Privacy Policy

Last updated: 28 October 2026

1. What we collect

Account: email and password (hashed by Supabase Auth), display name, language.
Financial data you enter or import: transactions, accounts, debts, budgets, goals, policies, investments, and files you upload for parsing (statements, slips, sheet CSVs).
Guide purchases: the email used for delivery; payment details are held by Stripe (we never see card numbers).
Usage: basic in-app events to improve the service. No cross-site ad tracking.

2. How we use it

To provide what you asked for: debt plans, budgets, tax and insurance analysis, reminders you set, delivery of purchased guides, and support. We do not sell your data or use your financial data for third-party marketing.

3. AI and third-party providers

When you use AI features, the relevant text or image is sent to an AI model provider to process that request only. With your own API key, chats bypass our servers. Other providers: Supabase (database, files), Vercel (hosting), Stripe (payments), Resend (email).

4. Insurance agent and quote requests

The Lumenfi team includes a licensed life-insurance agent. Only when you submit the “request a quote” form is that form's data passed to the agent. Other financial data in your account is never shared automatically.

5. Storage and security

Data lives on Supabase (PostgreSQL), encrypted in transit and at rest, with Row-Level Security so only your account can read your rows. Uploaded files are processed and not retained permanently unless a feature says so.

6. Your rights

View, edit, export (CSV) and delete your data in the app; delete your whole account at Settings → Delete account (immediate, irreversible). For other PDPA rights, contact us at the email shown in the app.

7. Cookies

Only essential cookies for login and language.

8. Changes

Material changes will be announced in the app or by email before they take effect.