Privacy policy

Last updated 9 October 2026

FINUFF is a desktop app that keeps your family's financial records on your own computer. This page explains, in plain words, what stays with you and what does not. Questions: support@finuff.com.

What stays on your computer

Everything you enter or import into the app (your holdings, accounts, policies, loans, budget and notes) is stored on your own computer, encrypted with AES-256-GCM. The encryption key is made from your Master Password using Argon2id. We run no server that stores your records, so we cannot see them, open them or recover them.

What the app sends over the internet

• Public market lookups. To show prices, fund NAVs and exchange rates, the app asks public data providers about a ticker, ISIN, fund code or currency pair. It does not send your holdings, balances or amounts.
• License and device check. To verify your license, the app sends your license key, email and name. To enforce the limit of two devices per license, it also sends a one-way hash of a hardware identifier (never the raw identifier) and any device nickname you choose.
• Alerts, only if you turn them on. If you set up email, SMS or WhatsApp alerts, the alert text itself (for example a renewal date) goes to the alert service you chose. Your full portfolio does not.

The app contains no analytics, no telemetry, no crash-reporting service and no advertising.

This website

• finuff.com is hosted on Cloudflare, which keeps ordinary server logs. We run no analytics and set no cookies of our own. The license form, which Zoho hosts, may set its own.
• The family-letter tool runs in your browser. What you type is not sent to us.
• The Microsoft Store badge is an image loaded from Microsoft.

The license request form

When you request a license, the form collects your name, email, optional phone number, chosen license, computer type, a verification phrase and your date of birth. It is hosted by Zoho Forms. We use these details only to verify and issue your license and to help you if you need license support. We do not use them for marketing.

Your password and recovery

Because we never hold your vault or Master Password, we cannot reset it. If you lose both your password and your Recovery Code, the data cannot be recovered. Keep an encrypted backup and tell your family where it is.

Changes

If this policy changes, the date at the top will change with it.