Privacy Policy

Effective: 18 September 2026 · Last updated: 5 October 2026 · Operator: Tarifinance

1. Who we are

Tari is operated by Tarifinance (“we”, “us”). The service is available at app.tarifinance.com and via the Tari mobile apps. Contact: [email protected].

2. Data we collect

Account data

• Name and email address
• Password (stored hashed; we never store plain-text passwords)
• Sign-in method (email/password, Google, or Apple where offered)
• Session and device identifiers used to keep you signed in and manage active sessions

Financial content you create

• Transactions (amounts, dates, categories, notes/descriptions)
• Categories and related preferences you configure

Technical and usage data

• Basic device and app information (for example OS, app version)
• IP address and standard server logs needed to operate and secure the API
• Product analytics events (for example sign-in success) via Amplitude when enabled in the app
• Crash and stability reports (stack traces, device model, OS version) via Firebase Crashlytics on release builds

We do not sell your personal data. We do not use your transaction content for advertising.

3. How we use data

• Provide and sync your calendar, categories, and transactions across devices
• Authenticate you and protect accounts (sessions, password change, optional social sign-in)
• Send transactional email when you request it (for example password reset or data export)
• Improve reliability and understand feature usage (aggregated analytics)
• Detect abuse, debug outages, and meet legal obligations

4. Legal bases (where applicable)

Depending on your location, we process data to perform our contract with you (providing Tari), with your consent (for example optional analytics or social login), and for legitimate interests such as security and service improvement, balanced against your rights.

5. Sharing

We share data only with processors that help us run Tari, under appropriate agreements, for example:

• Hosting and database providers that store application and account data
• Email delivery for account and export messages
• Authentication providers (Google, Apple) when you choose those sign-in methods
• Analytics (Amplitude) for product metrics when enabled
• Crash reporting (Firebase Crashlytics / Google) for app stability on mobile release builds

We may disclose information if required by law or to protect rights, safety, and the integrity of the service.

6. Retention

We keep account and transaction data while your account is active. If you delete your account or request deletion, we remove or anonymize personal data within a reasonable period, except where we must retain records for legal, security, or dispute reasons. Server logs are retained for a limited operational window.

7. Security

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, and access-controlled infrastructure. No method of transmission or storage is 100% secure; please use a strong unique password and protect your devices.

8. Your rights

Subject to local law, you may request access, correction, export, or deletion of your personal data, and object to or restrict certain processing. You can:

• Update your display name and password in the app
• Export your data from Account (where available)
• Revoke other sessions from Account → Sessions
• Delete your account from Account → Delete account (mobile or web). See account deletion.
• Email [email protected] for deletion or other privacy requests if you cannot sign in

If you signed in with Google or Apple, you can also revoke Tari’s access in that provider’s account settings.

9. Children

Tari is a general-audience product and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us and we will take appropriate action. Where local law sets a higher digital-consent age, we expect users (or their parent/guardian) to meet that standard before using Tari.

10. International transfers

Infrastructure and processors may be located outside your country. Where required, we use appropriate safeguards for cross-border transfers.

11. Mobile app notes

• The mobile app stores authentication tokens securely on device to keep you signed in.
• Optional product analytics may run on device when configured.
• Release builds may send crash reports to Firebase Crashlytics to help us fix stability issues.
• Features that read SMS or other sensitive device data are not part of the current public v1 experience.

12. Changes

We may update this policy. We will post the new version on this page and update the “Last updated” date. Material changes may also be communicated in-app or by email when appropriate.

13. Contact

Privacy and data requests: [email protected]
Web: https://app.tarifinance.com
Support page: Support