Updated: 24 October 2026 · applies to the FinLens app for Android and iOS (package uk.co.vectronis.finlens) and to the FinLens server (finlens.vectronis.co.uk and api.vectronis.co.uk).
FinLens is a personal-finance app. Your books — accounts, transactions, budgets, goals, scheduled payments, tags and notes — live on your phone. Nothing leaves it unless you turn on a feature that needs our server: the family group, voice entry or the assistant. This page says exactly what each of them sends, why, how long we keep it and how to delete it.
Your phone's own backup (Android Backup, iCloud) may include the app's data as part of the phone's backup. That backup belongs to you and your Google or Apple account; we have no access to it. The app's sign-in token and PIN are excluded from it.
You never have to sign in. Without an account the app sends nothing to our server except the error reports and feedback described in section 6, and even those you can switch off.
The family group, voice entry and the assistant need a FinLens profile. You create it by signing in with Google. We receive the Google account's email address, name and account identifier from Google and keep them as your profile. The app keeps a session token in the phone's secure storage. Sign out ends the session on the phone; Delete profile (section 8) removes the profile from our server.
When you create or join a family group, the book you choose is uploaded to our server and shared with the group's members: every account, category, budget, goal, tag, scheduled payment and transaction in it, including notes. Each change is sent as you make it, and the server remembers who made it (members see the writer's email address beside a conflict). The server keeps the group's book for as long as the group exists. Leaving the group stops syncing from your phone; deleting the group, or the owner deleting their profile, deletes the book from the server. A member who leaves keeps their own copy on their phone.
These features use Google's generative AI (the Gemini API) through our server. They work only after you sign in and only when you use them — a hold on the + button, a tap on the microphone, a message in the assistant.
Our server forwards the request to Google and returns the answer. It stores none of it — no audio, no text, no snapshot — and asks Google not to store the interaction either (the request is made with storage turned off). The server writes one line per request with timings and sizes, without content. Replies can be wrong; the app never changes your book from an answer by itself — every change goes through a form or a confirmation you tap.
Error reports are on by default and can be switched off in More › Help. When the app hits an unexpected error it sends: a random installation id, the app version, the phone's OS version and model, the app's language, the error's type and a cleaned-up message, and the stack trace. The message is stripped of names, amounts, notes, emails, paths and numbers before it is sent. A report carries no account, no email and no book data. We keep reports for 90 days.
Send feedback (More › Help) sends the text you write, the email address you choose to give for a reply, and — if you leave the switch on — the app version, OS, phone model, language and the fingerprints of the last errors. We keep feedback for 365 days, or until you delete your profile if the feedback carries its email address.
| Data | Kept |
|---|---|
| Profile: email, name, Google account id | Until you delete the profile |
| The family group's book and who changed what | While the group exists |
| Voice clips, questions, snapshots sent to the AI | Not stored by us |
| Error reports | 90 days |
| Feedback | 365 days, or until the profile with its email is deleted |
| The website's contact form (name, email, message) | Until the profile with its email is deleted |
| Server access logs: IP address, requested path, time, user agent | About two weeks |
| Copies in the server's backups | At most 30 days after deletion |
We do not sell your data, do not use it for advertising, and have no analytics or advertising software in the app. We disclose data only when the law requires it.
Every connection between the app and our server uses HTTPS. The session token is kept in the phone's secure storage. The app's PIN never leaves the phone, and biometrics are handled by the phone itself. Notifications never show an amount, a balance or an account name.
FinLens is not directed to children under 13 and we do not knowingly collect their data.
When this policy changes, the date at the top changes with it; a material change is announced in the app. Questions about your data: the contact form on our site.