Privacy Policy

FinanceOS is a modelling and visualisation tool focused on Australian PAYG, superannuation, and HELP/HECS contexts. It is not a bank, broker, accountant, tax agent, super fund, credit provider, or financial adviser. Numbers and charts are general information only.

Depending on how you use the app, we may process:

• Account and session data if you sign in: identifiers managed by our authentication provider (for example email address and user id), session tokens, and optional profile details you provide (such as a display name).
• Financial inputs you enter in the app, including salary and tax-related inputs, superannuation and HELP balance tracker entries, discretionary living expenses and budget amounts, chart layout preferences, and related fields. These may be stored on your device and, when you are signed in and cloud sync is configured, in our database as a structured record tied to your account.
• Chat messages and context when you use the in-app assistant: your messages, plus a limited PAYG + HELP model and app snapshot derived from saved inputs in this browser session, are sent to our servers and then to an AI model provider to generate replies.
• Technical data typical of web services, such as IP address and request metadata (for example when calling APIs or loading pages), used for security, rate limiting, and operations.
• Referral codes if you open FinanceOS through a link that carries one (for example from a creator or a friend): we save the code in this browser, copy it onto your account when you sign up or sign in, and, if you subscribe, attach it to your subscription with our payment provider (Stripe) so we can credit whoever referred you. If you have allowed analytics, sign-up and checkout events may include the code. The person who referred you does not see your name or email address, only how many subscriptions their code brought in and what they earned.
• Approximate location on the fuel page, if you allow it: your browser shares your location with the page to find nearby stations. It stays in your browser and is not stored on our servers; we receive only a rough area (about 5 km) to look up prices. If you enter a postcode instead, it is saved in this browser only.

Like most sites, FinanceOS stores data in your browser so the app can remember your session, your workspace inputs, and basic preferences. We do not use third-party advertising cookies.

Sign-in

When you sign in, our authentication provider (Supabase) uses cookies to keep your session secure and to coordinate sign-in across page loads. These are first-party or provider cookies the service needs to work.

Your workspace

Much of your planning workspace (salary inputs, balances, budget sliders, chart preferences, onboarding progress, and similar fields) is stored in localStorage so pages load quickly and work offline in the browser. If you use cloud sync while signed in, structured copies may also be stored in our database. If you share a device or browser profile, others with access to it may be able to see that data. The in-app profile data controls can export workspace data and reset local or synced workspace data where available.

Referral codes

If you open FinanceOS through a referral link (one ending in ?ref= or ?promo=), we store the code in local storage (financeos-referral-code) so it is still there when you sign up or subscribe.

Preferences

We may store your theme (light or dark), dismissed banners, and similar UI choices in local storage so the app stays consistent between visits.

Analytics

FinanceOS may send controlled product analytics events to PostHog, only after you select OK on the cookie notice. We do not enable advertising cookies, session replay, heatmaps, or broad autocapture. Events use whitelisted names and coarse properties rather than raw financial values, chat text, or account details.

Payments

When you open Stripe Checkout or the billing portal, Stripe may set cookies or use storage as described in Stripe's own policies. We do not control those cookies.

You can block or clear cookies and site data in your browser settings. Clearing site data removes the local copies on that device. Signing out does not always erase local workspace data until you clear site data, so sign out on shared devices after use.

We use the above to:

• Provide, maintain, and improve the app and its features;
• Authenticate you and sync your saved workspace when cloud sync is enabled;
• Operate the AI assistant and enforce fair use (such as rate limits);
• Credit the person or partner who referred you, if you arrived through a referral link;
• Protect the service and investigate abuse or technical issues.

We do not sell your personal information. We do not use your data to advertise third-party products within this policy's ordinary meaning of "sale."

FinanceOS relies on the providers below, which may process data on our behalf or under their own terms. Which ones apply depends on the features you use: for example, the AI provider only receives data when you use the assistant, and Stripe only when you use checkout or billing.

Anthropic's privacy policy governs how it handles the chat content sent to it. Methodology and education pages may also link to official or public sources such as the ATO, StudyAssist, provider policies, or payment-provider documents.

Those providers may operate in countries other than Australia (see the Region column). By using the features that depend on them, you acknowledge that cross-border processing may occur as permitted by applicable law.

We design the service to use industry-standard practices such as encrypted transport (HTTPS), authenticated access where appropriate, and database access controls for cloud-stored workspaces. No method of transmission or storage is completely secure; you use the service at your own risk as further described in the Terms.

We keep account and synced workspace data for as long as your account exists and we operate the service. When you delete your account, we delete your synced workspace and cancel any subscription; residual copies in encrypted backups are overwritten on our provider's backup cycle (typically within 30 days). We may keep limited records longer where a law requires it - for example billing and tax records (generally up to 7 years) and security or abuse logs (generally up to 12 months). Chat conversations may be stored in the app to show history and can be deleted where the app exposes deletion controls.

• Access or update profile details through the in-app profile and account settings where available.
• Export workspace data from profile settings where available.
• Reset local or synced workspace data from profile settings where available.
• Request deletion of your account or cloud-stored workspace through account settings or by contacting hello@financeos.com.au.

Under the APPs you may ask us to give you access to the personal information we hold about you, and to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. Much of your workspace is already visible and editable in the app; for anything else, or to ask how we handle your information, contact us at hello@financeos.com.au. We will respond within a reasonable period and will not charge you simply for making a request.

If you think we have mishandled your personal information, contact us first at hello@financeos.com.au so we can investigate and respond. If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, which oversees the Privacy Act.

We maintain a data breach response plan. If a breach of personal information occurs that is likely to result in serious harm, we will act in line with the Notifiable Data Breaches scheme: assess the incident promptly and, where the scheme requires, notify affected individuals and the OAIC. We follow this practice for sensitive financial information regardless of whether an exemption might otherwise apply.

FinanceOS is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, use the account or deletion tools your deployment makes available, or clear site data and sign out on your device.

We may update this page from time to time. The "Last updated" date at the top will change when we do. Continued use of the app after changes means you accept the updated policy.