Privacy Policy

Floosy ("Floosy", "we", "us", or "our") is a personal-finance app that reads your bank and wallet notifications to track your spending, and offers budgets, subscription tracking, insights and affordability checks. Floosy is operated by [Registered company name], [registered address].

This Privacy Policy applies to the Floosy mobile app and this website (together, the "Service"). By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

We collect only what we need to make automatic money tracking work. This falls into a few categories:

• Account information — an email address or the identifier from the sign-in method you choose, so we can secure your account and sync your data across your devices.
• Transaction data you generate — the spending records Floosy creates from your bank SMS, voice notes, iOS Shortcuts or manual entries, including amount, merchant, category, date and any note you add.
• Financial notification content — the text of the bank, wallet and InstaPay SMS and notifications that Floosy processes to detect transactions (see Section 3).
• Voice recordings — audio you record to log spending, and the text transcribed from it (see Section 4).
• Subscription and purchase data — your Floosy Plus subscription status, managed through the app stores and our payments provider. We never see or store your full card number.
• Device and usage data — app version, device model, operating system, language, and diagnostic and crash information that helps us keep the app working.

We do not ask for, and Floosy has no need for, your bank login credentials. Floosy never connects to your bank account directly.

Automatic capture works by reading the notifications your bank, wallet and InstaPay already send you. Floosy only accesses these with your explicit permission, granted on your device.

• Floosy processes messages on your device to find the ones that look like financial transactions.
• We filter for messages from financial senders. We do not read, store or transmit personal messages from friends, family or other contacts.
• From a matching message, Floosy extracts the transaction details (amount, merchant, date) and discards the rest.
• You can revoke this permission at any time in your device settings, which stops all further automatic capture.

On platforms where message processing must happen off-device, the relevant message text is sent over an encrypted connection solely to extract transaction details and is not retained afterward. Where the platform allows it, this processing stays entirely on your device.

When you use the voice feature, Floosy records the audio you speak and converts it to text so it can pull out the transactions you mentioned.

• The recording is sent over an encrypted connection to a speech-to-text provider that transcribes it and helps identify the amount, merchant and category.
• We use the resulting transaction details to create your records. We do not use your voice recordings to build a voiceprint or to identify you.
• Recordings are only made while you are actively using the voice feature — Floosy does not listen in the background.

We use the information we collect to:

• Detect transactions and keep your balances, categories, budgets and subscriptions up to date.
• Provide insights, reports and affordability checks based on your own spending.
• Sync your data across your devices and restore it if you reinstall the app.
• Operate, secure, troubleshoot and improve the Service.
• Manage your Floosy Plus subscription and process related payments.
• Send you service messages you have asked for, such as renewal reminders and budget alerts.
• Comply with our legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your transaction data to target you with third-party advertising.

We share information only in the limited circumstances below, and only to the extent needed:

• Service providers — vendors who process data on our behalf under contract, such as our cloud hosting provider, the speech-to-text provider that transcribes voice notes, our subscription-management provider (which handles Floosy Plus billing through the app stores), and diagnostics/crash-reporting tools. They may use the data only to provide their service to us.
• App stores and payment processors — Apple and Google handle your subscription payments; we receive your subscription status, not your payment card details.
• Legal reasons — where we are required by law, court order or a valid government request, or to protect the rights, safety and security of our users, the public or Floosy.
• Business transfers — if Floosy is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

We do not share your personal information with third parties for their own marketing purposes.

We use technical and organisational measures designed to protect your information, including encryption of data in transit and at rest, access controls, and keeping as much processing as possible on your device.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your device and the account you sign in with secure.

We keep your account and transaction data for as long as your account is active, so the app works across your devices. Voice recordings and raw notification text are used to extract transaction details and are not retained beyond what is needed for that processing.

When you delete your account, we delete or anonymise your personal data, except where we are required to keep certain records to meet legal, accounting or security obligations.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can:

• Access and edit your transaction data directly in the app.
• Revoke SMS, notification and microphone permissions at any time in your device settings.
• Delete your account from within the app, which removes your associated personal data.
• Contact us at the address in Section 12 to exercise any of your rights.

We will respond to requests within the time required by applicable law. We will not discriminate against you for exercising your rights.

Floosy is not directed to children under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

Some of our service providers may process your information in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, contact us at [email protected], or by post at [Registered company name], [registered address].