Privacy Policy

1. Introduction

Talents is a personal finance tracker operated by Daniel Osagie, who is responsible for the personal data described in this policy (the data controller). In this policy, "we", "our" and "us" refer to Daniel Osagie operating Talents. You can contact us at info@talentsft.co.uk. This policy explains what information we use, why we use it and your rights.

2. Information We Collect

Account Data

• Email address
• Display name (if provided)
• Authentication provider details (email/password or Google)

Financial Data

• Ledger, budget, category, and transaction records
• Recurring templates and annual summary data
• Saved projections, purchase lists and their items
• Shared ledger membership/invite metadata
• Preferences, including currency, display mode and email settings

Billing and Email Data

• Stripe customer, subscription, purchase and payment-status records
• Transactional email metadata, including optional monthly insight email delivery settings

Stripe handles payment details at checkout. Talents does not store full card numbers. When you enable monthly insight emails, the financial summary included in the email is processed by our email delivery provider.

Support and Feedback

If you contact us or submit feedback, we receive the details you provide. In-app feedback includes your account identifier, name, email address, topic and message, together with your IP address and browser information for support and abuse prevention. Please avoid including passwords or unnecessary financial information in messages.

Optional Support Reminders

We store your support reminder preference, dismissal count, next eligibility time and interaction identifiers with your account. Plan and purchase history is used to suppress automatic reminders for current and former customers. Separately, we record banner impressions and clicks, dismissals, footer support clicks, modal interactions and reminder preference changes. These records include your account identifier, timestamps and whether the modal was opened from the banner or footer. Where a browser exit cannot be observed, an unfinished interaction may later be recorded as an inferred passive dismissal.

We use this information to manage reminders, understand engagement and improve the optional support experience. Disabling reminders stops automatic prompts; it does not prevent recording interactions you initiate through the footer.

Voluntary contributions take place on Buy Me a Coffee, an external website with its own privacy information. Talents does not handle these payments, receive payment details or use a support-link click as confirmation of a contribution. Contributions do not unlock paid Talents features.

Technical Data

• IP address, device/browser information and request details
• Authentication, security and abuse-prevention records
• Error reports, diagnostic logs and page-navigation/performance data sent to Sentry
• Browser-stored sign-in information, preferences and cached public pages/assets

Information comes from you, from people who invite you to a shared ledger, and from services such as Google sign-in and Stripe when you use them. Account and sign-in information is needed to provide your account. Financial records are supplied by you and people with access to your ledgers.

3. How We Use Your Information

We use your information to:

• Operate Talents and provide core budgeting features
• Authenticate your account and maintain account security
• Send essential service emails (for example: account security, ledger invitations, and billing notices)
• Send optional monthly insight emails if you enable them in Settings
• Process payments and billing events through Stripe
• Manage optional support reminders and understand support interactions
• Prepare CSV exports when you request them
• Detect abuse, troubleshoot issues, and improve reliability
• Comply with legal and regulatory obligations

4. Legal Basis (UK GDPR)

The legal basis depends on why we use the information:

• Contract: creating and managing your account, storing and displaying your records, providing requested sharing and exports, and managing purchases and service emails.
• Legitimate interests: protecting accounts, preventing abuse, responding to support requests and diagnosing service faults. Our interest is in running a safe, reliable service.
• Legal obligations: keeping records or responding to lawful requests where required.
• Consent: optional monthly insight emails when you enable them. You can disable them in Settings. Withdrawing consent does not affect processing already carried out.

5. Data Storage and Security

Talents uses Firebase Authentication and Firestore for sign-in and app records. Financial pages require sign-in, and ledger access depends on ownership, membership and the permissions assigned to each member. No online service can guarantee complete security.

6. Data Sharing

We do not sell personal data. We share data only when necessary to provide Talents, including with:

• Firebase/Google Cloud (app backend and data storage)
• Stripe (payments and billing)
• MailerSend (transactional email delivery)
• Sentry (error reporting, diagnostic logs and performance monitoring)
• Netlify (hosting and scheduled background tasks)
• Legal authorities when required by law

When you share a ledger, its records are available to its members according to their roles. Invitations use the recipient's email address. Members with export access can download copies, and removing their access does not remove copies they have already saved.

International Processing

Our providers operate internationally, so your information may be processed outside the UK. Contact us if you would like information about the locations and transfer arrangements that apply to your data.

7. Data Retention

We retain personal data only as long as necessary for the purposes in this policy, including legal, accounting, and security needs.

• Account and financial records are kept while needed to provide your account.
• Account-linked support interaction events and their duplicate-prevention records expire after 90 days and are removed by a scheduled cleanup, normally within the following hour. Processing delays or a cleanup failure can delay removal. Reminder preferences and purchase-based suppression remain with your account. Account deletion removes your support interaction records as well as these preferences.
• Identifiable support records are retained for up to 12 months after the request is resolved, unless a legal obligation or ongoing dispute requires longer retention. Feedback may be retained for product improvement after account/contact details are removed and known identifying details in the message are redacted.
• Diagnostic retention depends on the relevant provider's configured retention settings. Contact us for details of the retention currently applied to your data.
• Billing and payment records may be retained for applicable accounting, tax and dispute-resolution requirements.

You can request account deletion in Settings. The deletion process removes your sign-in account, profile and owned ledger records, including their budgets, expenses, transactions, categories, recurring templates, projections, saved purchase lists and their items, and derived search records. Membership records in someone else's ledger have your name replaced with "Deleted user" and your email removed. Feedback messages are kept, but their account identifier, name, email, IP address and browser details are removed, and known identifying details in the message are redacted. Some provider-held records and records in ledgers owned by others may remain. Contact us about any remaining personal data you want reviewed for deletion.

8. Your Rights

Depending on the circumstances and applicable law, you can:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Receive a portable copy of information you supplied where the right applies
• Restrict certain processing
• Withdraw consent where we rely on it

Right to object: You can object to processing based on legitimate interests, giving reasons related to your situation.

Contact info@talentsft.co.uk to exercise your rights. We may need to verify your identity. A paid CSV export feature does not limit your statutory right to request your personal data.

You can also complain to the UK Information Commissioner's Office through ico.org.uk/make-a-complaint.

9. Cookies and Local Storage

Talents uses cookies, browser storage and caching for sign-in, preferences and app functionality. Diagnostic monitoring is also described in our Cookies Policy.

10. Children's Privacy

Talents is not intended for children under 18, and we do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:
info@talentsft.co.uk

You can use "Privacy Request" in your subject to help us identify your message, but it is not required to exercise your rights.