Privacy Policy
Last updated: December 26, 2025
1. Introduction
TajiriFlow ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our personal finance management application.
2. Information We Collect
Account Information
- Email address (encrypted)
- Username
- Full name (encrypted, optional)
- Country and profession (encrypted, optional)
Financial Data
- Transaction records (amounts, descriptions, dates) - all encrypted
- Budget information - encrypted
- Savings goals - encrypted
- Assets and liabilities - encrypted
Technical Information
- IP address (for security purposes)
- Browser type and device information
- Login timestamps
3. How We Protect Your Data
- Encryption: All sensitive financial data is encrypted using AES-256 encryption
- Password Security: Passwords are hashed using bcrypt with secure salting
- Email Privacy: Email addresses are hashed for lookups; original emails are encrypted
- Secure Sessions: Sessions use httpOnly, secure, and SameSite cookie flags
- Rate Limiting: Protection against brute-force attacks
4. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Authenticate your access to your account
- Generate financial insights and reports for you
- Send important account notifications (verification, password reset)
- Improve and develop new features
- Protect against fraud and unauthorized access
5. Data Sharing
We do not sell, trade, or share your personal or financial data with third parties.
We may only disclose information if required by law or to protect the security of the Service.
6. Your Rights (GDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your data ("right to be forgotten")
- Data Portability: Export your data in a machine-readable format
- Withdraw Consent: Opt out of optional data processing
To exercise these rights, visit Settings → Account or contact privacy@tajiriflow.com.
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, all your personal and financial data is permanently deleted within 30 days, except for anonymized analytics data or where retention is required by law.
8. Cookies
We use essential cookies for session management and authentication. We do not use third-party tracking cookies or advertising cookies.
9. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance.
11. Contact Us
For privacy-related questions or to exercise your rights, contact us at: