Privacy Policy
Last updated: 20 October 2026
Tasmanfy helps you import your bank statements, categorise your spending and see where your money goes. This policy explains what information we collect, why, and the choices you have. We aim to comply with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988.
What we collect
- Your account details. When you sign in with Google we receive your name, email address and profile photo. We do not receive your Google password.
- Your transactions. When you import a statement, the PDF is read in your browser. The PDF file itself is not uploaded. We store the details extracted from it: account number, statement period, balances, and each transaction’s date, description, amount and balance.
- What you add. Categories, categorisation rules and notes you create.
- Technical data. A sign-in cookie that keeps you logged in, your light/dark theme preference stored in your browser, and standard server logs (such as IP address and request times) kept by our hosting providers for security and troubleshooting.
How we use it
- To provide the app: show your dashboard, categorise transactions and keep your data available when you return.
- To keep the service secure and fix problems.
- To contact you about your account or important changes to the service.
We do not sell your data, use it for advertising, or share it with third parties for their own purposes.
Who can see your data
Only you. Every record is tied to your account and the database refuses access to anyone else’s rows. We use trusted providers to run the service, who process data on our behalf:
- Supabase stores your account and transactions in a database hosted in Sydney, Australia.
- Vercel hosts the website.
- Google provides sign-in.
We may disclose information if required by law.
How long we keep it
We keep your data while your account is active. If you ask us to delete your account, we delete your account and all of your statements, transactions, categories and rules.
Your choices and rights
- You can view, recategorise and delete your categories and rules in the app at any time.
- You can ask us for a copy of your data, to correct it, or to delete your account by emailing hello@tasmanfy.com.
- You can remove Tasmanfy’s access to your Google account at any time in your Google Account settings.
- If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (New Zealand) or the Office of the Australian Information Commissioner.
Security
Data is encrypted in transit (HTTPS) and at rest by our database provider. No system is perfectly secure, but we take reasonable steps to protect your information.
Children
Tasmanfy is not intended for people under 16.
Changes
We may update this policy. If the changes are significant, we will let you know in the app or by email.
Contact
Questions about privacy: hello@tasmanfy.com.