not listed here, write to us and we will honour them.
11. Age limit
FinTrack is for people 18 and over. We do not knowingly collect information from anyone younger. If we learn that someone under 18 has an account, we will close it and delete their information. If you think this has happened, please let us know at support@revopaytech.com.
12. Changes to this policy
We will update this policy when the Service or the law changes. The version number and date at the top show when it last changed. For a significant change, we will tell you in the app or by email before it takes effect, and where the law requires your consent, we will ask for it. Earlier versions are available on request.
13. Contact us
Revopay Private Limited Privacy and data protection: legal@revopaytech.com Help with FinTrack: support@revopaytech.com General enquiries: admin@revopaytech.com Website: revopaytech.com · FinTrack: fintrack.revopaytech.com