See also our Terms of Service.
At FindMiCash, we are committed to protecting your privacy and ensuring the security of your personal and financial data. This privacy policy explains what we collect, why, who helps us handle it, how long we keep it, and how you can see, export or delete it. FindMiCash is offered to people in the United States, and your information is stored and processed in the United States.
Account Information: Name, email address, and password (stored only as a one-way hash, never in readable form). If you sign in with Google or Apple, we receive your name and email address from them, not your Google or Apple password.
Financial Data You Enter: Expenses, income, budgets, shopping lists and notes you type or say to the voice assistant.
Receipts and Statements: Photos and files of receipts and bank or card statements you upload, and the details read from them (store, date, items, prices, amounts).
Connected Bank and Card Accounts: If you choose to connect an account, we receive from our provider Plaid: the institution's name, each account's name and last four digits, and for each transaction its date, amount, merchant name, category and whether it is still pending. We do not receive or store your bank username or password. See "Bank and Card Connections" below.
Billing Information: Your plan, billing dates and the customer and subscription identifiers our payment processor Stripe gives us. Card details are entered on Stripe's own pages and never reach our servers.
Device and Usage Data: Your time zone and local date (so dates show correctly), a notification token if you allow push notifications on your phone, and server logs of requests (such as IP address, time and page) used for security and fixing problems.
Team Data: Information about team members and their roles (for multi-user accounts)
Connecting a bank or card account is optional. We use Plaid Inc. ("Plaid") to connect to your financial institution. You sign in to your bank inside Plaid's secure window; FindMiCash never sees or stores your bank login details.
By connecting an account, you acknowledge and agree that Plaid will collect, use and share information about you and your accounts in accordance with the Plaid End User Privacy Policy.
Read-only: We only read account and transaction information. FindMiCash cannot move money, make payments or change anything at your bank.
What happens to it: When you connect, we ask for up to 24 months of past transactions, then keep your records up to date as new transactions arrive. Transactions are saved as your household's expenses and income, and a transaction that matches a receipt you already scanned is joined with it rather than counted twice.
How the connection is kept: Plaid gives us an access key for your connection. We store that key encrypted (AES-256-GCM) and use it only to fetch your transactions.
Disconnecting: You can disconnect an account at any time in the app. We then tell Plaid to end the connection and delete our access key. Transactions already imported stay in your records, where you can delete them like any other entry. You can also see and revoke the connections Plaid holds for you at my.plaid.com.
Bank connections are also removed automatically when a free trial ends without a plan, when a paid plan is cancelled, and when you delete your account.
Your financial data is used only to show you and your household your own finances. We do not sell it, we do not use it for advertising, and we do not use it to make or support credit, lending, insurance or employment decisions.
These companies process information for us, only to provide the Service:
Amazon Web Services (AWS): Hosting of our servers and database, storage of receipt and statement files, server logs, and sending of email.
Plaid: Connecting bank and card accounts you choose to link.
Stripe: Payment processing and billing.
Google (Gemini): Reading receipts and statements you upload, understanding what you tell the voice assistant, and naming the type of a merchant. We use Google's paid service, under which Google does not use this content to train its models.
Google (Firebase Cloud Messaging) and Apple (Push Notification service): Delivering notifications to your phone, if you allow them.
Google and Apple sign-in: Signing you in, if you choose those options.
ipapi.co: When you sign up, your browser or phone asks ipapi.co which country your internet address is in, only to pre-select your currency. We do not store the answer beyond the currency you keep.
We do NOT sell your personal data. We may share information only in these limited circumstances:
We implement industry-standard security measures to protect your data:
No system is perfectly secure, but we keep a written information security program and review it at least once a year.
While your account is open: We keep your records so you can use them, until you delete them.
After you cancel a paid plan: Your account and records are kept for 60 days, so you can read and export them, then deleted.
If a free trial ends without a plan being chosen: They are kept for 90 days, then deleted.
If you delete your account: If you are the account's only admin, the account, its records and uploaded files are deleted right away and its bank connections are ended. Otherwise only your own sign-in and membership are removed, and the household's records stay with the other admins.
Bank connections: Ended, and the access key deleted, when you disconnect, when a trial ends without a plan, when a plan is cancelled, or when the account is deleted.
Copies in backups and logs are removed as those backups and logs expire. We may keep a limited record longer where the law requires it (for example, billing records).
Access: You can access all your personal data at any time through your account
Correction: Update your information in the Security section, and edit any record directly
Export: Download your data using our export features
Deletion: Delete any record, or delete your whole account from your account settings
Bank connections: Disconnect any linked account at any time in the app, or revoke access through Plaid at my.plaid.com
Questions or requests: Email support@findmicash.com
If we learn that your personal information was accessed or taken without authorization, we will tell you without unreasonable delay, as required by the laws of your state, and explain what happened and what you can do. Where the law requires, we will also notify regulators, including the Federal Trade Commission within 30 days of discovery for events involving 500 or more people.
FindMiCash is not intended for children. You must be at least 18 to create an account, and we do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.
We use essential cookies to maintain your session and remember your preferences. We do not use third-party tracking cookies for advertising purposes. You can manage your preferences in your browser settings.
If we change this policy, we will post the new version here and update the date below. If a change is material, we will tell you in the app or by email before it takes effect.