Effective date: March 30, 2026 · Last updated: March 30, 2026
Privacy Policy
What this is
ZenFi's privacy policy. It covers what data we collect, why, and what happens to it. We've written it in plain English because the legalese versions nobody reads aren't actually protecting anyone.
Who we are
ZenFi is a personal finance app. For anything privacy-related, email privacy@usezenfi.com.
What we collect
If you're on the waitlist, we have your email address and nothing else.
Once the app launches, we'll collect what we need to run the service: your name and email when you sign up, the financial transactions and bank statements you connect or upload, and the spending patterns we derive from that data. We also keep basic authentication tokens to keep your session secure, and we log errors so we can fix bugs.
We don't buy data about you from other companies. We don't collect things we don't use.
Why we collect it
We collect waitlist emails because you asked us to notify you — that's consent. Everything related to running your account and the app itself is covered by our contract with you (you can't use the service without it). We look at usage and error data to improve things, which is a legitimate business interest.
If you're in the EU or UK, you can withdraw consent for consent-based processing or object to legitimate-interest processing at any time. Email privacy@usezenfi.com and we'll sort it out.
AI and your financial data
ZenFi uses AI to categorise your transactions and find patterns in your spending. That analysis runs on your data to power the features you signed up for. We don't use your data to train shared models or improve the service for other users.
Who sees your data
We don't sell it. We share it with our cloud hosting and database providers, who process it on our behalf under data processing agreements. If ZenFi ever has paid features, payment processors would be added to that list. We'd share it with law enforcement if the law required it.
That's the full list. We'll update this page if it changes.
How long we keep it
Waitlist emails stick around until early access opens or you ask us to remove you. Account and financial data stays as long as your account is active, plus 30 days after deletion in case it was accidental. Backups are purged within 90 days.
Security
We use TLS for all connections, hash passwords, keep authentication tokens short-lived, and restrict database access. We do regular security reviews.
No system is unbreakable. If a breach ever affects your data, we'll tell you what happened and when.
Cookies
We only use cookies that are strictly necessary to keep you logged in. No ad tracking, no analytics, no third party cookies. If you block all cookies, the app won't work.
Your rights
You can ask us for a copy of your data, correct anything wrong, delete your account entirely, or get your data exported in a portable format. If you're in the EU or UK, you can also object to processing or file a complaint with your local data protection authority.
Email privacy@usezenfi.com. We'll respond within 30 days.
Changes
We'll email you if we make significant changes and update the date at the top. Typo fixes and minor clarifications won't get a separate notice.