Privacy Policy

F!nUp (“F!nUp”, “the App”, “we”, “us”)

Effective date: 23 October 2026

This Privacy Policy explains how F!nUp handles information when you use the F!nUp mobile application. F!nUp is a personal-finance companion: you enter key figures about your finances, and the App builds a financial snapshot, assigns a Financial Level, and suggests a next action. It is not a bank, payment service, or investment advisor.

1. Who is responsible

The operator of F!nUp is Oleksandr Shyrokyi, Ukraine.

Contact: shyrokyi.oleksandr@gmail.com
Website: https://shyrokyi.com

2. What this App does not do

In the current version of F!nUp:

• You do not create an account, and we do not ask for your email, phone number, password, or government ID.
• We do not operate a F!nUp cloud, user sync, or remote backup of your finances.
• We do not use advertising SDKs or analytics SDKs.
• We do not send your income, expenses, balances, debts, loans, assets, names, or comments to a F!nUp server. If you send in-app feedback, Sentry receives a screenshot of what is on screen (see section 5).

3. Information you enter on the device

You may enter, and the App stores on your device:

• Income sources — name, monthly amount, currency, and whether the income is active or passive
• Expense sources — name, monthly amount, and currency
• Accounts — name, balance, and currency (cash, cards, and similar balances you choose to record)
• Assets — name, estimated value, currency, and category (housing, vehicle, investments, business, or other holdings you record)
• Debts — creditor name, amount owed, currency, dates, status, optional linked account, and free-text comments
• Loans you issued — debtor name, amount, currency, dates, status, optional linked account, and comments
• Desired lifestyle expenses — an optional monthly figure used for higher Financial Levels
• Tasks — titles, due dates, and completion status (including suggested system tasks)
• Notes — title and body text you write for yourself
• Reminder settings — day of month and time for a monthly check-in, and time of day for due-date reminders (tasks, debts, and loans)
• Display preferences — theme, interface language, hide-numbers toggle and mask symbol, hide-decimal-places toggle, and whether optional App Lock is on (this flag stays on the device; it is not included in a CSV / .finup backup)
• Diagnosis history — computed snapshots (level, criteria, totals, and copies of the figures used at that time)

You may also type names of other people (creditors and debtors) and comments. Those are your responsibility. Do not enter information you are not allowed to store.

The App does not collect your country of residence as a profile field. Display language follows the device locale (English, Ukrainian, or Polish), unless you choose English, Ukrainian, or Polish in Settings.

4. How we process that information

All of the information in section 3 is processed on your device to:

• calculate your financial snapshot and Financial Level
• show history and trends
• generate suggested tasks
• schedule a local monthly reminder
• schedule local due-date reminders for open tasks, debts, and loans
• let you hide amounts on screen
• let you hide decimal places on displayed amounts
• let you export or import a backup file you choose
• let you share a short loan-reminder message to an app you choose
• let you optionally lock the App with the device’s Face ID, fingerprint, or PIN (Premium)

Storage uses a local database in the App’s sandbox on the device. That database is encrypted at rest with AES. The encryption key is generated on the device and stored in the operating system’s secure storage (Keychain on iOS, Keystore on Android). There is no separate F!nUp database password you can type or recover. If you restore the App files onto a new phone without that OS key, the local database cannot be read — export a CSV or password-protected .finup file first if you need a copy you can import.

Optional App Lock uses the system unlock (Face ID, fingerprint, or device PIN). It does not send biometric data to F!nUp. If Premium later lapses while App Lock is already on, the lock stays on until you turn it off.

5. Information that leaves the device

Exchange rates. The App may request public mid-market rates from the National Bank of Poland (NBP) Table A (https://api.nbp.pl) so amounts can be shown in the currencies available in that table (and PLN as the Polish zloty). The free core of the App uses USD, EUR, UAH, and PLN; additional Table A codes may require a Premium subscription. That request does not include your financial entries. NBP (or its infrastructure) may see ordinary technical data such as IP address, time, and device/network metadata, under NBP’s own terms.

