Privacy Policy

Statok is a personal finance app. The data controller is Ovcharenko M. H., sole proprietor (FOP) (“we”). This policy explains what data we collect, how we use it, and your rights.

Data we collect

• Account data: name, email, and avatar provided by Google or Apple at sign-in. Sign in with Apple may pass a private relay address — we don’t receive your real email if you choose to hide it. You can change your name and profile photo in the app; an uploaded photo is stored in your account.
• Financial data you enter: accounts, transactions, budgets, categories, payees, assets, balances, rules, and scheduled payments.
• Bank integrations: if you connect the monobank integration, we store the access to your statements that you granted — until you disconnect it — and monobank sends us new transactions for the connected accounts. Imported transactions are stored in your account.
• Files you upload for import: bank statements and export files from other apps (CSV, XLSX, JSON, PDF, screenshots). We don’t keep the file itself after processing — only the transactions you confirmed and a record of the import.
• Technical data needed to run the app: your language (stored on device), time zone, a session token (in the iOS Keychain, in a cookie in the browser), and Finny AI usage counters — the number of requests and tokens, not their content.

We do NOT collect location data, use advertising identifiers, or track you across other apps or websites. The Google sign-in library in the iOS app may itself send Google technical data — a device identifier, approximate location, sign-in usage data — under Google’s terms; we do not receive this data.

How we use data

• Providing the service: recording and displaying your finances, syncing across devices.
• Family access: showing the accounts and budget you chose to the people you gave access to.
• Support and account security.

Finny AI

Finny is an assistant built on a third-party language model. For it to work, we send part of your data to that model. This is for app functionality, not advertising.

• Category suggestions: for uncategorized transactions — the payee name, note, amount, transaction type, and merchant category code (MCC), plus your list of categories and examples of how you usually categorize. When Finny AI is available on your plan, it reviews new uncategorized transactions automatically.
• Reading statements: PDF statements and screenshots, as well as a bank table the app couldn’t recognize on its own, are sent to the model in full. Such a file may contain your name, account numbers, and balances — whatever the bank printed in it.
• Payees: the names of your payees and names from a statement — to clean them up and find duplicates.

Family access

You can let another person view selected accounts together with their transactions, as well as your budget. They see them read-only and cannot change anything. Both sides see each other’s name and email. You can revoke access at any time — entirely or for a single account.

Who we share data with

We do not sell your data. We use only the providers needed to run the app:

• Google (Google sign-in) and Apple (Sign in with Apple) — authentication.
• Google Gemini — data processing for Finny AI, as described above.
• monobank — source of bank statements that you connect yourself.
• The National Bank of Ukraine, PrivatBank, monobank, CoinGecko, and Twelve Data — exchange rates and market prices. They receive only currency codes and instrument tickers, no personal data.
• Hosting provider — the servers and database that store your data.
• Other Statok users — only those you gave family access to, and only what you shared.

Storage and security

Data is stored on our hosting provider’s servers and transmitted over secure connections (HTTPS/TLS). The session token is kept in the Keychain on iOS and, in the browser, in a cookie that page scripts cannot read. We retain data for as long as your account exists.

Deleting your data

You can delete your account any time inside the app: More → your profile → Delete account. This permanently erases your profile and all related data from our servers, including the monobank access, and ends family access in both directions. A full data export is available before deletion.

Your rights

You have the right to access, correct, export, and delete your data. Access, export, and deletion are available directly in the app; for anything else, contact us.

Children

The app is not intended for anyone under 16. We don’t ask for or verify age, so we may not know that an account was created by a child. If you believe that has happened, contact us — we will delete the account and all its data.

Changes to this policy

We may update this policy. We’ll note material changes in the app or update the date above.

Contact

For privacy questions: support@statok.app