Back to Finthian

Privacy Policy

Last updated: August 11, 2026

This is a past version of our Privacy Policy, kept for reference, and is no longer in effect. View the current Privacy Policy.

Introduction

Welcome to Finthian ("Finthian," "we," "us," or "our"). We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your information. This Privacy Policy explains our practices regarding your personal data when you use the Finthian web application.

Finthian is developed and operated from the Netherlands. For questions about how we process personal data or to exercise your privacy rights, contact us at [email protected].

Information We Collect

Account information. When you create a Finthian account, our authentication provider, Clerk, collects your name and email address. Finthian does not receive or store your password.

Financial information. Finthian is a manual-entry financial planning tool. You choose what to enter: income, expenses, debts, savings, financial goals, transactions, and net worth details. We do not connect to your bank accounts, and we do not use services like Plaid to automatically import transactions.

Household information. If you create or join a household, the goals and financial details you explicitly add to that household are visible to the other members of that household. Data you keep in your personal context is never shared with household members — this boundary is enforced both in our backend services and in the application itself.

Usage information. With your consent where required (see Cookies below), we collect standard usage data through Google Analytics: IP address, browser type, device type, and the pages you visit.

How We Use Your Information

  • Create and manage your account, and authenticate you when you sign in
  • Operate the core features of the Service — your goals, budget, transactions, and financial roadmap
  • Communicate with you about your account, respond to support requests, and send service-related notices
  • Understand how Finthian is used, in order to improve it (only where you have consented to analytics)
  • Process subscription payments through Stripe
  • Comply with our legal obligations

Authentication

Finthian uses Clerk to handle sign-up, sign-in, and session management. We never see or store your password — Clerk handles that directly. Your session is maintained through a secure, httpOnly cookie that cannot be read by JavaScript running on the page.

To prevent automated abuse, sign-up and sign-in are protected by Clerk's built-in Smart CAPTCHA. Finthian does not offer social sign-in of any kind, so we do not collect or process any data from a third-party account provider.

Cookies

We use two categories of cookies:

Essential (no consent required):

  • Clerk session cookie — keeps you signed in
  • NEXT_LOCALE — remembers your selected language
  • geo_region — used server-side to decide whether to show the analytics consent banner

Analytics (optional):

  • _ga, _gid, _gat — Google Analytics, anonymized usage statistics

You can accept or decline analytics cookies from the consent banner shown on your first visit, and change your choice at any time from Settings → Privacy & Cookies.

Third-Party Services

We share limited data with the following service providers, each of which processes it under their own privacy policy:

  • Clerk — authentication and account management
  • Stripe — subscription billing. Finthian never receives or stores your full card number; Stripe handles payment details directly.
  • Google Analytics — optional, consent-gated usage analytics

We do not sell your personal data to anyone, and we do not share your financial data with any third party for advertising purposes.

Data Retention and Deletion

We retain your data for as long as your account remains active. You can permanently delete your account and associated personal data at any time from Settings → Delete Account — this is the fastest way to have your data removed. You can also request deletion by emailing [email protected]. We will complete deletion requests within 30 days, except where we are required by law to retain certain records for longer.

Data Security

We use TLS/HTTPS encryption for all data in transit, and your session cookie is httpOnly and marked Secure. Access to household data is enforced both at the API layer and in the application itself, so that personal-context data always stays private to you. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Finthian is not directed at children under the age of 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will delete it promptly.

International Data Transfers

Finthian's infrastructure is currently operated from the Netherlands and hosted on infrastructure controlled by us. If our infrastructure footprint changes, we will update this policy accordingly.

Your Rights

Depending on your location, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to, or request restriction of, certain processing
  • Request a portable copy of your data
  • Withdraw consent at any time, where processing is based on consent

Because Finthian is operated from the Netherlands, these rights are available under the GDPR to all users of the Service, not only those located in the EU/EEA. Residents of California have equivalent rights under the CCPA. To exercise any of these rights, contact us at [email protected].

Note on analytics consent specifically: the consent banner described above is currently shown only to users we detect as located in the EU/EEA; users elsewhere have analytics enabled by default and can opt out at any time from Settings. We are reviewing whether this should change so that explicit consent is requested from every user regardless of location.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "last updated" date at the top of this page. Continuing to use Finthian after a change becomes effective means you accept the revised policy.

Contact Us

Questions about this policy, or requests relating to your data, can be sent to:

[email protected]