Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, and password when you register
• Transaction data — CSV files you upload and any data imported via connected bank accounts
• Usage data — how you interact with the Service, including pages visited and features used (via analytics tools)
• Preferences — settings you configure, such as your preferred currency and categories

We do not collect payment card numbers or banking credentials directly. Bank connectivity features use third-party providers who handle that data under their own security standards.

We use your information to:

• Provide and improve the Service, including categorising your transactions and generating insights
• Send you transactional emails (account confirmation, password reset, service updates)
• Analyse aggregate, anonymised usage patterns to improve the product
• Respond to support requests and investigate issues

We do not use your financial data for advertising, and we do not sell or share it with third parties for marketing purposes.

Some features — including AI-generated spending insights — involve sending a summary of your transaction data to a large language model (LLM) provider. This data is used only to generate your insight and is not used to train the provider's models.

We minimise what is sent: we do not include your name, email, or account credentials in AI requests.

We use the following third-party services to operate the product:

• Supabase — authentication and database hosting
• Google Analytics — anonymised usage analytics

Each provider is bound by their own privacy policies and applicable data protection law. We choose providers who operate to a high standard and, where possible, keep your data in Australia.

Your data is stored on secure cloud infrastructure. We use encryption at rest and in transit, access controls, and regular security reviews to protect your information.

No method of transmission over the internet is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

We retain your data for as long as your account is active. If you delete your account, your personal data and transaction history will be permanently removed from our systems within 30 days.

We may retain anonymised, aggregated data after account deletion (for example, to understand product usage trends). This data cannot be used to identify you.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Request deletion of your data (via account settings or by contacting us)
• Object to or restrict certain processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at support@groove.money. We will respond within 30 days.

We use session storage to remember your preferences within a browser session (such as your chosen theme). We use Google Analytics to understand how the product is used — this involves cookies that collect anonymised data about page views and feature usage.

You can disable cookies in your browser settings, though this may affect certain features of the Service.

The Service is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. For significant changes, we will notify you by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, contact us at support@groove.money.