Privacy Policy
Last updated: 15 October 2026
GoConfi (“GoConfi”, “we”, “us”) is a personal-finance app that helps people living in Europe understand their monthly money. This Privacy Policy explains what data the app collects, why, who processes it for us, how long we keep it, and what rights you have. It is written in plain language and describes what the app actually does today. We update it as the app changes; the version above tells you which text you accepted.
Our Terms of Service are a separate document and refer to this policy.
1. Information we collect
We collect only what the app needs to work for you.
Account information. Your email address and a login identifier, provided through our sign-in provider (Clerk) when you sign up with email and password, Google, or Apple, and the display name you choose in the app. We never see or store your password.
Budget information. The income, expenses, savings goals, monthly plan, and payment status you enter in the app, including amounts you mark as paid or set aside.
Receipt information. When you scan a receipt, the amount, merchant, date, category, and line items that are read from the photo. We do not keep the photo itself (see section 4).
Questions to Clarity. When you ask Clarity a question in Insights, the text you type is sent to our AI provider (Groq) to be answered, together with your month’s figures, and is not stored by us afterwards.
Feedback. If you send feedback from the app: your message, a mood rating, which screen you were on, your app version and device platform, and a screenshot if you choose to attach one.
Technical logs. Our server records the request path, status, timing, a random request id and, on some requests, your internal account id. Logs contain no budget figures, receipt contents, feedback text, or email addresses.
Error reports. When the app crashes or a request fails, we receive a technical report so we can find and fix the fault: what went wrong (the error and where in the code it happened), the screen you were on, the app version, your device model and operating-system version, and your internal account id. Error reports contain no budget figures, receipt contents, or email address.
Usage events. The app records a small set of events (for example “onboarding started”, “plan saved”, “receipt scanned”, “month created”, “feedback sent”) together with the screen name, app version and device platform, so we can see where people get stuck. These events are tied to a random identifier on your installation, not to your account, and carry no amounts, names, merchants, or anything you type.
We use no advertising software and no tracking across other apps or websites, in the app or on this website.
2. How we use your information
- To run the app for you: build your month from your plan, track what you pay, compute your free-to-spend amount, Clarity score, and insights.
- To read receipts you scan and log them in your budget.
- To answer your feedback and fix problems you report.
- To keep the service secure and diagnose faults.
We do not sell your data, and we do not use it for advertising. We do not use your data to train AI models.
3. Who processes your data for us
These providers process data only on our behalf and only for the purpose listed. Each receives just what its job needs.
| Provider | Purpose | What it receives |
|---|---|---|
| Clerk (Clerk, Inc.) | Sign-in and account management | Your email and login credentials. Clerk holds your password; we hold only an opaque identifier. |
| Neon (Neon, Inc.) | Database hosting | Your account email, budget data, and extracted receipt fields. |
| Render (Render Services, Inc.), Frankfurt region | Server hosting | All data passes through our server while the app runs. |
| Groq (Groq, Inc.) | AI model provider | (a) The receipt photo, for a few seconds, to read amount, merchant, date, category, and line items; neither we nor Groq retain the photo afterwards. (b) For Insights: your month’s figures only (income, planned, spent, free cash, savings, category totals, score) for the monthly summary and, when you ask Clarity a question, the question you typed together with those same figures. No name, email, or images are sent. The model is instructed to rephrase these numbers, not to invent any. |
| Resend (Resend, Inc.) | Email delivery for feedback | When you send feedback: your message, your email address, and the optional screenshot are emailed to us. |
| Hostinger | Our mailbox and domain | Emails you send to us. |
| Sentry (Functional Software, Inc.) | Error reporting | The error reports described in section 1. |
| PostHog (PostHog, Inc.), EU cloud hosted in Frankfurt | Usage analytics | The usage events described in section 1, under a random installation id. |
Apple (TestFlight / App Store) distributes the app under its own terms; it is not a processor of your GoConfi data.
Some of these providers are based in the United States. Transfers rely on their EU-approved safeguards (EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework). We do not share your data with anyone else.
4. Data storage and retention
- Receipt photos are not stored. A photo exists in our server’s memory only while it is being read, then it is discarded. The extracted fields stay as part of your budget.
- Account and budget data are kept while your account is active.
- Feedback stays in our database and mailbox so we can act on it.
- Server logs are kept by our hosting provider for a short, rolling period.
- Error reports are deleted automatically after 90 days.
- Usage events are not linked to your account; signing out starts a new random installation id.
- When you delete your account (Account → Delete account), your account, budgets, months, extracted receipt data, and feedback are permanently erased from our database, and your login is removed at Clerk. Feedback emails already in our mailbox are deleted on request.
5. Your rights (GDPR)
If you are in the EU or EEA, you have the right to:
- Access the personal data we hold about you and receive a copy of it (portability).
- Correct it: you can edit your budget and name directly in the app.
- Delete it: directly in the app, no email required.
- Object to or restrict processing.
- Withdraw consent at any time (see section 6).
- Complain to a supervisory authority. In Germany, this is the data-protection authority of your federal state.
For anything the app does not let you do directly, email us (section 12). We respond within one month.
6. Consent
When you create an account you are asked to accept this policy. We record when you accepted it and which version, so that we can demonstrate your consent. If this policy changes materially, we ask you to accept the new version once, the next time you open the app. You can withdraw consent at any time by deleting your account.
7. Data security
- All connections between the app, this website, and our server use encrypted HTTPS.
- Your password is managed entirely by Clerk and is never stored on our servers.
- Access to our database is restricted to the server and to the operator.
- The optional Face ID / app lock protects the app on your device; the biometric itself never leaves your phone.
8. Data breach notification
If a breach of our systems is likely to put your rights at risk, we will inform the competent supervisory authority within 72 hours of becoming aware of it and notify you without undue delay, as the GDPR requires.
9. Cookies and tracking
The app uses no cookies, no advertising identifiers and no cross-app tracking. It sends only the error reports and usage events described in section 1. This website sets no cookies and uses no analytics; the only data it handles is the email address you choose to leave for the iPhone launch reminder, which we store so we can write to you once, when the iPhone app is out.
10. Children
GoConfi is intended for adults (18+) and is not directed at children. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We will update this policy as the app changes. The date and version at the top tell you which text applies. Material changes are announced in the app, and you are asked to accept the new version before continuing.
12. Contact
The controller responsible for your data (Art. 4(7) GDPR) is Wided Othman, operating GoConfi as a sole proprietor. For questions about this policy or to exercise any of your rights, please contact us at hello@goconfi.de.
Wided Othman
GoConfi
Stengelhofstraße 49
68219 Mannheim
Germany