1. Introduction
MyFinance ("we", "our" or "Platform") is a personal and business financial management platform. This Privacy Policy describes how we collect, use, store and protect your personal data, in compliance with the Brazilian General Data Protection Law (Lei nº 13.709/2018 — LGPD) and other applicable regulations. By using our services, you agree to the practices described in this document.
2. Data collected
- Personal identification data: full name, email address, password (stored in encrypted form) and profile picture (optional).
- Financial data: bank accounts, cards, transactions, goals, investments and subscriptions voluntarily registered by the user.
- Usage data: pages visited, features used, session duration and interface interactions.
- Device data: browser type, operating system, IP address, device identifiers and approximate geolocation data.
3. Purposes of data processing
- Service execution: providing, maintaining and improving platform features, including dashboard, reports and financial management.
- Product improvement: analyzing usage patterns to develop new features and optimize user experience.
- Advertising: displaying personalized ads based on your profile and interests through services such as Google AdSense (with your consent).
- Communication: sending account notifications, due date alerts, product updates and, with your consent, marketing communications.
4. Data sharing
- Stripe: payment processing. We share data necessary to process Premium subscription transactions.
- Google Ads: personalized ad display. Browsing data and interests may be shared with your consent for advertising purposes.
- Supabase: database infrastructure and authentication. Your data is stored with encryption on secure servers.
5. Google AdSense and advertising
We use Google AdSense to display ads on our platform. Google may use cookies and device identifiers to personalize ads based on your interests and browsing history. You can manage your advertising preferences at any time through the consent settings or via Google's ad settings at adssettings.google.com.
6. Your rights (LGPD — Art. 18)
- Confirmation and access: know whether we process your data and access a copy of the information.
- Correction: request the update of incomplete, inaccurate or outdated data.
- Anonymization or blocking: request anonymization, blocking or deletion of unnecessary or excessive data.
- Portability: request the transfer of your data to another service provider.
- Deletion: request the deletion of personal data processed based on consent.
- Consent revocation: revoke consent at any time, without compromising the lawfulness of prior processing.
7. Cookies and tracking technologies
We use the following types of cookies: (1) Necessary — authentication, session and language preference, always active; (2) Analytics — application usage analysis, enabled upon consent; (3) Advertising — ad personalization via Google Ads, enabled upon consent. You can manage your preferences at any time through the cookie banner or on the privacy settings page.
8. Data security
We adopt appropriate technical and organizational measures to protect your personal data, including: data encryption in transit (TLS/SSL) and at rest, secure authentication with two-factor authentication (2FA) support, role-based access control (RBAC), regular backups and continuous security monitoring. No system is 100% secure, but we are committed to notifying the ANPD and affected data subjects in case of a security incident as required by the LGPD.
9. Data Protection Officer (DPO)
Data Protection Officer: MyFinance Privacy Team. To exercise your rights as a data subject, contact us at: privacy@myfinance.com.br