Finance Tracker Back to login

Privacy Policy

Last updated: 9 October 2026

1. Who we are

Finance Tracker is operated by FDO Technologies, Inc. ("we", "us"), a Delaware corporation, at https://ca.financetracker.net. The person in charge of the protection of personal information is our Chief Executive Officer. For any privacy question, or to exercise a right described below, contact privacy@financetracker.net.

2. Information we collect

  • Account and profile information you provide (name, email address, language and preferences).
  • Financial records you enter (accounts, transactions, budgets, savings goals, categories).
  • Bank account information you choose to link (balances, transactions, account details, and the merchant and category information the connection provides), retrieved read-only — see section 3.
  • Technical information (application logs, device and usage information) needed to operate and secure the service.
  • Your approximate country when you register, derived at our network edge from your connection, used only to decide whether registration is open in your country during the launch period.

3. Bank connections (Plaid)

When you link a bank account we access your account information on a read-only basis through Plaid Inc., a bank-connection provider. We never initiate payments. You give the connection consent in Plaid's flow, where you sign in to your bank: your bank login details go to Plaid and your bank, never to us. You can withdraw the consent at any time by unlinking the account, which also ends our access at Plaid; your institution may ask you to renew it from time to time. Plaid handles your information under its own End User Privacy Policy. Plaid operates in the United States, so the information needed to set up and keep the connection leaves Canada for that purpose.

4. How we use your information

To provide the service (track, categorise, forecast and reconcile your finances), to secure your account, to comply with the law, and to communicate with you about the service. We do not sell your information and we do not use it for advertising.

5. Your consent

You consent to this policy when you register — or, if you sign in with GitHub or Google, when you first continue with them — and you give a separate, express consent each time you link a bank account. You may withdraw consent at any time: unlink a bank account to stop its connection, or delete your account (section 8a). Withdrawing consent may mean we can no longer provide part or all of the service.

6. Service providers

We share information only with service providers that help us run Finance Tracker, under contracts that let them use it only on our behalf:

  • Amazon Web Services — hosting, in Canada (AWS Canada Central, Montréal).
  • Plaid Inc. (United States) — bank connections, see section 3.
  • Stripe, Inc. (United States) — payment processing, if you subscribe on the web.
  • Google LLC (United States) — sign-in with Google, push notifications to the mobile app (Firebase Cloud Messaging: a short title and text, never amounts or merchant names), and Google Play billing for subscriptions in the app.
  • GitHub, Inc. (United States) — sign-in with GitHub.

Information processed by a provider outside Canada may be accessible to the courts and authorities of that country.

7. Where your information is kept, and for how long

Your information is stored in Canada (AWS Canada Central). It leaves Canada only for the purposes in sections 3 and 6. We keep it while your account is active and as the law requires. When you unlink a bank account we stop syncing and end our access at Plaid; the transactions already imported stay in your records until you delete them or your account. When you delete your account it is erased as described in section 8a, except where the law requires us to keep specific records, and only for the period it requires. Our application logs, which record sign-ins and other security events, are kept for 12 months and then deleted automatically; our database backups are kept for 7 days.

8. Your rights

You may ask to access your personal information, to correct it, to receive it in a structured, commonly used technological format, or to delete it, and you may withdraw your consent. Write to privacy@financetracker.net; we answer within 30 days. If you are not satisfied with our answer you may complain to the Office of the Privacy Commissioner of Canada or, if you live in Quebec, to the Commission d'accès à l'information du Québec.

8a. Deleting your account and data

You can permanently delete your account and all of its data at any time, directly from the app, without writing to us:

  • Mobile app: open the menu, tap your profile, choose View & Edit Profile, scroll to Delete account, and confirm.
  • Web: go to your profile, scroll to Delete account, and confirm.

Deletion is irreversible. The moment you confirm, you are signed out, your account can no longer be used, and we end every linked-bank connection, at Plaid too. Thirty days later we erase your profile, all of your accounts, transactions and categories, and the bank data derived from your connections; until then that data is kept out of use, only so that a mistaken or unauthorised deletion request can be investigated. Copies in our database backups expire within 7 days of the erasure. If you cannot access the app, you may instead request deletion by emailing privacy@financetracker.net.

9. Automatic categorisation

Finance Tracker assigns a spending category to each imported transaction with a rule-based system that runs entirely within Finance Tracker (merchant codes, your own merchant aliases, your bank's labels, keyword rules). It makes no decision about you, and you can change any category at any time.

10. Security

Passwords are stored only as salted hashes. Bank-connection tokens and two-factor secrets are encrypted at rest, and all transport is encrypted (TLS). Repeated failed sign-ins and wrong two-factor codes are blocked for 15 minutes, and access is strictly scoped to your own data. Access to the administration console requires two-factor authentication and is logged. If a breach of our safeguards creates a real risk of significant harm to you, we will tell you and the authorities as the law requires.

11. Cookies

We use only the cookies needed to sign you in and keep the site working (a session cookie and, if you ask to be remembered, a sign-in cookie). We use no advertising or third-party tracking cookies.

12. Changes

We may update this policy; we will tell you about material changes in the app before they take effect.