Privacy Policy

1. The short version

• We collect only what the service needs to work: your account details and the financial entries you choose to record.
• Your expense data is private by default. Only you — and partners you explicitly invite — can see it.
• We never sell, rent, or trade your personal or financial data to anyone.
• You can delete your data by contacting us at any time.

2. Information we collect

Information you provide

• Account details — your name, email address, password (stored only as a one-way cryptographic hash; we cannot read it), preferred currency, and theme preference.
• Financial entries — estimated monthly earnings, expenses, categories, budgets, savings goals, and contributions you record. These are figures you type in yourself; SECPUSE never connects to your bank and never asks for card numbers, account numbers, or banking credentials.
• Messages — anything you send via our contact form.

Information collected automatically

• Security logs — IP address, browser/device description, and timestamps of sign-in attempts. We keep these to detect unauthorized access and to alert you when your account is used from a new device.
• Cookies — a session cookie to keep you signed in, an optional "remember me" cookie if you choose it, and a local preference for your light/dark theme. We do not use advertising or cross-site tracking cookies.

3. How we use your information

• To provide the service: dashboards, reports, budget alerts, bill reminders, and goal tracking.
• To secure your account: one-time passcodes (OTP) for registration and password resets, and email alerts on suspicious or new-device sign-ins.
• To deliver emails you'd expect: OTP codes, security alerts, budget warnings, bill reminders, and partner invitations. We don't send marketing emails.
• To respond when you contact us.

4. Sharing with partners you invite

If you invite a partner to your workspace, they can see your expenses, budgets, and goals — and, if you grant edit access, add or change entries. You control this entirely: invitations expire, access levels can be changed, and you can revoke a partner at any time from the Partners page. Likewise, partners can leave your workspace whenever they choose.

5. Who else can see your data

Site administrators can see aggregate platform statistics and account metadata (name, email, account status, activity logs) for moderation and support. We disclose information to third parties only if required by law.

6. Data security

• Passwords are hashed with bcrypt; OTP codes are stored hashed and expire after 10 minutes.
• All forms are protected against cross-site request forgery; sign-in attempts are rate-limited.
• You're alerted by email and in-app whenever your account is accessed from an unrecognized device or location.
• Changing or resetting your password signs out remembered sessions on other devices.

7. Data retention & deletion

We keep your data for as long as your account exists. Expired OTP codes, sessions, and stale security records are cleaned up automatically. To permanently delete your account and all associated data, contact us from your registered email and we'll process it promptly.

8. Children

SECPUSE is not directed at children under 16, and we don't knowingly collect their data.

9. Changes to this policy

If we make material changes, we'll update the date above and notify you in-app. Continued use after changes means you accept the updated policy.

10. Contact

Privacy questions or requests: support@secpuse.com or the contact page.