← Back to Inveriok

Inveriok Privacy Policy

Last updated: August 2, 2026

This privacy policy describes how Inveriok ("the App", "we") collects, uses and protects your personal information when you use our personal finance application, available as a web app and as an iOS app.

Data controller: Alex Bolivar Canal (Spanish tax ID / NIF: 39418651D), contact: inveriok.app@gmail.com.


1. What data we collect

1.1 Account data

When you create an account in Inveriok, we collect:

  • Your email address
  • Your password (stored encrypted, never in plain text)
  • If you sign in with Apple or Google, we receive your email and name through those providers, based on the permissions ("scopes") you authorize on each platform. If you use Apple's option to hide your real email ("Hide My Email"), we only receive a private relay address generated by Apple, and we never access your real email.

1.2 Financial data you enter

Inveriok is a personal finance management app. The data you voluntarily enter includes (depending on which sections you use):

  • Income and expense transactions
  • Cash and bank account balances
  • Debt information
  • Investment and savings information
  • Retirement-related data
  • Data related to estimating your income tax return

This financial data is entered exclusively by you. We do not collect it from any bank, financial institution or external source — there is no automatic bank connection (Open Banking) in the App.

1.3 Technical data and usage statistics

With your prior consent, we use Firebase Analytics (a Google service) to collect anonymous and aggregated usage statistics (for example, which screens are visited or which features are used), for the sole purpose of understanding how the App is used and improving it. These statistics never include any financial data (amounts, transactions, balances, accounts) or any content you enter into the App.

The first time you open Inveriok we ask for your permission via a notice. If you don't accept, no analytics are activated. You can change your choice at any time. We don't use this data for advertising or profiling purposes, and we don't sell it to third parties.


2. Legal basis for processing

We process your personal data under the following legal bases of the General Data Protection Regulation (GDPR):

  • Performance of a contract (art. 6.1.b GDPR): processing your email, password and financial data is necessary to provide you with the service the App offers.
  • Consent (art. 6.1.a GDPR): when you sign in via Apple or Google, processing of the data received from those providers is based on the consent you grant at the moment you authorize access.
  • Consent (art. 6.1.a GDPR): usage statistics via Firebase Analytics are only processed if you accept the consent notice, and you can withdraw it whenever you want.

3. Who we share data with

We only share data with the following providers, strictly necessary for the App to function:

Provider Purpose Data shared
Supabase Authentication and storage of your financial database Email, password (encrypted), and all your financial data entered in the App
Apple (Sign in with Apple) Sign-in, iOS app only Email (or private relay email) and name (as you authorize)
Google (Google Sign-In) Sign-in, iOS app only Email and basic profile (as you authorize)
Google (Firebase Analytics) Anonymous usage statistics to improve the App (only if you accept the consent notice) Usage events and anonymous technical identifiers. No financial data or content entered in the App is ever sent
Vercel Hosting of the web application and server functions None of your financial data is sent directly to Vercel; it acts as technical infrastructure
RevenueCat Management of the Premium subscription (Inveriok Pro), iOS app only An identifier of your account and your subscription status (active, cancelled, renewal date). It doesn't receive or store your card or payment method data — that's handled directly by Apple
Yahoo Finance (via our server) Retrieving stock quotes and historical prices Only the symbol/asset you search for. This lookup is performed by our server, not your device — Yahoo doesn't receive your IP or personal data
Frankfurter.dev Currency exchange rates Only the currency codes queried (e.g., "USD→EUR"). This call is made directly from your device, so this provider receives your IP, with no additional personal data
Google Fonts Interface typography Your device connects to Google's servers to download the fonts, which exposes your IP and user-agent to Google

We don't sell your data to third parties. We don't share your financial data for advertising purposes.

International data transfers

Some of the providers above (such as Supabase, Vercel or Google) may process data on servers located outside the European Economic Area (EEA), including the United States. In these cases, those providers rely on transfer mechanisms recognized under European regulations, such as the Standard Contractual Clauses approved by the European Commission or other equivalent adequacy frameworks.

External links

Some sections of the App (Retirement, Tax return) include informational links to official websites such as Spain's Social Security (seg-social.es) and the Spanish Tax Agency (agenciatributaria.es). These links only activate if you click them voluntarily; there's no automatic loading or tracking.


4. Security of your data

Your financial information is protected through:

  • Encryption in transit: all communication between the App and our servers uses HTTPS.
  • Row Level Security (RLS): our database is configured so that each user can only access their own data. No other user of the App, not even with technical access to the system, can query your financial data without your credentials.
  • Secure authentication: we use encrypted passwords and, optionally, sign-in via Apple or Google, which don't expose your password to our servers.

5. Your rights (GDPR)

If you reside in the European Union, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your account and all associated data
  • Portability: request a copy of your data in a structured format
  • Object to the processing of your data or to automated decisions (not applicable, as we don't carry out profiling or automated decisions)
  • Restrict the processing of your data

To exercise any of these rights, contact us at: inveriok.app@gmail.com.

You can delete your account and all associated data at any time directly from the App: go to More → Delete my account, follow the confirmation steps, and your account and all your financial data will be deleted immediately and permanently from our servers.

If you believe we haven't handled your data in accordance with the regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD), through its electronic office at www.aepd.es.


6. Data retention

We retain your data for as long as you keep your account active. If you delete your account, your financial and profile data are permanently and irreversibly deleted from our database, with no additional retention periods.


7. Minors

Inveriok is not intended for users under 18. We do not knowingly collect data from minors.


8. Advertising

Inveriok currently doesn't display advertising. If we introduce advertising in the future, we'll update this privacy policy in advance and, if required under applicable regulations, we'll ask for your explicit consent before showing personalized ads.


9. Subscriptions and payments

Inveriok offers a free plan and an optional paid subscription, Inveriok Pro (monthly or annual). You can check the price and features included in each plan on our Pricing page and in the Terms and Conditions.

Inveriok Pro payments are processed entirely through your Apple account (App Store) — we never receive, process or store your card or payment method data. We use RevenueCat as our subscription management platform: it receives an identifier of your account and your subscription status (active, cancelled, etc.) so it can give you access to Premium features, but it doesn't process or store your payment method data either — that's handled by Apple.


10. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you through the App or by email.


11. Contact

If you have questions about this privacy policy or about how we handle your data, you can contact us at:

Email: inveriok.app@gmail.com

Inveriok — Your finances, under control