Privacy Policy

Types of Data We Collect

We may collect the following information when you use the platform:

• Account information such as name, email address and password.
• Financial information you choose to enter, including income, expenses, budgets and account balances.
• Technical data such as IP address, device details, browser type and usage analytics.
• Payment information handled through third-party payment providers; we do not store card details.
• Messages or support requests if you contact us.

How We Use Your Data

We process data for the following purposes:

• To operate and personalise the service.
• To improve accuracy of forecasts and product performance.
• To provide support, security and account management.
• To process payments where applicable.
• To send essential service notifications and optional marketing emails.
• To comply with legal obligations.

Legal Basis for Processing

We process personal data on the following grounds:

• Performance of contract (providing the platform).
• Legitimate interests (improving and securing the service).
• Consent (marketing communications and optional features).
• Legal obligation (record keeping, requests, tax compliance).

Data Sharing

We may share data with trusted third parties only where necessary, including:

• Cloud hosting and infrastructure providers.
• Analytics and performance tools.
• Payment processors handling subscription billing.
• Professional advisors where legally required.
• Authorities where required by law or court order.

We do not sell personal data.

Data Processors

We use the following data processors to operate our service. These are the only data processors used by Delphina:

• Hetzner - Cloud hosting and infrastructure provider for our application servers
• AWS (Amazon Web Services) - Content delivery and storage services
• Google Analytics - Website analytics and usage monitoring
• Supabase - Database and authentication services

These four services are the only data processors used by Delphina. We have carefully selected these providers for their security standards and compliance with data protection regulations.

International Transfers

Some service providers may operate outside the UK or EEA. Transfers occur only where adequate safeguards exist, such as Standard Contractual Clauses or equivalent protection.

Data Retention

Data is retained while your account is active. You may request deletion at any time through your account settings. Account deletion requests are processed after a 30-day grace period. Backups may persist for up to 90 days. We may retain information longer where required for legal reasons.

Your Rights

Under GDPR you have the right to:

• Access data we hold about you.
• Request correction or deletion.
• Restrict or object to processing.
• Request data export in a portable format.
• Withdraw consent for marketing.
• Lodge a complaint with the ICO (Information Commissioner's Office).

You can exercise these rights directly through your account settings or by contacting support.

Account deletion requests are processed after a 30-day grace period, during which you can cancel the request by logging back in.

Cookies and Tracking

We use cookies and analytics to understand usage and improve performance. You can manage cookies in your browser settings. Essential cookies cannot be disabled as they enable core functionality.

Children's Data

The service is not intended for users under 18. If we discover data relating to a minor, it will be removed.

Automated Processing and Forecasts

Some features use automated calculations or machine learning. These provide estimates only and should not be treated as financial advice.

Marketing

Marketing emails are optional and operate on consent. You can unsubscribe at any time via email link or account settings.

Changes to this Policy

We may update this Privacy Policy. Changes become effective when published. Continued use of the service indicates acceptance of updates.