Privacy Policy for “FinNotes Mini App”

Last updated: October 15, 2025

1. Overview

FinNotes Mini App (“we”, “us”, “our”) is a Telegram Mini App that helps users track their expenses through voice or text messages. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Telegram Mini App (“the App”). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your information is:
Raman (Independent Developer)
Based in the Netherlands
Email: care.boringapps@gmail.com

3. Data We Collect

• Telegram user data: Telegram ID, username, first name.
• Voice messages: Audio recordings you voluntarily send.
• Expense data: AI-generated information like category, amount, currency, and date.
• App usage data: Optional, anonymized analytics to improve performance.

We do not collect your phone number, email, contacts, or any other personal information beyond what is necessary to provide the service.

4. Legal Basis for Processing (GDPR Article 6)

• Contractual necessity (Art. 6(1)(b)) — to provide the main functionality of the app.
• Legitimate interest (Art. 6(1)(f)) — to maintain and improve our services, prevent abuse, and ensure security.
• Consent (Art. 6(1)(a)) — when you voluntarily provide voice messages.

5. Purpose of Data Collection

• Processing and categorizing expenses from messages.
• Generating personal statistics and reports.
• Providing notifications (budget limits, shared expenses).
• Improving AI-based categorization accuracy.

6. Data Storage and Retention

• Data is securely stored on GDPR-compliant servers (e.g. AWS Frankfurt).
• All data is encrypted and accessible only by backend services.
• You can delete your data anytime using the /delete command or by contacting us.

7. Data Sharing and Transfers

We do not sell or share your personal data. Data may be processed by trusted providers for hosting, storage, or analytics — all GDPR compliant and acting solely on our behalf.

8. Your Rights Under GDPR

• Access
• Rectification
• Erasure (“Right to be Forgotten”)
• Restriction of processing
• Data portability
• Objection

To exercise your rights, email us at care.boringapps@gmail.com.

9. Security

We apply appropriate technical and organizational measures to protect your data. However, no online service can guarantee 100% security.

10. Children’s Privacy

The app is not directed at children under 16. We do not knowingly collect their data. If you believe a child has provided data, please contact us for deletion.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available at https://boringapps.space/privacy.

12. Contact

If you have questions or wish to exercise your rights, contact us:
📧 care.boringapps@gmail.com