Privacy Policy

CaptialMe operates CapitalMe and is the data controller for the personal data described here — we decide how and why it's processed. Contact: CapitalMeEmail@gmail.com.

• Account data (name, email, login credentials) — to create and secure your account. Basis: contract.
• Financial figures you enter or import (income, expenses, budgets, goals, assets, debts, bank CSV transactions) — to provide the Service. Basis: contract.
• AI Coach messages — to answer your questions using your saved figures. Basis: contract.
• Usage and device data (pages used, IP address, browser, device identifiers) — for security, fraud prevention and product improvement. Basis: legitimate interests.
• Support messages — to help you. Basis: contract and legitimate interests.
• Subscription and compliance records (plan, billing status and correspondence, not full card details) — to manage access and meet applicable accounting and legal requirements. Basis: contract and legal obligation.

We never sell your data and we don't use your financial figures for advertising.

• Service providers who host our app and database, and the AI model provider that generates Coach and scanner responses — only as needed to run the Service.
• Paddle.com, our Merchant of Record, for selling subscriptions, subscription management, payments, tax compliance and invoicing. Paddle collects payment details directly.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

Some providers may process data outside your country; where required we rely on safeguards such as Standard Contractual Clauses.

We keep your data while your account is active. After you delete your account we delete or anonymise it within 30 days, except records we must keep by law (for example billing records).

Depending on where you live, you can access, correct, delete or export your data, restrict or object to processing, and withdraw consent. You can also complain to your local data protection authority. Email us to make a request; we respond within one month.

Data is encrypted in transit and at rest, and access controls ensure each account can only see its own figures. No system is perfectly secure, but we take appropriate technical and organisational measures.

We use essential storage to keep you signed in. We don't use advertising cookies. You can clear stored data in your browser settings at any time.