Flio Privacy Policy

Last updated: October 28, 2026

Flio ("we", "us") is a personal income and expense tracking app operated by Nguyen Thanh Cong. This policy explains how we collect, use and protect your data. Contact: cong.mimo@gmail.com.

1. Data we collect

Account information. When you sign in with Apple or Google, we receive your name, email address (which may be a private relay address issued by Apple) and profile photo (if any). We never receive your Apple or Google password. When you sign in with Apple, we may store the refresh token issued by Apple, solely to revoke the app's Apple sign-in access when you delete your account.

Guest mode. You can try the app without signing up. We then create a random identifier for your device and store your data under it.

Financial data you enter. Wallets, balances, transactions, categories, notes, credit cards and debts you create. We do not connect to your bank accounts and do not read any banking data.

Photos. The profile photo and wallet/card photos you choose to upload.

File imports. When you import data from a file, we store the transactions created and the number of rows imported. We do not keep the file name or its original content.

Voice and AI input. When you add transactions by voice, speech recognition is performed by your device's operating system (Apple or Google). The text you type or speak is then sent to our servers and to our AI provider to be turned into transactions. We do not store audio.

Feedback and support. When you send feedback in the app, we receive the text you write, up to 3 attached photos (if you choose to attach them), contact details you enter yourself (optional), the feedback type, your operating system and the app version. The text is stored with your account and forwarded to the Flio team via Telegram. Attached photos are not stored on our servers; they are only forwarded through Telegram.

Subscription information. Your plan (Free/PRO), its expiry, trial status and daily AI usage count. Payments are processed by Apple or Google; we do not receive your card number or payment details.

Technical data. Server logs may record IP addresses and error information as needed to operate and secure the service. We currently do not use third-party advertising or behavioral tracking tools.

2. How we use data

To provide the app's features: recording transactions, statistics, wallets, syncing across devices.
To authenticate accounts and protect the service from abuse.
To manage PRO plans, trials and usage limits.
To support you when you contact us, and to improve app stability.

We do not sell your personal data and do not use your financial data for advertising.

3. Sharing with third parties

We share data only with providers needed to run the service:

Apple, Google: sign-in, on-device speech recognition, subscription payments.
OpenAI: processes the text you enter to extract transactions and suggest categories. Only the relevant text is sent, not your account name or email.
Hosting and database providers Supabase, Railway: where your data is stored.
Telegram: receives the feedback (with attached photos) you send from the app so the team can read and reply.
RevenueCat: manages subscription status. It receives your Flio account identifier and subscription transaction information.

We may disclose data when required by law. Data may be processed on servers located outside your country.

4. Retention and deletion

We keep your data while your account exists.

Delete data: in Profile → Data → Delete data, you can delete transactions (and optionally wallets and categories). Your account is kept.
Delete account: in Profile → Personal info → Delete account. Your account is marked for deletion and permanently deleted after 3 days, along with all wallets, transactions, categories, photos, feedback and usage history. If you signed in with Apple, the app's Apple sign-in access is revoked as well. If you sign in again within these 3 days, the deletion is cancelled.
Feedback messages already forwarded to the team's Telegram may remain stored outside our systems. To have them removed, contact cong.mimo@gmail.com.
Deleting your account does not cancel your subscription. Cancel it in your App Store or Google Play subscription settings to avoid further charges.
Backups kept by our hosting providers may persist for a short time before being overwritten.

5. Your rights

You can access and edit your name and profile photo, delete your data, delete your account and request a copy of your data. Use the in-app functions or contact cong.mimo@gmail.com. Depending on where you live (for example the European Union or California), you may have additional rights under local law.

6. Security

Data is transmitted over encrypted connections (HTTPS). Your login token is stored in your device's secure storage. We apply access controls so each user can only access their own data. No system is perfectly secure; please protect your device and sign-in accounts.

7. Children

Flio is not intended for children under 13 and we do not knowingly collect data from them. If you are a parent and believe your child has used the app, contact us and we will delete the data.

8. Changes

We may update this policy. For material changes we will notify you in the app or by email. The "Last updated" date above shows the latest version.

9. Contact

Nguyen Thanh Cong — cong.mimo@gmail.com