Privacy

Everything below is written to your browser first, and while you're signed out that is the only place it ever exists — none of it is transmitted to us or anyone else:

• Net worth — every asset and liability you enter, and your saved snapshots
• Budget, categories and individual transactions
• Bank statements you import, and everything extracted from them
• All calculator inputs and results — take-home, pension, mortgage, loan, savings
• Your assistant chat history

Statements you import are processed entirely in your browser. The file itself is never uploaded, on any plan.

With a profile, what you save is also backed up to your account — that's what makes it follow you to another device — so it is stored with us as well as on your device. The next section covers what that means. Your device passcode or biometric lock secret is the one thing that never leaves the device, on any plan.

What your plan saves differs. On the free plan nothing you enter is written to your browser's local storage: your profile and every calculator figure are held in memory for that visit and clear when you refresh or leave, and because they are never saved they are never backed up either. With a profile all of it is saved to your device and backed up to your account.

Because it's stored in your browser, anyone with access to your unlocked device and browser profile can see it. On a shared computer, use the delete option below when you're finished.

You can use Cuan entirely without an account. If you create one, we store your email address (to sign you in) and your profile:

If you sign in with Apple or Google, they tell us your email address (Apple lets you hide it behind a private relay address) and, if you allow it, your name. We don't receive your Apple or Google password, contacts or anything else from those accounts.

• Name
• Age and marital or civil status
• Number of qualifying children
• Gross annual income, and a spouse's income where you've given it
• Whether you're employed, self-employed, retired, studying or not working
• Whether you rent, own your home, or neither, and whether you work from home
• The circumstances you ticked, and the main goal you chose

This exists so your figures follow you between devices and so the calculators start from your real numbers instead of guesses. Every field is used by at least one feature; we don't collect anything we don't use.

While you're signed in, we also store a backup of your app data. So it can follow you to another device, we save a copy of what you've entered to your account: net worth entries and snapshots, budget categories and transactions, data extracted from statements you imported, savings goals, tracked holdings, calculator inputs and your assistant chat history. It's held as a single record belonging to your account. Only what your plan actually saves is included — on the free plan the history items above are never saved, so they're never uploaded.

• This does not happen while you're signed out.
• It's on by default, and there's a switch to turn it off on your account page. Turning it off stops further uploads.
• Your app-lock passcode or biometric secret is never included, on any plan or setting.

Who can see it. Database access rules restrict every row to the account that owns it, so no other user can read your profile or your backup. Be straightforward about the limit of that, though: this is not end-to-end encrypted, and an administrator with database access could read it. We don't, and we have no feature that surfaces it — but you should know it's technically possible rather than be told otherwise.

Where it's stored. On infrastructure provided by Supabase, in AWS eu-west-1 (Ireland). Your account data stays within the EEA and is never transferred outside it.

Apart from reading a document (below), this is the only part of Cuan that sends your financial details anywhere, and it only does so if you explicitly opt in. Until you choose, the assistant answers in general terms and nothing about you is transmitted.

If you do opt in, a short summary is sent with your question:

• Your first name, so the assistant can address you
• Your age, household situation, employment status and housing
• Gross income, estimated take-home pay, your partner's income and any benefit-in-kind
• Your pension, savings, investments, home value, mortgage, rent and loans, where you've entered them
• Your net worth — each asset and liability, the total and where it's projected to go
• Your budget categories and savings goals, where you've entered them
• What you've spent in each budget category this month, and in total last month — totals only, never the transactions themselves
• Funds you track for deemed disposal
• Tax credits you may be missing

Your first name only — never your surname, your email address or anything else that identifies you, and never individual transactions or imported statements.

Your question and that summary are passed through Lovable's AI gateway to Google, whose Gemini 2.5 Flash model generates the reply. Two processors are therefore involved: Lovable, which operates the gateway, and Google, which runs the model.

You can withdraw consent at any time from the toggle above the chat. Doing so stops any further figures being sent. Your chat history is stored on your device — and, with a profile and backup on, in your account too — and is cleared when you delete your data.

