Privacy Policy

INCONI stores the financial records you enter and the account details needed to sign you in. It does not sell your data, does not run advertising, does not build an advertising profile of you, and never asks for your bank credentials.

• Account data: your email address, a hashed password, and an optional username used to find you when a friend shares a debt.
• Optional profile data: first name, last name, avatar, date of birth and a short bio, only if you fill them in.
• Financial records you enter: wallets and their balances, transactions, transfers between wallets, categories and shared debts, including the amounts, currencies, dates and descriptions you type.
• Social connections: the friend links you create and the debts shared between you and those friends. A friend you share a debt with sees that debt and its running balance, and nothing else from your account.
• Notifications: in-app notifications generated by your own activity and by friend or debt requests.

We do not collect banking credentials, card numbers or government identifiers, and there is no mechanism in the app to enter them.

Application servers and the Postgres database run on Railway infrastructure located in the European Union. Backups are held in the same region. Exchange rates are fetched from a third-party rates provider; those requests contain currency pairs only and carry nothing about you or your balances.

We run a self-hosted, privacy-friendly analytics instance that records page views without cookies and without cross-site tracking. It stores aggregate figures such as page path, referrer, country and device type. It does not store IP addresses in a way that identifies you, does not follow you to other sites, and is never joined to your account or your financial records.

There are no third-party advertising or marketing trackers on the site.

INCONI does not use tracking cookies. It keeps a small amount of data in your browser storage so the app works and remembers your preferences:

• auth.access and auth.refresh - the tokens that keep you signed in.
• ic:theme, ic:sidebar, ic:preferredCurrency - interface preferences.
• incomecounter:hideBalances - whether privacy mode is on.
• ic:onboardingPending - whether you still have the intro flow to finish.

Signing out clears the authentication tokens.

We send transactional email only: account activation, password reset, and notifications about debts or friend requests where you have those enabled. There is no marketing mailing list.

• Export: you can download your transactions and transfers as CSV from Settings at any time.
• Correction: every record in the app can be edited or deleted from the interface.
• Deletion: you can delete your account yourself from Settings, under Danger zone. It takes your password to confirm and immediately removes your wallets, transactions, transfers, categories and the debts you created. Debts where you were the other party stay with that person, without your name attached.
• Access: ask us for a copy of everything we hold on you and we will send it.

Your records are kept for as long as your account exists. Deleting your account removes them from the live database straight away; residual copies in encrypted backups age out on the backup rotation.

INCONI is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it.

If this policy changes in a way that affects how your data is handled, the date at the top of this page changes and the change is noted in the changelog.

Questions, data requests or complaints: support@inconi.app.