Skip to main content

Privacy

Privacy Policy

Last updated: October 2, 2026. This document explains what personal data IOWII collects, for what purposes, for how long, and what rights you have under the General Data Protection Regulation (GDPR).

Create accountView terms and conditions

Data controller

The controller responsible for processing your personal data is Iowii, a fully digital product with no physical registered office. For any privacy question or to exercise your rights, contact geral@iowii.com.

  • Legal identity: Iowii
  • Privacy contact: geral@iowii.com
  • Registered office: fully digital product, no physical address

Data we collect

We collect the data you provide directly (name, email, password, transactions, accounts, goals you record) and technical data generated by using the service.

  • Account: name, email and, if you sign up with email, an encrypted password
  • Sign in with Google: we receive your name, email address and profile picture from your Google account. We use the name and email to create and identify your account, and the email also to send you service messages. The picture is only displayed in the app and we do not store it in our database. We never receive your Google password and we do not request access to your Gmail, Drive, calendar or contacts
  • Financial data you enter: transactions, accounts, budgets, goals
  • Technical data: IP address, device type, usage logs
  • Optional questionnaire about IOWII: the answers you choose to give, linked to your account. You can skip any question and leave at any time

Who we share data with

We use subprocessors to operate the service. We never sell your personal data.

  • Firebase (Google) — hosting, authentication, and database
  • Groq — automatic transaction categorization (only each transaction's description — with identifiers like IBANs and card numbers removed — and its type)
  • Groq — optional statement reconciliation assistant (only when you turn it on): uses a version of the statement with IBANs, account numbers, card numbers, and postal codes removed, including the detected opening and closing balances, to locate missing entries
  • Groq — merchant/entity and spending-limit suggestions from your recent history (up to 50 expenses: anonymized description, amount, category, and date)
  • Groq — weekly spending analysis and savings tips (anonymized descriptions, plus a summary of your financial profile — balances, budgets, debts, and goals — to make the analysis more relevant)
  • Groq — automatic reading of receipts or screenshots you manually upload (the image is sent as uploaded; we always ask for your confirmation before it's sent)
  • Groq — conversational financial assistant (may look up your transactions to answer your questions; descriptions are anonymized before being sent)
  • Groq — Group assistant (only when you use it): receives your question, with people's names replaced by letters, and already-calculated Group totals (balances, spending by category, goal progress) — never descriptions, notes, emails, or real names
  • Groq — AI research conversation (only if you choose to take part): receives the answers you type, with identifiers such as IBANs, cards, passwords and phone numbers removed, and at the end the whole conversation to summarise it into analysis tags — never transactions, accounts or balances
  • Groq — other internal analyses (yearly comparison, user-profile detection) use only aggregated statistics, never descriptions, names, or identifiers
  • PostHog — product usage analytics (only with your analytics consent): events such as signing in, finishing setup, or saving a transaction, tied to your account identifier but without your name or email; never the content of your transactions. It also records technical details of AI requests (model, response time, amount of text), never the text sent or received
  • Docling — a private service we host ourselves to read the text of PDF statements you import; the file is processed only for text extraction and isn't stored by our server
  • Resend — transactional email delivery
  • Stripe — subscription payment processing
  • Plaid — secure connection to your bank accounts and transaction syncing, when you choose to link a bank
  • Product Hunt — the Product Hunt badge in the footer of the site's public pages is loaded from their servers, which therefore receive the IP address and browser type of anyone viewing the page. It is not loaded on the app screens that show your financial data, and it receives no account information

Cookies

We use necessary cookies for the site to function, and, only with your consent, analytics and marketing cookies. You can change your choice at any time in the cookie settings, available in the site footer.

  • Necessary: always active, ensure security and basic functionality
  • Analytics: help us understand how the site is used (only with consent)
  • Marketing: personalize ads and measure their performance (only with consent)

Retention period

We retain your data for as long as your account remains active. After account closure, all of your data — including any active bank connections — is deleted immediately, unless a longer legal retention obligation applies.

  • Account data: deleted immediately upon account closure
  • Tax records: per the applicable legal period in Portugal
  • Optional questionnaire answers: up to 24 months, or until you close your account, whichever comes first

Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data, and you can file a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority. To exercise any right, contact geral@iowii.com.

  • Access, rectification, and erasure of your data
  • Portability and objection to processing
  • Complaint to the CNPD (www.cnpd.pt)