Privacy Policy

1. Who we are

Finvestodia is operated by WAW Group Global Limited, a company registered in England and Wales (Company No. 15008409), with its registered office at 174 Hammersmith Road, London, England, W6 7JP ("Finvestodia", "we", "us").

We are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at finvestodia.support@gmail.com.

2. Scope

This policy applies to:

• the Finvestodia website at finvestodia.co.uk, including the waitlist sign-up;
• the Finvestodia mobile and web applications (the App);
• emails and communications we send you.

It does not apply to third-party websites or services we link to, which have their own privacy policies.

3. The data we collect

4. Why we use your data and our legal bases

Under UK GDPR, we rely on the following legal bases:

5. Your financial data

Finvestodia is built around sensitive financial information, so we hold ourselves to a higher standard for it:

• Financial data you enter is used only to provide the App's features to you (budgets, reports, coaching, goals).
• We do not sell it, rent it, or share it with advertisers.
• We do not use your individual financial data for third-party marketing.
• Aggregated, anonymised statistics (e.g. average savings goal size) that cannot identify you may be used to improve the product.

6. AI features and automated processing

The AI MoneyPilot Coach analyses the financial data in your account to generate insights, tips, and challenges.

• Where AI features are powered by third-party AI infrastructure providers, those providers act as our processors under contract: they may use your data only to provide the service to us, and are not permitted to use it for their own purposes, including training their models.
• The Coach provides suggestions and information only. It does not make decisions with legal or similarly significant effects on you (for example, it does not approve or deny credit). It is not financial advice.
• You can ask us to explain how a particular insight was generated by contacting finvestodia.support@gmail.com.

7. Who we share data with

We share personal data only with:

• Service providers (processors) who help us run Finvestodia — such as our hosting, email delivery, payment processing, analytics, and AI infrastructure providers — under contracts requiring them to protect your data and use it only on our instructions.
• Professional advisers (lawyers, accountants, auditors) where necessary.
• Authorities where required by law, court order, or to protect rights, safety, or property.
• A buyer or successor in the event of a merger, acquisition, or sale of assets — we would notify you and this policy would continue to apply to your data.

8. Children

• The Finvestodia account holder must be at least 18 years old.
• Kids Profiles exist inside a parent or guardian's account. The parent/guardian creates and controls the profile, decides what data to enter, and can edit or delete it at any time.
• We collect the minimum data needed for a Kids Profile (display name, age band, goals) and do not use children's data for marketing, profiling for commercial purposes, or advertising.
• We design Kids Profiles in line with the ICO's Age Appropriate Design Code (Children's Code): high privacy by default, no nudge techniques, and clear, child-friendly explanations where children interact with the feature directly.

9. International transfers

Your data is stored on secure cloud infrastructure, which may be located in the UK, the EEA, or other countries. Where data is transferred outside the UK, we ensure adequate protection through UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, plus additional safeguards where appropriate.

10. How long we keep data

• Account and financial data: for as long as your account is active. If you delete your account, we delete or anonymise your data within 30 days, except where we must keep it longer.
• Receipt images: retained in your account until you delete the receipt, the related transaction, or your account.
• Waitlist data: until you unsubscribe, or 24 months after launch communications end, whichever is sooner.
• Billing records: 6 years, as required by UK tax law.
• Support correspondence: 24 months after resolution.
• Backups: deleted data may persist in encrypted backups for up to 35 days before being overwritten.

11. Cookies and similar technologies

We use:

• Strictly necessary cookies — required for sign-in, security, and core functionality. These do not require consent.
• Analytics cookies — used only with your consent via the cookie banner, to understand how the site and App are used.

We do not use third-party advertising or marketing cookies. You can withdraw cookie consent at any time via the cookie settings on our site or your browser settings.

12. Security

We protect your data with measures including:

• encryption in transit (TLS) and at rest;
• passwords stored using strong one-way hashing;
• device-level app lock (Face ID, Touch ID, PIN) processed entirely on your device;
• access controls limiting access to personal data on a need-to-know basis.

No system is perfectly secure. If a breach occurs that risks your rights and freedoms, we will notify the Information Commissioner's Office (ICO) and, where required, you, in line with UK GDPR.

13. Your rights

Under UK GDPR you have the right to:

• Access a copy of your personal data;
• Rectify inaccurate data;
• Erase your data ("right to be forgotten");
• Restrict or object to processing, including any processing based on legitimate interests;
• Data portability — receive your data in a machine-readable format;
• Withdraw consent at any time, where processing is based on consent;
• Complain to the ICO (ico.org.uk), though we'd appreciate the chance to resolve concerns first.

To exercise any right, email finvestodia.support@gmail.com. We respond within one month.

14. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or in-app notice before they take effect. The "Last updated" date at the top shows the current version.

15. Contact

WAW Group Global Limited
174 Hammersmith Road, London, England, W6 7JP
Company No. 15008409
Email: finvestodia.support@gmail.com