Privacy Policy

Fi-Plan is built so that your financial data belongs to you. This page explains, in plain language, what we store and how it is protected.

What we store

Your profile (email, name) and the plans you create: incomes, expenses, cashflow changes, loans, fund distribution strategies, accounts, assets and tax settings. Net-worth sync tokens are stored encrypted and kept read-only.

Security & encryption

Financial documents are encrypted at rest with AES-256-GCM. The per-document data keys are wrapped by Google Cloud KMS and are never stored in plaintext. Email-based lookups use HMAC tokenization so contact details are not searchable in plaintext. Passwords are salted + hashed (HMAC-SHA256); access is via short-lived signed JWTs.

Integrations

Net-worth and market integrations are read-only. Fi-Plan never asks for broker passwords.

Deletion

You can request full deletion of your account and all associated data at any time via support@fi-plan.com — we remove the data within 30 days.

Analytics

We collect anonymized product events (page visits, plan actions) to improve the product. These do not include the contents of your financial plan.

Draft of 2026-09-05. Questions: support@fi-plan.com