Privacy
Privacy notice
What we collect
If you join the waitlist: your email address and which page you signed up from. Nothing else.
If you create an account: your email, username and display name, and then whatever you choose to put into the app. In practice that can include a lot about your money, so it is worth being specific:
- Splitting: your groups, the people in them, expenses, who paid, how each one was split, and settlements you record.
- Budgeting: receipts you add — including the photo, if you attach one — and their line items and categories.
- Your money picture: accounts you add and their balances, income, bills and subscriptions, savings goals, budgets, and movements in and out of those accounts, including rows from any bank statement you import.
- Projections: your EPF balance and, if you give it, your year of birth — used only to project your retirement to age 55 and 60.
- Getting paid back: a DuitNow QR code, if you save one, so group-mates can pay you. If you attach a screenshot as proof of a transfer, we store that too.
- Recfinly Plus: if you subscribe, whether your subscription is active, which plan, and the reference your app store or card processor gives us. We never see or store your card number.
- Reminders: your notification settings, and a device token if you turn on push notifications. If you link Telegram, the link between your account and your Telegram chat.
Why we collect it
To run the service: to sign you in, split bills, show balances, remind people to settle up, and show you where your money goes. We do not sell your personal data and we do not show ads. There are no third-party analytics or advertising trackers in the app or on this site.
We do keep a few records of our own: how many receipt scans you have used this month, so we can apply the monthly limit, and when you were shown a Recfinly Plus offer and at what price, so we can tell whether the price is fair. That last one records which country you appear to be in — read from your device’s time zone, not your location — because the same price is cheap in one country and expensive in another, and we would rather know which. Neither is shared with anyone.
Who else sees it
We use a small number of companies to run Recfinly. They only receive what they need for their part, and only when you use that feature.
- Supabase — hosts the database, sign-in and file storage. Our data is stored in Singapore.
- Anthropic — reads images for you. When you scan a receipt, attach a transfer screenshot, or ask whether you can afford something, that image or text is sent to Anthropic’s API to be read, and the result comes back for you to check and correct. This happens in the United States. We do not send your name, email or account details with it, and you can always enter the same information by hand instead.
- Resend — sends our emails, such as reminders and waitlist mail.
- Expo and Google (Firebase) — deliver push notifications to your phone, if you turn them on.
- Telegram — receives reminder messages, but only if you link it yourself.
- Stripe, RevenueCat and Google Play — take payment for Recfinly Plus and tell us whether your subscription is active. They handle the card or store account; we never receive those details.
- Sentry — receives crash reports from the app so we can fix what breaks.
Some of these are outside Malaysia, which means your data crosses a border to reach them. We only use them for the purposes above.
Your money stays yours
Recfinly is not a bank, wallet, or payment provider. It records who owes what and sends reminders. It never holds, moves, or verifies your money. We never ask for or store card numbers, bank passwords, or online banking logins. A DuitNow QR you save is a code for receiving money, and we store it only to show to the people who owe you.
How long we keep it
For as long as you keep your account. We never quietly delete your receipts or expenses, so they stay available for the seven years LHDN may ask you about — that is the point of keeping them here.
If you delete your account — Account → Delete my account, in either app, or at recfinly.com/delete-account — everything personal goes with it: your money data, receipts and their photos, goals, bills and reminders. Expenses shared with a group stay, because other people’s balances depend on them, but your name is removed from them.
Children
Recfinly is for people aged 18 and over. We do not knowingly collect anything from anyone younger. If you believe a child has created an account, email us and we will remove it.
Your choices
You can ask us to show, correct, or delete your personal data at any time, and you can delete your account yourself without asking. You can turn reminders off, unlink Telegram, or remove a saved QR code whenever you like. Leaving the waitlist is one click in any email we send.
Contact
Questions about your data, or want a copy of it? Email support@recfinly.com and we’ll respond promptly.