1. Who We Are

Simfi ("we," "our," or "us") is a personal finance app built for Canadians. We are operated as an independent app and can be reached at support@getsimfi.ca.

2. What Information We Collect

We collect only the information you provide directly when using the app:

• Account information: your email address and display name, provided when you create an account.
• Financial profile: information you enter during onboarding and in the app, including your date of birth, province, employment type, income, savings balances (TFSA, RRSP, FHSA, HISA, investments), financial goals, and expense records.
• CSV import data: if you choose to import bank transactions via CSV, Simfi reads only three fields from your file: transaction date, description, and amount. No other data in the CSV is accessed or stored. We do not retain the original CSV file after import.

We do not collect device identifiers, location data, advertising IDs, or usage analytics. We do not use crash reporting services.

3. How We Use Your Information

We use your information solely to provide the Simfi app experience:

• To create and manage your account
• To calculate your budget, savings projections, and goal progress
• To display your financial data within the app
• To send transactional emails (such as account deletion confirmation)

We do not use your information for advertising, profiling, or any purpose beyond operating the app.

4. How We Store Your Information

Your account and financial data are stored in Canada. We use Supabase, a cloud database provider, with your data hosted in Amazon Web Services' Canada (Central) region. Data is encrypted in transit (HTTPS) and at rest, and Supabase is SOC 2 Type 2 compliant.

The one exception is email delivery: when we send you a transactional email, your email address is processed by Resend, which operates in the United States (see Section 5). No other personal information leaves Canada.

When you delete your account, your data is permanently deleted from our database immediately. This action cannot be undone.

5. Who We Share Your Information With

We do not sell your personal information. We share data only with the following service providers, strictly for the purpose of operating the app:

• Supabase: database and authentication provider. Stores all user account and financial data.
• Resend: email delivery service, based in the United States. Receives your email address only when we send you a transactional email (such as an account deletion confirmation). Because Resend operates in the United States, your email address is processed and stored there and is subject to U.S. law. No financial data is ever sent to Resend.

Both providers process data on our behalf and are bound by their own privacy policies and data processing agreements.

6. Your Rights Under PIPEDA

As a Canadian user, you have the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Access: you may request a copy of the personal information we hold about you.
• Correction: you may request that inaccurate information be corrected.
• Withdrawal of consent: you may withdraw consent to our use of your data at any time by deleting your account.
• Deletion: you may delete your account and all associated data at any time from the Profile screen in the app.

To exercise any of these rights, contact us at support@getsimfi.ca.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently deleted immediately. We do not retain any data after account deletion.

8. Age Requirement

Simfi is intended for users aged 18 and older, and our onboarding requires you to confirm that you are at least 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us at support@getsimfi.ca and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: