1. Introduction

Welcome to Finmexo. Your privacy is important to us, and we are committed to being transparent about how we handle your information. This Privacy Policy explains what data Finmexo collects, how it is used, and the measures we take to keep it secure.

Finmexo is an AI-powered mobile application that helps individuals and small businesses manage their finances by scanning invoices and receipts, automatically categorizing expenses, and generating insightful reports. By using Finmexo, you agree to the practices described in this policy.

Please read this policy carefully. If you do not agree with any part of it, please discontinue use of the application.

2. Who We Are

Finmexo is operated by the Finmexo development team. For any privacy-related inquiries, you may contact us at:

3. What Information We Collect

3.1 Account Information

When you create an account with Finmexo, we collect the following details through our own custom, secure backend:

• Full name
• Email address
• Password (stored in encrypted/hashed form — never in plain text)

We do not use Google Sign-In, Apple Sign-In, Facebook Login, or any other third-party authentication service. Your account is managed entirely within our own system.

3.2 Financial Documents You Upload

To provide expense tracking and AI analysis, you may upload the following types of documents:

• Photos of receipts or invoices (captured directly within the app or from your device gallery)
• PDF files of invoices or bills
• Microsoft Word (.docx) or plain text (.txt) files containing financial records

These documents are processed using Optical Character Recognition (OCR) and AI-powered extraction to identify key financial data such as vendor names, dates, amounts, and item descriptions. Uploaded files are used solely to provide you with the expense tracking features of the app.

3.3 Extracted Expense Data

After processing your uploaded documents, Finmexo stores the structured data extracted from them, including:

• Merchant or vendor name
• Transaction date
• Total amount and individual line items (where available)
• Expense category (e.g., Utilities, Food & Dining, Entertainment, Transportation, Healthcare, Shopping, and others)

This structured data is what powers your expense dashboard, charts, and downloadable reports.

3.4 Usage and Technical Data

We may collect limited technical information to maintain application performance and security, including:

• App version and operating system version
• Device type and model (e.g., iPhone 14, Samsung Galaxy S23)
• Crash logs and error reports
• Session timestamps (login and logout times)

This information is used exclusively for debugging and improving the application. It is not sold, shared with advertisers, or used for profiling.

3.5 Push Notification Tokens

If you grant permission for push notifications, Finmexo stores a device notification token to deliver important alerts such as reminders to log expenses, monthly report availability notices, and security alerts related to your account. You may disable push notifications at any time through your device settings.

4. What We Do Not Collect

We are committed to collecting only what is necessary. Finmexo does not collect or access the following:

• Location data — we do not access your GPS, Wi-Fi location, or IP-based geolocation
• Contacts or address book
• Phone call logs or SMS messages
• Microphone or camera access outside of deliberate in-app photo capture
• Browsing history or data from other apps
• Biometric data (fingerprints, face scans)
• Financial account credentials, bank PINs, or card numbers

Finmexo has no background services running when the app is closed, other than the push notification service. We do not perform any background data collection, location tracking, or syncing when you are not actively using the app.

5. How We Use Your Information

The information we collect is used strictly to provide and improve Finmexo’s features:

• Account Management: To create, authenticate, and maintain your user account.
• Document Processing: To perform OCR and AI-based extraction on your uploaded receipts, invoices, and documents.
• Expense Categorization: To automatically classify your spending into categories (Utilities, Food & Dining, Entertainment, Transportation, Healthcare, Shopping, and others) using AI.
• Dashboard & Visualizations: To display your expense breakdown through pie charts and trend summaries.
• Report Generation: To compile and generate your monthly expense reports, downloadable as Microsoft Excel (.xlsx) files.
• Push Notifications: To send you timely and relevant alerts you have opted into.
• App Improvement: To analyze anonymized crash logs and usage patterns in order to fix bugs and improve the user experience.

We do not use your financial data for advertising, profiling, or any purpose beyond the features described above.

6. AI and OCR Processing

Finmexo uses Artificial Intelligence (AI) and Optical Character Recognition (OCR) technology to extract and interpret the contents of your uploaded documents. Here is how this works:

• When you upload a receipt, invoice, photo, or document, it is securely transmitted to our server over an encrypted connection (HTTPS/TLS).
• Our AI models process the document to extract relevant fields such as date, amount, vendor, and line items.
• The extracted data is then categorized automatically and stored in your account.
• Original uploaded files may be retained temporarily for processing and then deleted, or retained for a limited period to allow re-processing if needed — you may request deletion of your files at any time.

Our AI processing is performed on our own secured servers. We do not send your financial documents to third-party AI services that would store or use them independently.

7. Data Storage and Security

We take the security of your data seriously and implement the following safeguards:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security).
• Encryption at Rest: Your data, including account information and extracted expense records, is stored using encryption at rest on our servers.
• Password Hashing: Your password is never stored in plain text. We use strong cryptographic hashing algorithms to protect it.
• Access Controls: Access to user data is strictly limited to authorized personnel and automated systems necessary for operating the service.
• No Third-Party Auth: We do not use Google, Apple, or other third-party login systems, which reduces your exposure to third-party data sharing.

While we implement strong technical measures to protect your data, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your Finmexo account.

8. Data Sharing and Disclosure

Finmexo does not sell, rent, or trade your personal information to third parties. We may share limited data only in the following circumstances:

• Service Providers: We may engage trusted hosting and infrastructure providers to run our servers. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal Requirements: We may disclose your information if required to do so by applicable law, court order, or governmental authority.
• Safety and Security: If we believe disclosure is necessary to prevent fraud, security threats, or protect the rights and safety of our users.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. We will notify you of any such change and your rights in relation to it.

In all cases, we share only the minimum information required and ensure appropriate protections are in place.

9. Your Rights and Choices

You have the following rights with respect to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update or correct your account information at any time through the app settings.
• Deletion: You may request deletion of your account and all associated data, including uploaded documents and extracted expense records, by contacting us at privacy@finmexo.com.
• Export: You may download your expense data at any time by generating an Excel report through the app.
• Push Notifications: You may opt out of push notifications at any time through your device’s notification settings.
• Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@finmexo.com. We will respond to your request within 30 days.

10. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide you with the service. Specifically:

• Account data is retained until you request account deletion.
• Expense records and extracted data are retained to maintain your financial history within the app and are deleted upon account deletion.
• Uploaded document files may be deleted from our servers after successful processing or retained for a limited time for re-processing. You may request immediate deletion.
• Crash logs and anonymized technical data may be retained for up to 12 months for diagnostic purposes.

After deletion, data is removed from our active systems. Residual copies may persist in encrypted backups for up to 90 days before being permanently purged.

11. Children’s Privacy

Finmexo is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@finmexo.com and we will take steps to delete that information.

12. Third-Party Services

Finmexo does not integrate with third-party social logins, analytics platforms, or advertising networks within the app. We do not use:

• Google Analytics, Firebase Analytics, or similar tracking SDKs
• Facebook SDK or other social network SDKs
• In-app advertising networks
• Third-party crash reporting tools that share data with external parties

The only external service utilized is push notification delivery infrastructure (such as Apple Push Notification Service for iOS and Firebase Cloud Messaging for Android), which processes device tokens solely for the purpose of delivering notifications you have opted into. These services do not receive your financial data or documents.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this policy.
• Notify you via a push notification or in-app alert.
• Where required by law, seek your renewed consent.

Your continued use of Finmexo after the effective date of any updated policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Finmexo handles your data, please reach out to us:

Email: privacy@finmexo.com

Subject line: Privacy Policy Inquiry — Finmexo

We are committed to resolving any concerns you may have promptly and transparently. Thank you for trusting Finmexo with your financial data.