Privacy policy

Effective 11 October 2026. Applies to the FinNest website, web app (finnest.snakri.space) and Android app (com.finnest.app).

In short: FinNest needs no account. What you enter is stored only on your device. We run no server that receives your financial information, and there are no ads, analytics or trackers. Google sign-in and Drive backup are optional, and backups are encrypted with a password only you know.

1. Who we are

FinNest is published by the FinNest team. Contact and grievances: snakrispace@gmail.com. We aim to reply within 30 days.

2. Information you enter

Calculator inputs, saved calculations, goals, expenses, reminders, checklists, emergency contacts and preferences are stored in your browser's local storage, or in the Android app's private storage. Calculations run on your device. We don't receive, collect or store this information.

FinNest never asks for bank passwords, PINs, OTPs, card numbers or account numbers. Please don't enter them anywhere in the app.

3. Optional Google sign-in

If you choose "Continue with Google", Google shares your name, email address and profile picture with the app. These stay on your device and are used to show which account is connected and to label your backups. On Android, sign-in uses Android's Credential Manager. On the web it uses Google Identity Services. We never see your Google password.

4. Optional Google Drive backup

If you turn on backup, FinNest asks for the drive.appdata permission. This lets FinNest create, read and delete files only in its own private app folder in your Google Drive. It can't see your other Drive files.

Before upload, your data is encrypted on your device with AES-256-GCM. The key is derived from a recovery password you choose (PBKDF2-SHA-256, 600,000 iterations, random salt). The password and key are never stored or uploaded. The backup also carries a few labels: its creation date, your account email, the app version and how many records it holds. We can't read your backups, and nobody can restore them without your password.

Google access tokens are kept in memory only and expire within about an hour. Refresh tokens are not stored.

Google API Services User Data Policy

FinNest's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide sign-in and the backup you ask for. It isn't sold, isn't transferred to anyone, isn't used for advertising, and isn't used to train AI or machine-learning models. No person reads it.

5. Third parties

Google: only if you sign in or back up. Google's own privacy policy applies to your Google account.
Links to official sites such as cybercrime.gov.in, RBI and the Income Tax portal open those sites, and their policies apply.
Fonts and code are served from finnest.snakri.space or bundled in the app. No third-party content loads, except Google's sign-in when you choose it.
Our web host keeps standard server access logs (IP address, time, page requested) for security. These logs don't contain anything you type into FinNest.

6. Android permissions

The app requests only INTERNET, which it uses for optional Google sign-in and backup, and for opening links. Files you export (backups, CSV, calendar) go through Android's share sheet, and you choose where they're saved.

7. Security

The app blocks unencrypted (HTTP) connections, excludes your data from Android device backups and device-to-device transfer, and blocks screenshots and recent-apps previews in release builds. No system is perfectly secure, so keep your phone locked and up to date.

8. Keeping and deleting data

See Delete your data. In short: Account & Backup → Delete account & data in the app removes everything, including FinNest's Drive backups, and revokes Google access. Uninstalling the app, or clearing site data in your browser, also removes the data stored on your device.

9. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you may have the right to access, correct and erase your personal data, and to withdraw consent. Because your data stays on your device, you can do this directly in the app. For anything else, write to snakrispace@gmail.com.

10. Children

FinNest is intended for adults (18+) and isn't directed at children.

11. Changes

If this policy changes, we'll update the effective date above and point out significant changes in the app.