Privacy policy

1. Who is responsible

The data controller is Danel Alonso Egusquiza, who develops and maintains Netview. For any privacy matter, write to hola@netviewapp.com.

2. What data we process

Your account

Your email address, your password (which we never see: it is stored with one-way encryption) and, if you give it, your name. If you sign in with Apple or Google, we receive an identifier and your email from them. Apple may give us a relay address instead of yours.

What you log or import

Accounts and their balances, transactions, categories, investments and trades, belongings such as a home or a car, debts and their terms, goals, budgets and recurring payments. This is the data you choose to put into the app.

The statements you upload

When you import a statement, the file is uploaded to private storage that only your account can access. It is read on our server, we save the transactions you confirm and the original file is deleted as soon as it has been processed.

AI import, if you accept it

The first time you import a statement we ask whether you want to use AI. It is only used if you accept, and you can turn it off any time in Settings → Import with AI. If you accept, the descriptions in the statement are sent to a language model to give them a clear name and a category, or to read statements from banks we do not recognise. Before they are sent, IBANs, card numbers, ID numbers and other personal details are masked. A scanned PDF has no text to mask, so it is sent as it is: if you would rather not, do not upload it with AI turned on. You can run up to 10 AI imports a day and 50 a month.

Automatic Apple Pay and Shortcuts

If you set up the Shortcuts automation, each Apple Pay payment sends our server the amount, the merchant’s name and the name of the card you used, and the expense is logged from that. We do not receive the card number or any other payment data. So that it works without opening the app, your iPhone uses its own Shortcuts code; our database only keeps an encrypted fingerprint of that code, and it is revoked when you sign out.

Your subscription

If you subscribe to Netview PRO, Apple takes the payment: we never see your card or billing details. To know whether your subscription is active we use RevenueCat, which receives from Apple the product, the dates, the renewal and the free trial, linked to an internal identifier for your account, without your name or email.

Technical data

Like any internet service, our provider logs technical data for each request, such as the IP address, the time and any errors, so that the service works and stays secure. Before anything from a statement is written to these logs, IBANs, ID numbers and card numbers are masked.

What stays on your phone

Your session, encrypted with AES-256 using a key kept in the system keychain, your settings and scheduled alerts. For Shortcuts and widgets, the keychain and the app’s shared space also hold the Shortcuts code, the names of your accounts and categories and the figures the widgets show. Alerts are created on the phone itself: we do not use an external notification service.

3. What we do not do

• We do not ask for usernames or passwords for banks, brokers or exchanges.
• We do not show advertising or use third-party analytics or tracking tools in the app.
• The netviewapp.com website uses Vercel Web Analytics to count visits and page views in aggregate. It sets no cookies, does not identify you and builds no profiles.
• We do not sell or share your data, or build profiles to offer you financial products.
• We do not use your data to train artificial intelligence models, and nor can the AI provider we use.

4. Why we use it and on what legal basis

We will not send you marketing emails.

5. Where it is stored and who helps us

To provide the service we rely on these providers, who process data only on our instructions:

• Supabase: database, sign-in, statement storage and server functions. The data is in the European Union region in Ireland. Supabase, Inc. is a US company; if its staff needed access from outside the European Economic Area to support us, it would be under the standard contractual clauses approved by the European Commission.
• Apple and Google: only if you choose to sign in with them, to confirm who you are. Apple also charges the PRO subscription if you subscribe.
• RevenueCat: checks the status of your PRO subscription with Apple. RevenueCat, Inc. is a US company; the transfer relies on the European Commission’s standard contractual clauses.
• Anthropic: the language model behind AI import, only if you accept it. It receives the descriptions already masked, keeps them no longer than needed to respond and for safety, and does not use them to train its models. Anthropic, PBC is a US company; the transfer relies on the European Commission’s standard contractual clauses.
• The email provider we use to send sign-in codes, which receives your email address and the code.

For prices and exchange rates we query Twelve Data, Financial Modeling Prep, CoinGecko and the European Central Bank. These requests leave from our server and only include the asset’s symbol or ISIN, never your data or how much you hold.

6. How long we keep it

For as long as you have an account. If you delete it from the app, your account, all your data and any statements still stored are deleted at once. Our provider’s automatic backups are overwritten within 30 days at most. If you stop using the app without deleting the account, your data stays until you delete it or ask us to. Your PRO purchase history in RevenueCat is linked only to your account’s internal identifier; if you delete your account and want it removed too, write to us.

7. Your rights

You can ask at any time to access your data, correct it, delete it, take it with you, restrict its use or object to it. Several of these you can do yourself in the app:

• Correct: edit any data from its screen.
• Take it with you: with PRO, your transactions as PDF or CSV from Settings → Account statement. For a full copy, on any plan, write to us and we will send it.
• Delete: Settings → Delete my account.

For anything else, write to hola@netviewapp.com from your account’s email address and we will reply within one month. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.

8. Security

Connections are encrypted. In the database, every table has rules that stop one account from reading another’s data. On your phone, the session is stored encrypted and you can protect the app with a 4-digit code, with Face ID if you like, and it locks itself every time you leave it.

9. Children

Netview is not meant for anyone under 16, and they should not create an account.

10. Changes to this policy

If we change anything important, we will let you know in the app or by email before it applies. The date at the top shows the latest version.