Privacy Policy for Fini

Application: Fini: Daily Budget & Runway (com.wizardsofts.fini)

Developer: WizardSofts (https://wizardsofts.com)

Effective Date: October 12, 2026 • Version: 1.0.0

1. Our Privacy First Philosophy

At WizardSofts (“we”, “our”, or “us”), we believe that your personal financial life belongs solely to you. Fini is engineered with a strict Local-First, Zero-Knowledge architectural philosophy.

Unlike conventional fintech apps that harvest and monetize banking feeds or sell consumer habits to credit scoring agencies and brokers, Fini performs all runway calculations, envelope allocations, and installment schedules locally on your hardware. We do not sell, rent, or monetize your financial records.

2. Data Stored on Your Device

A. Personal Financial Ledger & Envelopes

All transaction logs, envelope budgets, sinking reserves, upcoming bills, BNPL liabilities, and ROSCA/Samiti records are saved inside sandboxed, hardware-encrypted local storage (SQLite with secure file encryption) on your physical mobile device.

B. Zero Third-Party Bank Scrapers

Fini does not require you to link external bank login credentials through third-party data aggregators. You retain sovereign control over your balance entries, cash receipts, and manual accounts.

3. Optional Fini Pro Cloud Synchronization & Cryptography

Creating an account or subscribing to Fini Pro multi-device sync is completely optional. When you choose to enable cloud backup:

  • Client-Side ChaCha20-Poly1305 Encryption: Your financial data is encrypted on your device using a 256-bit key derived from your passphrase prior to transmission over the network.
  • Blind Mailbox Sync: Our synchronization servers only store encrypted ciphertext blobs indexed by blind mailbox tokens. We possess zero cryptographic keys and cannot read your ledger contents.
  • Cryptographic Memory Buffer Zeroing: In strict compliance with zero-trust memory sanitation standards, sensitive plaintext buffers and encryption keys are securely wiped from memory buffers immediately following cryptographic operations.

4. Device Permissions & Transparency

Camera (Optional): Used solely to capture physical receipts, invoices, and paper bills for on-device OCR transcription. Images are processed locally and never uploaded to public image repositories.
Biometrics / FaceID / TouchID (Optional): Used to secure local app access and authenticate high-value budget operations. Biometric matching is handled entirely by your device operating system secure enclave.
Microphone & Speech Recognition (Optional): Used to enable hands-free voice logging of expense amounts. Audio streams are transcribed via native on-device speech engines where supported.
Location (Optional): Used exclusively for geofenced shopping mode reminders (alerting you to strict Safe-to-Spend runway when entering designated shopping hubs). Your real-time coordinates are never tracked or saved to our servers.

5. Diagnostic Logging & Crash Reports

To maintain application stability and performance across diverse smartphone models, Fini collects anonymous crash traces via Google Firebase Crashlytics. These telemetry packets contain technical hardware attributes (e.g., OS version, device architecture, crash stack trace) and contain zero financial balances or personal identifiers.

6. Your Rights & Data Deletion

You maintain sovereign ownership of your data at all times:

  • Export: Export your full financial history to unencrypted CSV or JSON at any moment.
  • Erase: Delete all local records instantly with one tap via Settings → Clear Local Vault.
  • Cloud Purge: If you utilize Pro Cloud Sync, initiating an account deletion permanently deletes all encrypted ciphertext blobs from our servers.

7. Contact & Privacy Inquiries

If you have questions, feedback, or privacy requests regarding Fini, please contact our Data Protection Officer: