Privacy Policy

Last updated: June 8, 2026 | Version: 2.2 (Complete Feature Alignment)

At Fundtora, we operate under a strict "Privacy by Design" philosophy. This document outlines how your data is handled across our banking, investment, vehicle management, and AI-driven features.

1. Data Collection Categories

To provide a comprehensive financial experience, we collect and process:

• Identity & Account Data: Name and email address retrieved via Google Sign-In or manual registration for secure authentication.
• Financial Ecosystem Data: Bank account details, transaction history, budget limits, savings goals, subscriptions, and bill payment schedules.
• Investment Portfolio: Details of holdings (Stocks, Crypto, Gold, Mutual Funds), purchase prices, and quantities to track your portfolio performance.
• Advanced Vehicle Data: Mileage/odometer logs, fuel/charging records, service history, and insurance policy details. We may process GPS coordinates for automated mileage tracking if enabled by the user.
• Digital Attachments: Images of receipts, invoices, or loan documents uploaded by the user to the app's local storage for record-keeping.
• AI Interaction Metadata: Context from your conversations with the AI Advisor and abstracted financial summaries used to generate health scores and predictive insights via Google Gemini Pro.
• Security & Technical Data: PIN hashes, biometric enrollment status, encrypted backup logs, and device metadata (Model, OS Version) for session security.

2. Data Security & Cloud Sync

We treat your sensitive information with bank-grade security protocols:

• Local-First Encryption: Your primary data is stored in a secure SQLite database on your device, encrypted with AES-256.
• Google Drive Private Sync: Optional cloud synchronization utilizes the drive.appdata scope. Fundtora can only access its own hidden configuration folder and cannot view or modify any other files in your personal Drive.
• AI Anonymization: Financial data is abstracted and anonymized before being processed by Google Gemini Pro to ensure your real identity remains private.

3. Third-Party Partners

We only share necessary data with trusted infrastructure providers:

• Google (Firebase & Drive API): For security logs, app analytics, and restricted cloud synchronization.
• Google (Gemini Pro API): For high-level financial reasoning and AI-powered advice.
• RevenueCat: For secure processing of Premium subscriptions and entitlement validation.

4. Your Data Rights

Fundtora gives you full sovereignty over your information:

• Data Portability: Export all records (Transactions, Vehicle Logs, Investments, Budgets) in Excel or PDF formats at any time.
• The "Right to be Forgotten": You can permanently delete your account and all associated cloud/local records via the "Danger Zone" in settings. This action is irreversible.
• Remote Session Control: View and remotely sign out any unauthorized or old devices through the Security Center.

5. Contact Us

If you have any questions regarding this policy or our data processing practices, please reach out via the Support Center or email us at privacy@fundtora.com.