Privacy Policy
TracFi
Last updated: 22 June 2026
1. Introduction
TracFi (the "App", "we") is a personal finance management application published by 21Kent (Medan, Indonesia). This Privacy Policy explains how we collect, use, store, and protect your information when you use TracFi. By using TracFi, you agree to the practices described in this policy. If you do not agree, please do not use the App.
2. Information We Collect
a) Account Information — when you sign in with Google Sign-In or register with an email and password, we receive your name, email address, and (for Google Sign-In) profile photo from your account. b) Financial Data You Enter — accounts/wallets, transactions (income, expenses, transfers), bills, budgets, savings goals, categories, notes, credit cards & installments, and optional receipt photos. All of this data is entered manually by you. c) Technical & Usage Data — device identifiers, operating system version, crash/error logs (via Firebase Crashlytics), and aggregate feature usage data (via Firebase Analytics), including Advertising ID. d) Purchase Data — your Premium subscription status is processed through Google Play Billing and RevenueCat (when active). We do NOT store or view your card numbers, bank accounts, or payment details. Important: TracFi NEVER accesses your bank accounts, statements, or any external financial institution. All financial data comes from your manual input.
3. How We Use Data
• Providing core functionality: financial analysis, reports, balance forecast calendar, and Safe to Spend. • Sending bill reminders and notifications (e.g. budget alerts). • Syncing your data across devices through your account. • Processing and verifying Premium subscriptions. • Fixing bugs, maintaining security, and improving App quality. • Complying with applicable legal obligations.
4. Legal Basis & Consent
We process your data based on the consent you provide when signing in and using the App, and to fulfill the services you request. You may withdraw consent at any time by deleting your data or ceasing to use the App.
5. Data Sharing with Third Parties
We use trusted service providers as data processors, with limited access necessary to perform their functions: • Google Firebase (Authentication, Firestore, Storage, Cloud Messaging, Analytics, Crashlytics) — authentication, data storage, notifications, and diagnostics. • Google Play Billing & RevenueCat — subscription processing and verification. TracFi does NOT sell your personal data to anyone. We only share data when required by law or valid legal process.
6. Data Storage & Location
Your data is stored on Google Cloud / Firebase infrastructure. Data in transit is encrypted using TLS. Because our providers operate globally, your data may be stored or processed on servers outside Indonesia, with equivalent protection standards.
7. Data Security
We implement reasonable security measures: all data operations are scoped to your authenticated user ID (each user can only access their own data), encryption in transit (TLS) and at rest (Firebase server-side encryption), and an optional "Secure Mode" that locks the app with your device biometrics (fingerprint/face). However, no system is 100% secure; you share responsibility for keeping your account secure.
8. Data Retention
We retain your data while your account is active. If you delete data through the "Reset Data" feature in Settings, the relevant data is immediately deleted from our systems. If you delete your account through the "Delete Account" feature in Settings → Security, all of your data (financial data, receipt photos, goal images, user profile) is immediately and permanently deleted, except where retention is required by law.
9. Your Rights
• Access & Portability — export all transactions to a CSV file at any time. • Correction — modify or update your data directly in the App. • Deletion — delete all data through "Reset Data" in Settings, or fully delete your account through "Delete Account" in Settings → Security. • Withdrawal of Consent — stop using the App and sign out. For personal data requests, contact us at hi@21kent.com.
10. App Permissions
TracFi may request the following permissions, depending on the features you use: • Notifications — for bill reminders and alerts. • Biometrics (fingerprint/face) — for Secure Mode. • Camera / Gallery — for attaching receipt photos (optional). • Storage — for CSV file export/import. You may deny or revoke these permissions through your device settings; some features may not work without the relevant permission.
11. Analytics & Advertising
We use Firebase Analytics to understand aggregate feature usage and Crashlytics for crash detection. These services may use your device's Advertising ID. You can reset or disable ad personalization through Google settings on your device.
12. Children's Privacy
TracFi is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided data to us, contact us for deletion.
13. Policy Changes
We may update this Privacy Policy from time to time. Significant changes will be communicated through the App or this page. The "Last updated" date above indicates the current version.
14. Legal Compliance
This policy is drafted with regard to Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and Google Play policies. The App is governed by the laws of the Republic of Indonesia.
15. Contact
For privacy questions or requests, reach us at: Email: hi@21kent.com Website: https://21kent.com/tracfi 21Kent — Medan, Indonesia