Privacy policy
Version 2026-09-23
The short version
We store what you give us so we can show it back to you. We don't sell it, we don't advertise, and we don't share it with anyone except the suppliers listed below who help run the service — and anyone you choose to invite to your account yourself. Your financial data lives in the EU.
What we hold
Identity: your name, chosen handle, email address and date of birth. We ask for date of birth because retirement and drawdown projections are meaningless without an age.
Financial: the accounts, transactions, holdings, income and valuations you record, plus everything we derive from them — returns, allocations and reports.
Preferences: display currency, timezone, country, and the tax-residence settings you choose so we can estimate tax.
Technical: sign-in timestamps, and IP addresses in short-lived server logs. We do not track you across other websites, and there are no analytics or advertising trackers in this app.
Where it lives
Your database is in Frankfurt; the app runs in London. Both are covered by UK/EU data protection law.
Who else sees it
Anyone you invite to your account, and only them. You choose who, and what they can do; they see your financial data but not your email address or date of birth, and they cannot invite anyone else. You can remove their access at any time and it stops working immediately. If you have never invited anyone, nobody outside the suppliers below has seen your data.
If someone gives you access to their account and you ask us to email you a report about it, that email comes to you — we never send mail to one person about another person's account.
| Supabase | Frankfurt, Germany (eu-central-1) | Stores your account and all your financial data. Also sends your sign-in links. |
|---|---|---|
| Fly.io | London, UK | Runs the app itself. Its logs may briefly contain your IP address. |
| Resend | Email delivered from the EU; metadata and logs held in the US | Delivers sign-in links, any performance-report emails you ask for, invitations you send to share your account, and a copy of your data when you close your account. An invitation carries your name and the address you typed — which may belong to someone who has no account with us. |
| Cloudflare | Global | Serves the public website, answers DNS for the domain, and forwards mail sent to us. Turnstile also checks you're human when you sign in or create an account. Sees your IP address. |
| AI models | Global | We consult AI models to estimate how your portfolio splits across sector, geography and currency. They receive only the asset's name and identifier — never your name, email, holdings or balances. We may change which provider we use over time. |
| Google (Gemini) | Global | Reads the statements and contract notes you upload to the PDF importer, so it can turn them into draft entries for you to check. Unlike the row above, it receives the whole document — including your name, account number and balances, if they are printed on it. Because we use Google's paid tier, Google does not use these documents to train its models. It keeps them for up to 55 days to detect abuse of its service, and its staff may read them only if our account is flagged for suspicious activity. |
We also fetch prices and reference data from third-party market-data providers. They only ever receive the asset being priced — never who is asking, your identity, or your balances.
Cookies and storage
We use browser storage to keep you signed in and to cache your own data so pages load quickly. That's it — no advertising or analytics cookies. Cloudflare Turnstile may set its own storage on the sign-in form to tell humans from bots.
How long we keep it
For as long as you have an account. If you ask us to delete it, we remove your account and financial data. Backups roll off within 30 days. Sign-up records we're required to keep may be retained longer.
Documents you upload to the PDF importer are treated separately, because they are your bank and broker statements. If you accept the entries a document suggests, we keep the original for 12 months so you can go back to it, then delete it. We delete the oldest ones sooner if your account holds more than 50 MB of them. If you reject the entries, the original is deleted straight away. If you close the window without deciding, it's kept so you can come back to it, but for no more than 90 days. Documents we can't import aren't kept at all. Originals are stored privately, and are only ever readable through a link we create for you that expires after an hour. Deleting your account deletes them too.
Your rights
Under UK/EU data protection law you can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how we use it. Ask us and we'll do it — we aim to respond within 30 days, and we won't charge you. You can also complain to your data protection regulator (in the UK, the ICO).
Contact
Reach us at contact@verdemar.co. If we ever appoint a data protection officer, their details will appear here.
These documents are also served inside the app, from the same source.