Privacy policy

Ginkou is a personal-finance app that helps you track spending, savings, debts and the things you own, with a friendly counselor and game elements. It is operated by Victor Carvalho ("we"). This policy explains what data the app handles, why, and the choices you have.

The short version

• Your financial data is yours. We don't sell it, share it for advertising, or use it to profile you.
• There are no ads, no analytics trackers and no tracking cookies.
• You can use the app without an account; your data then stays on your device.
• You can export your data or delete your account (and everything in it) at any time from Settings.

What we collect

• Account details (only if you create an account): your email address. If you sign in with Google, we receive your name, email address and profile picture from Google.
• What you enter in the app: wallets and accounts, transactions, categories, budgets, goals, recurring items, assets and their values, receipt photos you attach, your profile choices (name, main goal, currencies, counselor) and game progress.
• Technical data: our hosting provider keeps standard server logs (such as IP address, browser type and the pages requested) to operate and secure the service.

Where your data is stored

The app stores your data in your browser (IndexedDB), so it works offline. If you create an account, your data is also stored in our database so it is backed up and available on your other devices. Each account's data is isolated with database row-level security, and data is encrypted in transit.

How we use your data

Only to provide the app: to show your finances, sync them between your devices, sign you in, and send account emails such as sign-in links and password resets. We do not use your data for advertising or sell it to anyone.

Google user data

If you choose "Continue with Google", Ginkou requests only your basic profile (name, email address and profile picture) to create and identify your account. We don't access your Gmail, contacts, files or any other Google data, and we don't share Google user data with third parties except the service providers listed below that run the app. Ginkou's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

• Supabase: authentication, database and file storage for accounts.
• Vercel: hosting of the app.
• Google: sign-in, only if you choose it.
• Anthropic: only if you turn on the optional counselor chat with your own API key. Your browser then sends a summary of your figures (balances, totals, budgets and goals, never individual transactions) and your messages directly to Anthropic to generate replies, under your own Anthropic account.
• Currency-rate services: the app downloads public exchange rates. These requests contain no personal data.

How long we keep data

We keep your account data for as long as you have an account. When you delete your account, your data and receipt photos are deleted from our database. Data stored only on your device stays there until you clear it.

Your choices and rights

• Export: Settings → Your data → Download backup.
• Delete: Settings → Account → Delete account removes your account and all its data permanently.
• Access, correct or ask questions: email us at victorcarvalhosp@gmail.com.

Children

Ginkou isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above, and for significant changes we'll let you know in the app.

Contact

Questions about privacy: victorcarvalhosp@gmail.com.