1. Who processes your data

Fiplo (the website fiplo.app and the mobile app) is operated by Maroš Kuzemka, sole trader (Slovak Republic), company ID (IČO): 57935700, place of business: Nová Sedlica 8, 067 68 Nová Sedlica, Slovakia ("we").

Questions about your personal data: support@fiplo.app. We have not appointed a data protection officer – it is not required under Art. 37 of Regulation (EU) 2016/679 (GDPR).

2. What data we process

  • Account data: e-mail address, password (stored only as an encrypted hash – we can’t see it), with Google sign-in your name and profile picture from Google, and with Sign in with Apple the e-mail from Apple (it may be a hidden relay address) and your name if you share it.
  • Data you enter in Fiplo: income and expenses, categories, budgets, goals, assets and debts, notes, settings (currency, language, appearance).
  • A photo of a receipt if you use receipt scanning: it is sent for recognition and we don’t store it.
  • Technical data: sign-in times, IP address and device type in server logs, and the data needed to sync between your devices.
  • Communication: e-mails you send us.
  • Pre-launch waitlist: your e-mail address and language, if you enter them on fiplo.app, so we can tell you when Fiplo launches.
  • Fiplo Together: if you invite a partner, their e-mail address – used only to deliver the invitation (in Fiplo and with one e-mail).
  • Subscription (paid plans): the plan, period, renewal or end date, where it was bought and the customer and subscription identifiers at the seller (Paddle, App Store, Google Play). We never see or store card numbers – you enter them directly with the seller.

Fiplo does not connect to your bank and we never ask for account or card numbers. We don’t sell your financial data, don’t use it for advertising and don’t share it with anyone except the providers in section 5.

3. Purposes and legal bases

  • Providing the service – your account, storing and syncing your data, calculations, overviews, receipt scanning: performance of a contract (Art. 6(1)(b) GDPR).
  • Account e-mails (sign-up confirmation, new password, e-mail change): performance of a contract.
  • A Fiplo Together invitation to an address a user entered: legitimate interest (delivering the invitation the user asked for). We send at most one e-mail a day to one address; if you don’t want invitations, write to us and we’ll block the address.
  • Security and abuse prevention (server logs, rate limits): legitimate interest (Art. 6(1)(f) GDPR).
  • Replying to your messages: legitimate interest or performance of a contract.
  • One e-mail about the launch to an address on the waitlist: your consent, given by entering the address (Art. 6(1)(a) GDPR); you can withdraw it at any time by e-mailing support.
  • Legal obligations (e.g. accounting records for paid plans): Art. 6(1)(c) GDPR.

We don’t send marketing e-mails. If we ever do, only with your consent, which you can withdraw at any time.

4. How long

  • Account data and everything you enter: as long as you have an account. You can delete your account in the app at any time (Account → Delete account) – the data is deleted immediately; from backups (if used) within 30 days.
  • Receipt photos: not stored, discarded after recognition.
  • Server logs: short term, usually up to 90 days.
  • Your e-mails to us: as long as needed to deal with them, at most 3 years.
  • Waitlist: deleted after the launch e-mail is sent, at the latest 12 months after you joined; sooner on request.
  • Fiplo Together invitations and the record of the e-mail sent: at most 30 days after they expire (an invitation is valid for 7 days); addresses that asked not to get invitations, for as long as they ask.
  • Payment records (for paid plans): as required by tax and accounting law, usually 10 years.

5. Who helps us (processors)

Only providers without whom the service can’t work process the data, and only on our instructions:

  • Supabase – database, sign-in and data storage; servers in the EU (Frankfurt, Germany).
  • Cloudflare – website hosting, protection against attacks and forwarding of e-mails to our addresses.
  • Resend – sending account e-mails and Fiplo Together invitations; EU region (Ireland).
  • Google – Google sign-in if you choose it (Google gives us your name, e-mail and picture).
  • Apple – Sign in with Apple (on the web and in the iPhone app) if you choose it (we get your e-mail, possibly hidden, and your name if you share it).
  • Anthropic – reading a receipt photo when you use receipt scanning; the photo isn’t used to train models.
  • Apple and Google (App Store, Google Play) – downloading the mobile app and buying a subscription in it; for purchases they act as the seller under their own terms and privacy policies.
  • Paddle (Paddle.com Market Ltd., United Kingdom) – selling subscriptions on the web; Paddle is the seller (merchant of record) and handles the payment, invoice and VAT as an independent controller under its own policy. Paddle tells us the subscription status and the customer’s e-mail.
  • RevenueCat (USA) – verifying in-app purchases and linking them to your account (by the account identifier, without name or card).

Some providers are based in the USA or the United Kingdom. Transfers outside the EU rely on the European Commission’s adequacy decisions (EU–US Data Privacy Framework, United Kingdom) or standard contractual clauses under Art. 46 GDPR.

6. Your rights

  • access to your data and a copy (Art. 15 GDPR),
  • correction of inaccurate data (Art. 16),
  • erasure (Art. 17) – quickest by deleting your account in the app,
  • restriction of processing (Art. 18),
  • data portability in a machine-readable format (Art. 20),
  • objection to processing based on legitimate interest (Art. 21),
  • withdrawal of consent where we asked for it.

Send your request to support@fiplo.app. We reply without undue delay, at the latest within one month.

If you believe we process your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk) or with the supervisory authority in your EU country.

7. Security

The connection is always encrypted (HTTPS). Every user can access only their own data – enforced by the database, not just the app. Passwords are never stored in readable form.

8. Cookies and storage on your device

The website uses no third-party advertising or analytics cookies. In your browser or the app we store only what is strictly necessary: your sign-in, your settings (language, currency, appearance) and data for working offline. No consent is required for this (Art. 5(3) of Directive 2002/58/EC; in Slovakia § 109(8) of Act No. 452/2021 Coll. on Electronic Communications).

When you sign in with Google, we load a script from Google that may use its own cookies under Google’s policies.

9. Age

Fiplo is meant for people aged 16 and over.

10. Changes

If we change this policy materially, we’ll let you know in the app or by e-mail in advance.