Privacy Policy

Last updated: September 2026

At finfire, privacy is not an afterthought; it is the core foundation of our architecture. We believe your personal financial plans belong strictly to you.

1. The Strict Privacy Guarantee

We keep none of your financial figures. There is no tracking, no advertising, no tracking pixels, and no third-party analytics scripts. Fonts and assets are served directly from our own infrastructure, so your browser never announces itself to outside servers.

2. Ephemeral Calculations

When you edit numbers on the calculators, calculations run directly in your browser or are sent to our stateless edge worker solely to perform the mathematical simulation. Once computed, the numbers are immediately returned to your screen and thrown away. They are never written to disk, logged, or retained on our servers.

On Phase 1, life goals’ descriptive names never leave your browser: only the numerical year and amount are sent to the calculator.

3. Data We Collect and Why

We collect only the bare minimum information needed to operate the service:

• Sign-In Email: When you sign in to use your own figures, we store your email address and account status (free or pro) to authenticate you via email magic links. We do not store passwords.
• Payment Records: When you purchase a Pro pass, our database stores an anonymised transaction reference, purchase date, and expiration timestamp. This is retained solely to activate and maintain your Pro access across devices and honor refund requests.

4. Payment Information and Security

We do not collect, process, or store credit card numbers, UPI PINs, or bank account details. All payments are processed through our payment partner, Razorpay, using encrypted, secure checkout sessions on their hosted pages.

5. Saved Plans and Local Storage

Pro users can save, export, and compare plans. Saved plans are stored solely in your browser’s local storage (IndexedDB), never on our servers. If you clear your browser data or switch devices without exporting your plans, your saved plans stay on that device.

6. Cookies

We use a single first-party cookie (ff_s) for authentication. It is marked HttpOnly, Secure, and SameSite=Lax. We do not use cookies for tracking, marketing, or advertising.

7. Data Deletion and Inquiries

You may request deletion of your account and associated email address at any time by emailing hello@finfire.org.