Privacy Policy

This policy explains what personal data The Financial Grasp (“we”, “us”) collects, why, and your rights over it. We are the data controller for the information described here. If you have any questions, contact us at hello@thefinancialgrasp.com.

Who can use the app

The Financial Grasp is intended for adults and is not directed at children under 16. If you believe a child has given us personal data, contact us and we will delete it.

What we collect

• Account details from Google Sign-In — your name, email address, and profile picture. We use Google solely to sign you in; we never see or store your Google password.
• Profile you set — a display name and avatar image, if you change them from the Google defaults.
• Your activity — which entries you’ve read, your reading streak, and related timestamps.
• Content you create — comments you post on entries, and (when the Ask feature is enabled) the questions you send to it.
• Preferences — whether you’ve opted in to reminder emails and push notifications, and your device’s push subscription if enabled.
• Technical data — standard information your browser sends (such as IP address and device/browser type) and server logs, used to run and secure the service.

How we use it, and our legal basis

• To provide the app — sign-in, saving your reading history and streak, showing your profile (basis: performance of our agreement with you).
• To send reminders and notifications you turn on (basis: your consent — you can withdraw it at any time in You).
• To keep the service secure and improve it (basis: our legitimate interests in running a safe, working product).

Comments are public

When you comment on an entry, your display name and profile picture are shown alongside it to other signed-in readers. Don’t include anything in a comment you wouldn’t want other readers to see. You can edit or delete your own comments at any time.

Who we share it with

We do not sell your personal data. We share it only with service providers that help us run the app, who process it on our instructions:

• Supabase — database, authentication, and image storage.
• Vercel — application hosting.
• Google — sign-in.
• Resend — sending reminder emails.
• Anthropic — powering the Ask feature when it is enabled (your question and relevant entry text are sent to generate a reply).

Some of these providers may process data outside the UK/EEA. Where they do, that transfer is covered by appropriate safeguards such as Standard Contractual Clauses.

Cookies and local storage

We use a small number of essential cookies to keep you signed in — there are no advertising or third-party tracking cookies. We also store a few preferences (such as your light/dark theme and dismissed tips) locally in your browser; these never leave your device.

How long we keep it

We keep your data for as long as you have an account. If you ask us to delete your account, we remove your personal data, subject to any limited retention required by law.

Your rights

Under UK data protection law you have the right to:

• access a copy of your data;
• correct inaccurate data;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent (e.g. turn off reminders) at any time.

To exercise any of these, email hello@thefinancialgrasp.com. You can also edit your profile and preferences directly in the app. If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Security

Data is transmitted over encrypted connections and access is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date above and, for significant changes, let you know in the app.