Legal & Compliance Documentation

1. Introduction

Welcome to MyFin ("MyFin", "we", "our", or "us").

This Privacy Policy explains how we collect, use, disclose, store, protect, and process your information when you use:

• MyFin Mobile Application
• MyFin Web Dashboard
• MyFin Cloud Services
• Any related products or services operated by us

Please read this Privacy Policy carefully before using MyFin.

2. Data Controller

Company Name: SME CUBE LTD

Registered Address:
124–128 City Road, London EC1V 2NX, United Kingdom

Email: support@smecube.com

Privacy Contact: developers@smecube.com

3. Scope

This Privacy Policy applies to all users of MyFin worldwide, including users located within United Kingdom, European Economic Area (EEA), Switzerland, and other jurisdictions.

4. Information We Collect

Information You Provide:

• Full name, Email address, Phone number, Profile picture
• Account password (secure hash) & PIN or passcode (encrypted where applicable)
• Income records, Expense records, Budget information, Financial goals, Loans
• Bank or mobile financial service account names, Categories, Notes, Receipts, Attachments
• Documents uploaded to your private vault & Passwords stored securely in your vault

We never collect your banking passwords unless you intentionally store them inside your encrypted vault.

Information Collected Automatically:

• Device model, OS, App version, Language, IP address, Login history, Session IDs, Security logs

Biometric Authentication:

Performed entirely on your device using OS secure biometric framework (Android LocalAuth/iOS LocalAuthentication). We do NOT store or process biometric data on our servers.

5. How We Use Your Information

Create and maintain your account, sync data across devices, provide finance features, secure your account, prevent fraud, and comply with legal obligations.

6. Lawful Basis for Processing (GDPR)

Performance of contract, compliance with legal obligations, legitimate interests, and explicit consent where required by law.

7. Encryption and Security

AES-256 encryption for vault data, TLS 1.3 for data in transit, encrypted database storage, and password hashing using industry-standard algorithms.

8. Cloud Storage

Hosted securely on Google Cloud Platform (GCP) with appropriate safeguards.

9. Google Play Billing

Subscriptions processed entirely by Google Play Billing. We do NOT collect or store payment card numbers or banking credentials.

10. Sharing of Information

We do NOT sell, rent, or trade your personal information. Shared only with essential cloud infrastructure (GCP), payment processors (Google Play), or legal authorities where required.

11. International Data Transfers

Safeguarded according to applicable privacy laws (UK GDPR / EU GDPR).

12. Data Retention

Personal information retained while account is active. When deleted, personal information is permanently erased within 30 days.

13. Your Rights

Access, correct, delete, restrict processing, or receive portable copies of your data under UK GDPR/EU GDPR.

14. Account Deletion

Delete account via in-app feature or by emailing support@smecube.com. Deletion completes within 30 days.

15. Children's Privacy

Not directed to children under 13.

16. Cookies (Web Dashboard)

Uses essential cookies necessary for authentication, security, and session management.

17. Security Incidents

Investigated promptly and reported to affected users and authorities as required by law.

18. Changes to This Policy

Material updates communicated through the application, website, or email.

19. Contact Us

SME CUBE LTD, 124–128 City Road, London EC1V 2NX, United Kingdom
Email: support@smecube.com | Privacy Contact: developers@smecube.com

20. Governing Law

Governed by laws of England and Wales, UK GDPR, and EU GDPR.