Privacy Policy

1. Introduction

Artisan Algorithms LLC ("we," "our," or "us") operates Finikigai (the "Service"), a personal finance management application. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Service.

By using Finikigai, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address - For account identification and communication
• Phone number - For two-factor authentication (required for all accounts)
• Authentication credentials - Managed securely through Google Sign-In or phone verification

2.2 Financial Data (via Plaid)

When you connect your financial accounts, we use Plaid Inc. ("Plaid") to securely access:

• Account information - Account names, types, and balances
• Transaction history - Transaction dates, amounts, and merchant names
• Liability information - Credit card balances, due dates, and minimum payments

2.3 Usage Data

We automatically collect certain information when you use the Service:

• Device information (browser type, operating system)
• Log data (access times, pages viewed, IP address)
• Feature usage patterns (to improve our Service)

3. How We Use Your Information

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information or financial data to third parties for their marketing purposes.

4.2 Service Providers

We share data with trusted service providers who assist in operating our Service:

• Plaid Inc. - Financial data aggregation (Plaid Privacy Policy)
• Google Firebase - Authentication and data storage (Firebase Privacy)
• Google Cloud Platform - Infrastructure and hosting

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security

We implement robust security measures to protect your data:

• Encryption in Transit - All data is transmitted using TLS 1.3 encryption
• Encryption at Rest - Data is encrypted using AES-256 encryption
• Two-Factor Authentication - Required for all accounts
• Access Controls - Strict internal access policies and audit logging
• Regular Security Audits - Ongoing security assessments and updates

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Specifically:

• Account data - Retained until you delete your account
• Financial data - Refreshed regularly; historical data retained for forecasting purposes
• Usage logs - Retained for up to 90 days for security and debugging

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access - Request a copy of your personal data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your account and data
• Portability - Request your data in a portable format
• Disconnect Accounts - Remove connected financial accounts at any time
• Opt-out - Unsubscribe from non-essential communications

To exercise any of these rights, please contact us at privacy@finikigai.com.

8. Third-Party Services

8.1 Plaid

We use Plaid to connect to your financial institutions. When you connect an account:

• You are agreeing to Plaid's End User Privacy Policy
• Plaid may collect additional information as described in their privacy policy
• You can revoke Plaid's access through your financial institution or by contacting us

8.2 Analytics

We may use analytics services to understand how users interact with our Service. These services collect anonymized usage data to help us improve the user experience.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using our Service, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether your personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

13. Contact Us