On Personal details you can choose to fill in figures from a payslip, a pension statement or a mortgage statement. It's optional — every figure can be typed instead — and it only happens when you pick a file.

The document itself never leaves your phone. Your phone reads the text off it (a PDF's text, or a photo through a text reader that runs on the phone). That text is then sent through Lovable's AI gateway to Google's Gemini 2.5 Flash model, which picks out the figures — salary, pension contributions, a fund value, a mortgage balance and rate — and sends them back.

Nothing is stored: not the document, not its text, not the figures. You see what was found beside what you have, and only what you tick is saved to your profile, like any figure you type.

In the iPhone app, a subscription is bought through Apple's App Store (and, on Android, Google Play). Apple or Google take the payment and hold your card details; we never see them.

We use RevenueCat to check with Apple or Google whether your subscription is active. RevenueCat receives your account's random ID and the purchase record from the store — which plan, when it started and when it renews. It doesn't receive your name, your email or any of your figures.

On the website, payments are taken by Stripe. You enter your card on Stripe's own payment form, so your card details go straight to Stripe and never reach us.

Against your account we keep which plan you're on, whether it's active or in a free trial, and when the current period ends, so the app knows what to unlock.

Go to your profile and choose Delete account. This permanently removes your login, your stored profile, your cloud backup if you have one, and everything Cuan has kept on the device you're using. It is immediate and can't be undone — we don't keep a copy.

If you've used Cuan on more than one device, the local data on the others is separate. Delete from each, or clear your browser storage for the site.

Under GDPR you also have the right to access, correct, restrict or object to the processing of your data, and to lodge a complaint with the Data Protection Commission (dataprotection.ie). To make a request, email support@cuanfinance.com.

Cuan is not a financial adviser. It's an educational tool. Figures are estimates based on published Irish tax rules and the assumptions you enter, and shouldn't be relied on for decisions without confirming them with Revenue or a qualified adviser.

No advertising or profiling. We don't sell or share your data, and nothing here is used to target you with advertising.

No tracking, and no third-party analytics. There's no third-party analytics or advertising SDK in Cuan, and no cross-site tracking. Nothing about how you use the app is sent to anyone but us, and what does reach us goes to our own server rather than to an analytics company.

Nothing is transmitted today. The app keeps a small anonymous tally on your device — counts of which features you've opened, so it can tell whether you've used the assistant before — and the collector it could report to is not configured, so nothing leaves your device. You should know now what it would carry if we ever switch it on, rather than finding out later. It would send a fixed list of event names written into the app — "opened a calculator", "finished setting up", "started checkout" — and never your figures, your name, your email, your questions to the assistant, or any text you typed. There is no advertising or profiling in it, and nothing is joined to your account. Each event carries a random id that lasts only as long as the app is open, so we can tell one person moving through four screens from four people seeing one each; it is held in memory, never written to your device, and it's gone the moment you close the app — so it cannot follow you between visits, between devices, or anywhere else.

Notifications. If you allow them, Cuan can send you three kinds of notification: a reminder before one of your own deadlines, a note when the Budget or Revenue rates change something we calculate, and a check once a quarter asking whether your salary, job or household have changed. You choose which of the three in Account → Notifications, and you can turn any of them off at any time. They're put together on your device from figures already on it — nothing about you is sent anywhere to produce one, and we're not told whether you opened one. Announcements are the one exception to "nothing leaves your device": your app asks our server for the current list, the same list everyone gets. That request carries no account, no figures and nothing identifying — it's the same question every copy of the app asks.

No cookies. Cuan doesn't use cookies. Your sign-in session is kept in your browser's local storage, on your device — not in a cookie, and not shared with anyone.

Crash reporting. If the app hits an error, a technical report — the error message, a stack trace and the page you were on — can be captured to help us fix it. It never includes your financial figures, and in the released app this is only active inside the Lovable development preview, not the version you install.

Who's responsible. ADJ Technology Limited operates Cuan and is the data controller. Reach us at support@cuanfinance.com.