The App may also request public last prices from Binance Spot (https://api.binance.com) for a fixed set of cryptocurrencies, quoted against USDT and treated as a USD bridge. Using those cryptocurrencies in the book or as the display currency may require a Premium subscription. That request does not include your financial entries. Binance (or its infrastructure) may see ordinary technical data such as IP address, time, and device/network metadata, under Binance’s own terms.

Subscriptions (Premium). Optional monthly or yearly Premium subscriptions are sold through Apple App Store or Google Play Billing and managed with RevenueCat (RevenueCat, Inc.). When you purchase, restore, or the App checks entitlement status, Apple, Google, and/or RevenueCat may process purchase identifiers, subscription status, and ordinary technical data needed to validate the purchase. That flow does not send your income, expenses, balances, debts, loans, assets, names, or comments to a F!nUp server or to RevenueCat. Store and RevenueCat processing is under their own terms and privacy policies.

Crash and error reports. If the App crashes or hits an unexpected error, it may send a diagnostic report to Sentry (Functional Software, Inc.) so we can fix the problem. That report can include the error message and stack trace, app version, device model, OS version, locale, and similar technical data. We configure the SDK so it does not automatically attach screenshots, Session Replay, your IP as a user identifier, or a copy of your ledger. An exception message could still contain text that was in the crash. We do not intend to receive your income, expenses, balances, debts, loans, assets, names, or comments from a crash report.

In-app feedback. You can send feedback from the App (the message-icon control). If you do, we receive the text you type and a screenshot of the current screen, including any drawings you add on that screenshot. That image can show whatever is visible at that moment — amounts, names, and comments. Hide-numbers (in Settings) masks amounts only; names and comments stay visible. On financial screens, if amounts are visible, the App may warn you before feedback opens and let you hide numbers for that screenshot without changing your Settings. The report can also include ordinary technical data similar to a crash report (app version, device model, OS version, locale). Sending feedback is optional and is not required to use the App. Feedback is sent to Sentry so we can read it and improve the App.

Sentry processes that technical and feedback data on its infrastructure (which may be outside Ukraine or the EU/EEA) under Sentry’s own terms and privacy policy.

Legal pages. If you open Privacy Policy or Terms & Conditions in the App, those pages load from https://finup.shyrokyi.com. That request does not include your financial entries. The site host may see ordinary technical data such as IP address, time, and device/network metadata.

Contact Developer. If you use Contact Developer in Settings, the App opens your device email app addressed to shyrokyi.oleksandr@gmail.com. We receive only the message you choose to send. The App does not attach your ledger. Your email provider may see ordinary metadata for that draft or message.

Store rating. If you tap Rate Us in Settings, the App may ask Apple or Google to show their in-app review dialog. Apple or Google (or their infrastructure) may see ordinary technical data such as app identity, device, and store-account metadata, under their own terms. That request does not include your financial entries.

App version check. The App may contact the Apple App Store or Google Play Store (or their public listing pages) to see whether a newer version of F!nUp is available. If an update is required, the App may show a non-dismissible prompt that opens the store listing when you tap Update. That check does not include your financial entries. Apple or Google (or their infrastructure) may see ordinary technical data such as app identity, device, and network metadata, under their own terms.

CSV backup. If you use Export in Settings, the App writes a F!nUp backup file that can contain the financial entries, tasks, notes, diagnosis history, preferences, and related data listed in section 3. Notes otherwise stay on the device; the exported file, including your notes, is under your control. You choose where the file is saved (Files, Drive, email, another app). We do not upload that file to a F!nUp server.

Export can be plain CSV (anyone who obtains the file can read your finances — treat it as confidential) or, with a Premium subscription, password-protected (the App encrypts the file with a passphrase you type at export time). The App does not store that passphrase. If you forget it, the protected file cannot be imported — there is no recovery. A password-protected export is not readable as plain CSV. You can still import a password-protected file after Premium lapses; you still need the passphrase.

Import replaces data on the device (financial entries, tasks, notes, diagnosis history, preferences, and related collections listed above) with the file you select. If the file is password-protected, you must enter the same passphrase used when exporting. A wrong passphrase leaves the data on the device unchanged. If the file was exported by an older version of the App and has no notes in it, notes already on the device are left unchanged. Legacy plain CSV imports keep working.

