Privacy Policy

This policy explains what Fisco collects, why, and how you stay in control of it.

01Who this policy covers

Fisco is a personal income and expense ledger app published by Iterloop ("we", "us"). This policy applies to everyone who creates a Fisco account, on Android or via the web app, and explains our data practices under this app.

02Information we collect

We collect only what the app needs to function. We do not embed advertising SDKs or third-party analytics/tracking libraries.

Categories of data collected
Category	What it includes	Why we collect it
Account details	Name, email address, and a securely hashed password (or, if you sign in with Google, your verified Google name, email and profile photo)	To create and secure your account, and identify you when you sign in
Financial records you enter	Payment/transaction amounts, titles, dates, notes, and the income/expense groups you create	This is the core of the app — your ledger. Stored only so it can be shown back to you
Device identifiers	An authentication session token stored on your device	To keep you signed in between app launches

03How we use your information

To operate your account and show you your own ledger data
To calculate the analytics and dividend-portfolio insights you see in the app
To secure your account and investigate abuse (for example, spam-signup prevention)

We do not use your financial data for advertising, and we do not build advertising profiles.

04Signing in with Google

If you choose "Sign in with Google," Google issues a signed identity token that our server verifies directly with Google before creating or opening your account. We only read your name, email, and profile photo from that verified token — we never see or store your Google password.

05How your data is stored and protected

Passwords are never stored in plain text — they're hashed with bcrypt before being saved.
Traffic between the app and our servers is encrypted in transit (HTTPS).
Access to your ledger requires a signed session token issued only after you authenticate.
Your data is stored on servers we operate and is not sold or rented to anyone.

06Sharing your information

We do not sell your personal or financial information. We share data only in these limited cases:

Google — solely to verify your identity when you use Google Sign-In.
Legal reasons — if required to comply with a valid legal process, or to protect the rights, safety, or property of our users or the public.

07Data retention

We keep your account and ledger data for as long as your account is active, so the app keeps working the way you'd expect. If you delete your account, we delete your personal and financial data, as described below.

08Your rights and account deletion

You can request a copy of your data, a correction, or full deletion of your account and all associated ledger data at any time by emailing us at the address below. We'll act on deletion requests within 30 days.

09Children's privacy

Fisco is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

10Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where appropriate, notify you in the app.

11Contact us

Questions, data requests, or account deletion: piyushsight@gmail.com