Privacy policy

• Account information: email, display name, password (stored only as a hash), account status, account creation time and last sign-in time.
• Linked sign-in methods: when you use Google, Facebook, Zalo or a phone number, we store the account identifier issued by the provider, the email (if the provider returns one) or the phone number, and the time of last use.
• Security codes: email sign-in links and password reset links are stored only as hashes and expire; the two-factor authentication (2FA) key is stored encrypted.
• Financial data you enter: accounts/wallets (which may include bank name, account number, account holder name, branch), transactions, categories, budgets, debts (including names and details of third parties you record), goals, investments, recurring payments, projects, notes, saved filters and display settings.
• Receipts: receipt images/files you upload are stored on the server, in a folder dedicated to your account, and can only be viewed when signed in to that account.
• Administration log: administrator actions on accounts (for example locking, deleting, resetting 2FA), sign-ins to the admin area and your own account self-deletion are recorded with email, IP address and time for security purposes.
• Rate limiting: to prevent password guessing and abuse, the App counts attempts by hashed keys (emails/IP addresses are not stored in readable form in this table).

The App does not use behavioural analytics tools, does not show advertising and does not sell your data.

• Creating and maintaining your account, authenticating sign-in, two-factor authentication.
• Storing, calculating and displaying your own financial data (balances, reports, recurring payment reminders…).
• Sending necessary emails: sign-in links, password reset/setup, email verification.
• Sending a morning due reminder email only if you turn it on in Settings › Notifications (off by default) and only to a verified email address (you verify it via a link sent to that email, opened while signed in to the same account): recurring payments and debts that are due soon or overdue, and budgets exceeded this month. Turn it off at any time in Settings or via the link in the email.
• Detecting and preventing unauthorised access and abuse; supporting you when you contact us.

Each account’s data is kept separate; other users cannot see your data.

The App shares data only to the extent necessary with the following services:

• Google, Facebook, Zalo (when these methods are enabled and you choose to use them): to authenticate sign-in. Data processing by these providers is governed by their own policies.
• Firebase Authentication and Google reCAPTCHA (when signing in with a phone number and when linking a phone number in Settings): to send SMS codes and prevent abuse; in both cases your phone number is sent to Firebase.
• Email delivery service (SMTP): to send the emails described in section 2; your email address and the message content pass through this service. The due reminder email (when you turn it on) contains recurring payment names, debt counterparty names, budget category names, amounts and due dates; it does not include bank account numbers or notes.

• Necessary cookies: the sign-in session cookie; a temporary cookie (about 5 minutes) when you link an additional sign-in method; a separate session cookie for the admin area. No advertising or tracking cookies are used.
• Browser storage: the App uses localStorage/sessionStorage (display settings, transaction drafts, category/account cache, search history), IndexedDB (queue of changes not yet synced while offline) and the service worker cache (pages already opened, for offline use). These areas may contain your financial data on that device.
• How to delete: in the App, go to Settings › “Clear local data” to delete drafts and caches; to delete everything (including the unsynced queue and the service worker cache), use your browser’s clear site data function. Note: unsynced changes are lost if deleted. On shared devices, sign out and clear site data after use.

• Data is stored on servers managed by Sandmedia.
• Passwords are hashed with bcrypt; sign-in/password reset tokens are stored as hashes; 2FA keys are encrypted; connections to the App use HTTPS.
• Financial data and receipts are stored in the database/folders on the server with per-account access control, but are not separately encrypted at the field level.
• Server backups (if any) are overwritten on a rolling cycle.
• No system is completely secure. You should use a strong password, turn on two-factor authentication and not share devices that are signed in.

• Account data, financial data and receipts are kept until the account is deleted.
• Sign-in/password reset links expire after a short time or once used.
• The administration log (including account self-deletion records with email and IP address) is kept after an account is deleted for security and reconciliation purposes, and is automatically deleted after 365 days.
• Rate-limit counters and expired links are automatically cleaned up about 1 day after they expire.
• Data on your device remains until you delete it as described in section 4.

• View and edit your account information and financial data directly in the App.
• Export a data backup in Settings › Backup & Restore (the backup does not include receipt files).
• Delete your account yourself in the App at Settings › Danger zone › “Delete account” (requires signing in again within the last 10 minutes, typing XOA to confirm and entering your two-factor code if enabled). The account and data are deleted immediately and cannot be recovered; download a backup first. Administrator accounts cannot use this option.
• Or request deletion of your account and data: send an email from your account’s email address to info@sandmedia.vn. Requests are processed within 1 day. On deletion, all financial data and receipts of the account on the server are deleted; the administration log may be kept as described in section 6. Server backups (if any) may still contain deleted data until they are overwritten on their cycle.
• Any privacy questions or complaints: contact info@sandmedia.vn.

This policy may be updated when the App changes. New versions are published on this page with a new effective date. See also the Terms of use.