Legal
Privacy Policy
Last updated: 1 September 2026 · Applies to the PFM mobile app (com.nefsof.pfm) and the PFM website.
PFM (“Personal Finance Manager”, “we”, “us”) is operated by NEFSOF. This policy explains what we collect when you use PFM, why we collect it, who else sees it, and how you get rid of it. We do not sell your personal data, and we do not use your financial data for advertising.
1. Data we collect
Information you give us
| Category | What it includes |
|---|---|
| Account details | First, middle and last name, email address, optional phone number, password (stored only as a salted hash), profile photo, preferred currency, time zone and language. |
| Financial data | Expenses (amount, currency, category, date, note), budgets and their thresholds, recurring expenses, custom categories, and receipt or document attachments you upload. |
| Shared accounts | Finance accounts you create, the members in them, their roles, and invitations you send (the invited person’s email address). |
| Support messages | Anything you send us by email or through the deletion and support forms on this website. |
Information collected automatically
- • Session and security data — session and refresh tokens, sign-in times, IP address and device description, kept so you can stay signed in and so we can detect abuse.
- • Audit log — a record of significant actions (for example creating or deleting an expense), with the user, account, time, IP address and device.
- • Push notification tokens — the device token, platform and device identifier used to deliver budget alerts and reminders. You can turn notifications off in the app.
- • Server logs — request paths, status codes, timing and error details, used to keep the service running.
Information from third parties
- • Google Sign-In — if you sign in with Google we receive your Google account identifier, email address, verified-email status and name. We store the identifier to link the sign-in to your PFM account. We never receive your Google password.
PFM is free to use. We do not collect payment details, card numbers or billing addresses, and there is nothing to buy in the app.
2. How we use it
- • To provide the service: store your expenses and budgets, calculate reports, run recurring expenses, and share data with the members of accounts you belong to.
- • To authenticate you and keep your session secure, including email verification and password reset.
- • To send transactional messages: verification and password-reset emails, invitations, budget alerts and notifications you have enabled.
- • To generate AI spending insights when you request them (see §4).
- • To keep the service secure and reliable, investigate abuse, and meet our legal obligations.
Where the GDPR or a similar law applies, we rely on: performance of our contract with you (providing the app), your consent (notifications, AI insights), our legitimate interests (security, abuse prevention, service improvement) and legal obligation where one applies.
We do not sell your data, share it with data brokers, or use your financial data for advertising or profiling.
4. AI spending insights
AI insights are optional and generated only when you or an account admin asks for them. When you do, a summary of the account’s spending — totals, category breakdowns, budget figures, period and currency — is sent to the Google Gemini API to produce the written analysis. We do not send your name, email address, phone number, attachments or payment details. The generated insight is stored with your account so you can read it again, and is deleted when your account is deleted.
AI insights are informational only. They are not financial, tax, investment or legal advice.
5. Retention and deletion
- • Account and financial data — kept while your account is active.
- • Deleted expenses — an expense you delete in the app is first marked deleted so it can be restored, and is removed permanently when the account is deleted.
- • Security and audit logs — up to 12 months.
- • Encrypted backups — purged on their normal rotation, within 90 days.
You can ask us to delete your account and its data at any time on the Delete account & data page. We verify the request with the account email address, complete the deletion within 30 days, and email you when it is done.
6. Your rights
Depending on where you live, you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it to another service. You can also withdraw consent for notifications or AI insights at any time in the app.
Email info@pfm.nefsof.com from your account address and we will respond within 30 days. If you believe we have mishandled your data, you may complain to your local data protection authority.
7. Security
Passwords are stored salted and hashed — never in plain text. API traffic is served over HTTPS and protected by short-lived JWT access tokens with revocable refresh sessions. Access to production data is limited to the people who operate the service. No system is perfectly secure, so please use a strong, unique password and sign out of devices you no longer use.
8. Children
PFM is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.
9. Changes to this policy
We update this policy when the app changes. The “last updated” date at the top always reflects the current version, and we will notify you in the app or by email before any material change takes effect.
10. Contact
NEFSOF — PFM
Email: info@pfm.nefsof.com
Deletion requests: pfm.nefsof.com/delete-account