Privacy policy
This page explains what FinWin collects when you use the app, including data received through Plaid when you connect a financial institution. Last updated August 6, 2026.
What we collect
When you create an account, FinWin stores your name, email, authentication credentials, and profile preferences (currency, timezone). If you connect a bank or investment account through Plaid, we receive and store account metadata, balances, transactions, holdings, and related identifiers needed to power budgeting and portfolio views.
How we use it
We use your data only to operate FinWin: authenticate you, import and categorize financial activity, show dashboards and budgets, sync connected accounts, and secure sensitive actions. We do not sell your personal or financial data.
Bank connections (Plaid)
Bank linking is provided by Plaid Inc. When you open Plaid Link, you authorize Plaid and FinWin to access the financial data you select. Plaid's own privacy policy also applies to data it processes. Access tokens are encrypted at rest before storage; we decrypt them only on the server to sync or manage your connection.
Storage and security
Data is stored in a hosted Postgres database and served over HTTPS. Sessions use secure cookies. Optional multi-factor authentication (passkeys and TOTP) is available. Sensitive bank-linking actions require a recent strong sign-in. No security measure is perfect; please protect your account credentials.
Retention and deletion
We keep your account and imported financial data while your account is active so history, budgets, and portfolio views remain available. You can unlink a bank connection; historical transactions already imported may remain associated with your account. To request account deletion or data removal, contact the address below and we will process the request within a reasonable time.
Third parties
We use infrastructure and service providers needed to run the product (hosting, database, authentication, bank data via Plaid, and optional market/FX data providers). These providers process data only as needed to deliver their services under their own terms.
Your choices
You can update profile settings in the app, enable MFA under Settings → Security, unlink bank connections under Settings → Connections, and sign out at any time. Connecting a bank is optional; core account features do not require it.
Contact
Questions about this policy or your data: abbeazale98@gmail.com.
FinWin is an early-stage personal finance product. This policy may be updated as features and legal requirements evolve. Material changes will be reflected on this page with a new “Last updated” date.