Loan reminder share. On a loan you issued, you can tap share to open the device share sheet with a short reminder text (debtor name, amount, and due date if you entered one). You choose the destination (Messages, email, another app). We do not upload that text to a F!nUp server. The App does not send the rest of your ledger with that reminder.

Operating-system backup. Hive files live in the App sandbox. iCloud, Google backup, or a computer backup may copy App data unless you or the OS exclude it. That is outside F!nUp’s control. Copying those files to another device without the matching Keychain/Keystore key does not give a readable ledger — use Export if you need a portable copy.

6. Notifications and permissions

F!nUp uses local notifications only: a monthly financial check-in, and due-date reminders for open tasks, debts, and loans. There are no remote push notifications. Notification payloads do not include your amounts, account names, or item titles.

When you set a reminder, the App may request permission to show notifications and, on Android, to schedule an exact alarm, and it may reschedule reminders after reboot. You can deny those permissions; reminders will not fire until you enable them in system settings (or from the Notifications section in Settings). The rest of the App still works.

If you turn on App Lock, the App uses the system biometric / device-credential APIs (Face ID, fingerprint, or PIN). On iOS that includes the Face ID usage prompt. Biometric templates stay with the operating system; F!nUp only receives a pass/fail result. You can refuse; App Lock cannot be enabled without a working device unlock. The rest of the App still works.

The App does not request access to contacts, camera, microphone, location, or photos.

7. Your choices

In Settings you can:

• change or disable the monthly reminder schedule
• change the due-date reminder time
• hide numbers on screen
• hide decimal places on displayed amounts
• turn App Lock on or off (Premium to turn on; turning off is always allowed after a successful system unlock)
• export a CSV backup (password-protected export is Premium)
• import a CSV backup (overwrites data on this device, including notes when the file contains them; App Lock stays as it was on this device)
• Reset data — erase accounts, tasks, notes, diagnosis history, preferences, and scheduled reminders on this device and return to onboarding (App Lock is turned off)
• contact the developer by email
• rate the App through Apple’s or Google’s in-app review dialog

From most screens you can also send optional in-app feedback (a message and a screenshot of whatever is visible). Hide-numbers, if you have already turned it on in Settings, masks amounts only. On financial screens the App may also offer to hide numbers temporarily for that screenshot.

Uninstalling the App also removes local App data on that device (OS backups may still exist).

Because there is no F!nUp account, we do not hold your ledger on a F!nUp server. Optional feedback you send is stored by Sentry. Email us if you want that feedback deleted. We cannot retrieve or delete data that exists only on your phone.

8. Children

F!nUp is intended for adults who manage their own finances. It is not directed at children. Do not use the App to store a child’s personal data.

9. Third parties

Besides NBP and Binance for public rates, Sentry for crash and error reports and optional in-app feedback (section 5), Apple or Google for an optional store rating or an automatic app version check (section 5), and destinations you choose for a CSV file, a loan reminder, or an email to the developer, the current App does not share your financial entries with advertisers, analytics providers, or social networks.

10. International aspects

Your entries stay on the device unless you export them, share a loan reminder you choose to send, an OS backup copies them, you send in-app feedback, or you include them in an email you send to the developer. The NBP rate request is made to servers in or used by Poland. The Binance price request is made to servers used by Binance. Crash reports and optional feedback (including a screenshot you choose to send) go to Sentry’s infrastructure. Opening Privacy Policy or Terms & Conditions in the App loads pages from https://finup.shyrokyi.com. If you tap Rate Us, or when the App checks for a newer store version, Apple or Google may process ordinary store or listing metadata. If you are in the EU/EEA or Ukraine, those technical connections may involve a transfer of network metadata and, for crashes or feedback, the data in section 5.

11. Changes

If we add accounts, cloud sync, analytics, or any further upload of your finances, we will update this Policy and the in-app notice before that behavior ships. The “Effective date” at the top will change.

12. Contact

Questions about this Policy: shyrokyi.oleksandr@gmail.com