Skip to main content

Privacy

Privacy Policy

Last updated: September 8, 2026. This document explains what personal data iowii collects, for what purposes, for how long, and what rights you have under the General Data Protection Regulation (GDPR).

Create accountView terms and conditions

Data controller

The controller responsible for processing your personal data is Iowii, a fully digital product with no physical registered office. For any privacy question or to exercise your rights, contact geral@iowii.com.

  • Legal identity: Iowii
  • Privacy contact: geral@iowii.com
  • Registered office: fully digital product, no physical address

Data we collect

We collect the data you provide directly (name, email, password, transactions, accounts, goals you record) and technical data generated by using the service.

  • Account: name, email, encrypted password
  • Financial data you enter: transactions, accounts, budgets, goals
  • Technical data: IP address, device type, usage logs

Who we share data with

We use subprocessors to operate the service. We never sell your personal data.

  • Firebase (Google) — hosting, authentication, and database
  • Groq — automatic transaction categorization (only each transaction's description — with identifiers like IBANs and card numbers removed — and its type)
  • Groq — optional statement reconciliation assistant (only when you turn it on): uses a version of the statement with IBANs, account numbers, card numbers, and postal codes removed, including the detected opening and closing balances, to locate missing entries
  • Groq — merchant/entity and spending-limit suggestions from your recent history (up to 50 expenses: anonymized description, amount, category, and date)
  • Groq — weekly spending analysis and savings tips (anonymized descriptions, plus a summary of your financial profile — balances, budgets, debts, and goals — to make the analysis more relevant)
  • Groq — automatic reading of receipts or screenshots you manually upload (the image is sent as uploaded; we always ask for your confirmation before it's sent)
  • Groq — conversational financial assistant (may look up your transactions to answer your questions; descriptions are anonymized before being sent)
  • Groq — other internal analyses (yearly comparison, user-profile detection) use only aggregated statistics, never descriptions, names, or identifiers
  • Docling — a private service we host ourselves to read the text of PDF statements you import; the file is processed only for text extraction and isn't stored by our server
  • Resend — transactional email delivery
  • Stripe — subscription payment processing
  • Plaid — secure connection to your bank accounts and transaction syncing, when you choose to link a bank

Cookies

We use necessary cookies for the site to function, and, only with your consent, analytics and marketing cookies. You can change your choice at any time in the cookie settings, available in the site footer.

  • Necessary: always active, ensure security and basic functionality
  • Analytics: help us understand how the site is used (only with consent)
  • Marketing: personalize ads and measure their performance (only with consent)

Retention period

We retain your data for as long as your account remains active. After account closure, all of your data — including any active bank connections — is deleted immediately, unless a longer legal retention obligation applies.

  • Account data: deleted immediately upon account closure
  • Tax records: per the applicable legal period in Portugal

Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data, and you can file a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority. To exercise any right, contact geral@iowii.com.

  • Access, rectification, and erasure of your data
  • Portability and objection to processing
  • Complaint to the CNPD (www.cnpd.pt)