We can't see your money.

Last updated: 14 August 2026

The short version

Zinfai is software you install and run yourself. Your holdings, transactions, expenses, income, liabilities, goals and plans are stored in a database on your own computer. We operate no backend that receives them, so we could not read your financial data even if we wanted to.

This website, www.zinfai.com, does have one account system: downloading an installer requires a free account with a verified email address. That account is for the download only — it holds your email, never your finances, and the app you install never signs in to it. There are still no tracking or analytics scripts on this site.

What stays on your machine

• Every asset, account, transaction, expense, income and liability you record.
• Your local login credentials, stored as a hash in your own database.
• Uploaded statements, and everything extracted from them.
• AI-generated plans, ratings and analyses, once returned.
• Your AI provider API keys, in your local database or a local .env file.
• Daily portfolio snapshots and the whole history they build up.

What leaves your machine, and when

Zinfai reaches out to the internet for a handful of specific things. Each one is listed here so there are no surprises.

• Market prices and FX rates. The app requests quotes for the instruments you hold from public market-data sources (exchange quote APIs, AMFI for mutual fund NAVs, public crypto APIs) and daily foreign-exchange rates. These requests contain ticker symbols and scheme codes — never your quantities, cost basis or identity.
• Market, macro and news data. Index levels, commodity prices, macro series and news feeds for your region. Nothing about you is sent.
• AI provider requests — only if you configure a key. When you generate a financial plan, rate an asset, parse an unsupported statement or run news analysis, the relevant data is sent from your machine directly to the provider you chose (OpenAI, Anthropic, Google, xAI, Mistral, DeepSeek, Groq, Perplexity, OpenRouter, AWS Bedrock, or any OpenAI-compatible endpoint you configure) using your own API key. It does not pass through us. That data is handled under that provider's privacy terms, so read them if this matters to you. Leave the keys blank and no AI request is ever made.
• Google Drive backups — only if you enable them. The backup file is written to your own Drive account, with access you grant and can revoke at any time. We never receive it.
• Update checks. The app checks for a newer release so it can show the update banner. This is a plain request for a version number and carries no data about you — it is not tied to your download account.

What we collect

From the app: nothing. No telemetry, no crash reporting, no analytics, and no way for your financial data to reach us.

From this website, if you register for a download, we hold exactly this:

• Your email address, and your name if you gave one.
• How you signed in — email and password, or Google.
• Whether your email is verified, and when you last signed in.
• Which installers you downloaded — product, platform, version and time.
• The IP address and browser the registration and each download came from, kept as an anti-abuse record.

That is the complete list. We do not track which pages you browse, we set no advertising or analytics cookies, and we do not sell, rent or share any of it. The one cookie-equivalent in play is the sign-in token your browser stores to keep you logged in, which you clear by signing out.

Why we ask. So we can tell you when a security or data-correctness update ships, and so we know roughly who is running Zinfai. We do not run marketing campaigns off this list.

Who processes it. Sign-in and the account record are handled by Google Firebase (Authentication and Firestore) on our behalf. Verification email is sent through our email provider. The installer itself is served from GitHub, which logs the request under its own privacy policy. Our hosting and DNS providers process standard request logs (IP address, user agent, page requested) to serve and protect the site, as any website's do.

How long we keep it. For as long as you have an account. Ask us to delete it and we remove the account and its download history.

If you email us

Writing to support@zinfai.com means we hold your email address and whatever you put in the message, for as long as it takes to help you. We don't add you to any list, and we don't share it.

Please never send passwords, API keys, full account numbers or an unredacted backup file. We will never ask for them.

Zinfai Buddy

The Android app is read-only and signs you in to nothing. The backup you import is kept in the app's private storage on the device, optionally behind a biometric lock, and can be erased with one tap in Settings. Its only outbound calls are to the same public market-data sources for live prices and news, and to Google Drive if you sync that way. There are no analytics or crash-reporting SDKs in it.

Security is yours to hold

Running on your own machine means the safeguards are yours too. Keep your computer and disk encrypted, use a strong password for the app, and export backups regularly — if you lose the machine or delete its data volume, the data is gone and we have no copy to restore from.

By default the app listens on localhost only, so it isn't reachable from your network. If you deliberately expose it, put it behind authentication and HTTPS — that configuration, and its consequences, are yours.

Your data, your call

• Export — one JSON file with everything, any time, from Settings → Backup.
• Delete — remove the data volume and the data is permanently gone.
• Revoke — remove API keys in Settings, or revoke Drive access in your Google account.

None of that needs a request to us, because we hold none of it. For the download account we do hold, email support@zinfai.com and we will send you a copy of the record or delete it, whichever you ask for. Deleting it does not affect a copy of Zinfai you have already installed.

Not financial advice

Zinfai is a tracking and planning tool for your own research and education. The AI planner and asset quality ratings are AI-generated and can be wrong. Zinfai is not a registered investment adviser, broker or tax adviser, and nothing in the app or on this site is a recommendation to buy or sell any security. Verify anything that matters, and consider a registered adviser in your own jurisdiction.

Changes to this statement

If this changes, the date at the top changes with it. If the change is significant and you have a registered account, we will email you about it.

Contact

Questions about any of this: support@zinfai.com.