Privacy Policy

Patrimony is operated by Gabriele Denaro, an individual based in Italy, acting as data controller under the EU General Data Protection Regulation (GDPR). Patrimony is not currently operated through a registered company.

For any privacy question or to exercise your rights, contact us at contact@getpatrimony.com.

Account data: your email address and, if you sign in with Google, the name and profile picture Google shares with us. If you use email/password sign-in, your password is stored as a salted hash by our authentication provider (Supabase) — we never see or store it in plain text.

Financial data you enter: account names, types and currencies, monthly balance entries, personal notes, and benchmark preferences. This is the core data the app exists to store, and it never leaves the systems described below.

Subscription data: if you subscribe to Premium, we store your subscription status, plan, and renewal date. Card numbers and payment details are handled entirely by Stripe — Patrimony never sees or stores them.

Communications: if you enable reminders, we store a browser push subscription endpoint and/or use your email address to send monthly reminders or service alerts.

Preferences: small cookies remember your display language, your colour theme and your login session. These are functional cookies required for the app to work, not tracking or advertising cookies — see the cookie list below.

Profile picture: if you upload one, the image file is stored in our own storage bucket. If you instead choose to use your Google photo, we only store the link to it; the file stays with Google.

Learning progress: if you are signed in and mark a Learn guide as read, we store which guide and when, so we can show your progress and award reading badges. It is visible only to you, is not shared, and is deleted with your account. Reading guides without an account stores nothing.

Server logs: like any website, our hosting provider records technical request logs — your IP address, the time of the request and which page was served. These exist for security and troubleshooting, are not linked to your financial data, and are not used to build any profile of you.

Usage data: we record the fact and timestamp of each login session (nothing else — no pages visited, no financial data, no device fingerprinting) so we, as the operator, can see aggregate usage volume such as how many sessions occur per month. This is never linked to advertising, never shared with third parties, and never used to profile individual behavior — only aggregate counts are ever reviewed.

We do not use advertising trackers or any form of behavioral profiling.

Patrimony sets no advertising, analytics or profiling cookies of any kind. There is no Google Analytics, no advertising pixel and no third-party tracker anywhere in the app. Every cookie below is one the app needs in order to work, which is why you are shown a plain notice rather than a consent request — there is nothing here to refuse without breaking the service.

sb-… (set by Supabase, our authentication provider): keeps you signed in. Without it you would be logged out on every page load. Expires when the session ends or is refreshed.

locale: remembers whether you are using the app in English or Italian. Written only when you pick a language. Expires after 1 year.

patrimony-theme: remembers which colour theme you chose, so the right one is painted before the page appears. Written only when you pick a theme. Expires after 1 year.

patrimony_ref: set only if you arrive through a referral link, so the friend who invited you can be credited if you later subscribe. It holds a referral code, nothing about you, is never shared with anyone and is not used for advertising. Expires after 30 days.

We also use your browser's local storage for small conveniences that never leave your device — which notices you have dismissed, and where you left off in the app tour. This is not readable by us or by anyone else.

To provide the service you signed up for — this is the performance of a contract between you and us (GDPR Art. 6.1.b).

To process Premium subscription payments and comply with related tax and accounting obligations.

To send you service communications you have opted into (reminders, important account notices).

To understand in aggregate how much the app is used (session counts, not individual behavior) so we can operate and improve it — based on our legitimate interest (GDPR Art. 6.1.f), balanced by keeping this data to the bare minimum (a timestamp, nothing content-related) and never using it for profiling or advertising.

We never sell your data, and we never use your financial information for advertising or share it with third parties for marketing purposes.

A small number of pages link out to third-party providers (for example Satispay, Revolut, Trading212, TradingView) through affiliate/referral links — clicking one and later signing up with that provider can earn us a commission, at no extra cost to you. This is a genuine partnership disclosure, not something that affects any data described elsewhere in this policy: we send no personal data to these providers when you click, and choosing not to click has no effect on using Patrimony.

Vercel (Vercel Inc., USA) — hosts and serves the application itself. Our application servers run in Frankfurt, Germany. As with any website, Vercel's infrastructure processes standard connection data (such as your IP address) as part of delivering the app to your browser. Vercel acts as our data processor.

Supabase — hosts our database (in Frankfurt, Germany) and handles authentication. Supabase acts as our data processor and uses its own sub-processors, some of them based outside the EEA.

Stripe — processes Premium subscription payments. Depending on the purpose, Stripe acts as our data processor or as an independent data controller (for example for fraud prevention and its own legal obligations), as described in its own privacy policy.

Google Play and RevenueCat — in the Android app, Premium can be bought through Google Play, which handles the payment. RevenueCat (RevenueCat, Inc.) validates the purchase with Google and tells us when a subscription starts, renews or ends. It receives your internal account identifier (not your email) and the subscription details.

Resend — delivers transactional emails (reminders, account notices) on our behalf.

Your browser's push notification service (e.g. Google, Apple, or Mozilla, depending on which browser you use) — delivers push reminders if you enable them.

Cloudflare — stores a weekly backup copy of our database, which includes your data, in a private bucket only we can read. Keeping a second copy outside our main provider is what protects your data against losing the primary system entirely. Cloudflare acts as our data processor.

NewsData.io — supplies the headlines shown in the News section. When that page loads, article thumbnails are fetched directly from the publishers' own websites, which means those publishers can see your IP address, exactly as if you had opened their site. No account information is ever sent to them.

Hostinger — hosts the contact@getpatrimony.com mailbox, so it processes any email you choose to send us.

Several of these providers are US companies (Vercel, Stripe, RevenueCat, Resend, Cloudflare) or use sub-processors outside the European Economic Area. Where data is transferred outside the EEA, it is done under the Standard Contractual Clauses approved by the European Commission and, for providers that are certified, the EU–US Data Privacy Framework. We have not carried out a separate transfer impact assessment for each provider.

We keep your data for as long as your account is active. You can delete all your financial data yourself at any time from Settings → Danger Zone, and delete your account entirely from the same place.

Backups: deleting your data removes it from the live service immediately, but our weekly backups keep an older copy for up to one year, after which each backup is automatically and permanently destroyed. Those backups are only ever restored to recover the whole service from a failure — never to bring back an individual account — so your deletion is effective from the moment you make it.

We may retain information for longer where the law requires it (for example, subscription invoices, which tax rules require us to keep), or where it is needed to establish, exercise or defend a legal claim.

Under GDPR, you have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent at any time (e.g. by disconnecting Google sign-in). To exercise any of these rights, contact us at contact@getpatrimony.com. You also have the right to lodge a complaint with your local data protection authority.

Your financial data is protected by database-level Row Level Security, meaning only you can read or write your own records, even at the database layer. All traffic to Patrimony is encrypted in transit (HTTPS).

Patrimony is not directed at, and should not be used by, anyone under 18 years of age.

We may update this policy from time to time. The date at the top of this page reflects the last revision. Material changes will be communicated by email where appropriate.