1. Who We Are

Simfi ("we," "our," or "us") is a personal finance app built for Canadians. We are operated as an independent app and can be reached at support@getsimfi.ca.

2. What Information We Collect

We collect only the information you provide directly when using the app:

• Account information — your email address and display name, provided when you create an account.
• Financial profile — information you enter during onboarding and in the app, including your date of birth, province, employment type, income, savings balances (TFSA, RRSP, FHSA, HISA, investments), financial goals, and expense records.
• CSV import data — if you choose to import bank transactions via CSV, Simfi reads only three fields from your file: transaction date, description, and amount. No other data in the CSV is accessed or stored. We do not retain the original CSV file after import.

We do not collect device identifiers, location data, advertising IDs, or usage analytics. We do not use crash reporting services.

3. How We Use Your Information

We use your information solely to provide the Simfi app experience:

• To create and manage your account
• To calculate your budget, savings projections, and goal progress
• To display your financial data within the app
• To send transactional emails (such as account deletion confirmation)

We do not use your information for advertising, profiling, or any purpose beyond operating the app.

4. How We Store Your Information

Your data is stored securely using Supabase, a cloud database provider. Data is encrypted in transit (HTTPS) and at rest. Supabase infrastructure is hosted on AWS and is SOC 2 Type 2 compliant.

When you delete your account, your data is permanently deleted from our database immediately. This action cannot be undone.

5. Who We Share Your Information With

We do not sell your personal information. We share data only with the following service providers, strictly for the purpose of operating the app:

• Supabase — database and authentication provider. Stores all user account and financial data.
• Resend — email delivery service. Receives your email address only when we send you a transactional email (such as account deletion confirmation).

Both providers process data on our behalf and are bound by their own privacy policies and data processing agreements.

6. Your Rights Under PIPEDA

As a Canadian user, you have the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Access — you may request a copy of the personal information we hold about you.
• Correction — you may request that inaccurate information be corrected.
• Withdrawal of consent — you may withdraw consent to our use of your data at any time by deleting your account.
• Deletion — you may delete your account and all associated data at any time from the Profile screen in the app.

To exercise any of these rights, contact us at support@getsimfi.ca.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently deleted immediately. We do not retain any data after account deletion.

8. Children

Simfi is a general-purpose financial app. We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us at support@getsimfi.ca and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: