This policy explains what personal data Tremr Finances ("we", the data controller) collects, why, and the rights you have under Brazil's LGPD (Law 13.709/2018) and, where applicable, the EU GDPR.
What we collect
Account data — your email, name and a hashed password (or a Google sign-in identifier). Financial records you choose to store — accounts, transactions, categories, tags, budgets, goals, recurring rules and investments. Technical data needed to run the service, such as your IP address in request logs.
Why we use it, and our legal basis
To operate the service — authenticate you, render dashboards, compute reports and run scheduled jobs (legal basis: performance of our contract, LGPD Art. 7, V); and to meet legal and security obligations. We do not sell your data and we do not show ads.
Cookies & analytics
We use strictly necessary first-party cookies for authentication and preferences (theme, language, selected household) — these are always on. We currently load no third-party analytics. If we introduce optional analytics in the future, it will run only with your consent and we will name the provider here and in our Cookie Policy first. You can review your choices anytime via your .
Who we share it with
Only the minimum necessary, with processors acting on our behalf: a transactional email provider (Resend) for verification and magic-link emails, and a public FX rate source (Frankfurter) for exchange rates. We do not currently share data with any analytics provider.
Where we store it & security
Application data lives in a self-hosted PostgreSQL database. Connections are encrypted in transit (TLS), passwords are hashed with bcrypt, and session refresh tokens are stored as httpOnly cookies. Encrypted backups are kept off-site.
How long we keep it
We keep your account and financial data until you delete your account. Backups are retained for up to 30 days. When you delete your account we permanently erase your personal and financial data and keep only anonymized aggregate metrics, which the LGPD permits (Art. 12).
Your rights
Under the LGPD you can access, correct, export and delete your data, and withdraw consent. You can export everything via Settings → Profile → Download my data and delete your account permanently from Settings → Profile.
Contact
Questions or requests? privacy@finances.tremr.live. See also our Terms of Service.