Privacy Policy

Vunera is a finance management app designed with a local-first architecture.

Local Storage: Your financial records, such as income, expenses, wallets, debts, receivables, categories, and notes, are stored by default in your device’s local storage (SQLite database). You retain full control over this data.

Guest Use: When you use the app without creating an account (as a guest), the first name, last name, and financial data you enter remain entirely on your device; they are not transferred to third-party servers or cloud infrastructure.

Risk of Data Loss: In guest use, backing up data is entirely the user’s responsibility. If the app is deleted, the device is reset, or the device is damaged, local data cannot be recovered.

Cloud features and synchronization tools are activated only when you explicitly request them and start the integration.

Google Sign-In and Firebase Auth: You may optionally sign in with your Google account. This process uses Firebase Authentication infrastructure to create a unique user identifier (UID) for cross-device synchronization, family group management, and backup features.

Cloud Backup: The backup feature is manually triggered by the user or explicitly approved. Depending on your backup preference, your data is transferred to secure cloud servers.

AES-256 Encrypted Backup: Vunera uses the industry-standard AES-256 encryption algorithm during backup and in certain messaging components. This encryption applies only to the relevant transfer packages and encrypted data blocks; it does not mean that all real-time raw data in the on-device SQLite database is end-to-end encrypted.

Shared features involving multiple users (family group, shared wallet, budget sharing, invite codes) require cloud infrastructure.

Infrastructure: Google Cloud / Firebase infrastructure (Cloud Firestore and Realtime Database) is used so these features can work in real time.

Data Access: The Vunera development team does not read, profile, analyze, or commercially track your private financial records, content, or personal data transferred to cloud servers. The server infrastructure acts only as a middleware layer to synchronize data between its authorized owners.

Temporary Messages and Data Minimization: Instant messages sent through Vunera Connect and comments in shared savings areas are not permanently stored on the server in line with the data minimization principle. This data is permanently deleted (hard delete) from Firebase servers no later than 24 hours after delivery.

Anti-Advertising Policy: Vunera does not include any third-party advertising network (such as AdMob) or advertising tracking software.

No Data Trading: Your personal or financial data is not sold, rented, or processed for advertising targeting purposes under any circumstances.

Payment Infrastructure: Google Play Billing is used for in-app purchases and subscription management, and RevenueCat is used as the subscription validation infrastructure.

Card Information: Your credit card, debit card, or other payment method information is never viewed, processed, or stored by Vunera at any stage. All payment processes are handled directly through Google Play Store’s secure payment gateways.

Users have full authority over their data.

Local Data: You can instantly clear all local records on your device from the settings inside the app.

Cloud Data and Account Deletion: You can permanently delete your data stored on cloud servers or in shared wallets from Firebase servers by using the "Data Management" option inside the app.

Vunera does not provide services directed to children under the age of 13 (or the minimum age defined by the laws of the country of residence) and does not knowingly collect personal data from such individuals. Because Vunera is a finance management tool intended for a general audience, children are not encouraged to use the app. If we become aware that a child has provided personal data to us without parental consent, we delete that data from our servers (Firebase, etc.) without delay. If you believe that a child has transferred data to us, please contact us.