Privacy policy

What we store

• Your account: email, name and password. Your password is stored hashed; we never see it.
• What you log: your businesses, entries (amount, date, description, category, payment method), shared-expense rules and your settings (currency, language, percentages).
• Your plan: Free or Pro. Card details are handled by Lemon Squeezy; we never see or store them.

We never ask for or store your bank username or password. We don’t use analytics or advertising tools.

What we use it for

Only to provide the service: showing what comes in, goes out and what you keep in each business, keeping your history, billing the Pro plan and answering when you write to us. We don’t sell or rent your data.

Photos, voice and AI

When you log with text or a receipt photo using AI, that text or photo is sent to Anthropic (the provider of the Claude model) only to extract the amount, date and business. We don’t store the photo. Under its commercial terms, Anthropic doesn’t use that data to train its models.

When you dictate, your browser’s or phone’s speech recognition (for example Google or Apple) turns your voice into text; we only receive the text.

Who we share it with

We use these providers to run ProfitPeek:

• Supabase: database and sign-in. Each account can only read its own data.
• Vercel: hosts the site and the app.
• Lemon Squeezy: processes payments as merchant of record and handles taxes and invoices.
• Anthropic: processes notes and photos when you use AI.

Cookies

We only use necessary cookies: your session and one that remembers your language (pp-lang). No tracking cookies.

Where it is stored

Our providers store data on servers outside Colombia (mainly in the United States). By accepting this policy you authorize that transfer, which we only make to providers that protect data to standards equal to or higher than Colombian law.

How we protect it

Everything travels encrypted (HTTPS). The database prevents one account from reading or changing another’s data, passwords are stored hashed and only our server can change your plan. We limit AI use per account to prevent abuse.

How long we keep it

For as long as you have an account. You can delete it yourself under Profile → Delete my account: your businesses, entries, rules and user are deleted immediately. If you ask us by email, we do it within 15 business days. Lemon Squeezy may keep payment records it is legally required to keep.

Your rights

As the owner of your data (Colombia’s Law 1581 of 2012 and, if you live in the European Union, the GDPR) you can at any time: know what data we hold, get a copy, update or correct it, ask us to delete it, withdraw the consent you gave us and learn how we have used it. On Pro you can also download your entries as CSV from the app.

Write to [email protected]. We answer requests within 10 business days and complaints within 15 business days. If you’re not satisfied, you can contact Colombia’s Superintendence of Industry and Commerce (SIC) or the data protection authority in your country.

Children

ProfitPeek is for people 18 and over. We don’t knowingly collect data from minors.

Changes

If we change this policy, we update the date above and, for important changes, we let you know by email.