Android app privacy

Updated October 22, 2026. FinanceFD is operated by Front Door Services LLC, owned by Neal Moore. This notice describes the Android beta, including optional account sync the cloud AI tutor in version 0.3.0-beta.2 and later, and optional on-device Fin in version 0.3.0-beta.7 and later. Availability depends on the installed app version and the enabled server service; an account connection is confirmed only when the app reports success.

Guest and local app data

Bundled lessons, charts, guides, quizzes and calculators work offline. Guest lesson completion, lesson bookmarks, optional notes and market favorites are stored on this device. The app also stores your appearance preference and a public news edition. Calculator entries and quiz answers are not saved. Avoid account numbers, passwords or other sensitive financial details in notes; device storage is not a secure vault. Android app backups and device-transfer backups are disabled in the app configuration; verification on every manufacturer remains outstanding.

Optional passkey account sync

You can use the app without an account. If native Android passkey sign-in is enabled, you can use Credential Manager inside the app with an existing FinanceFD passkey. If that route is not enabled, the app opens the FinanceFD website in an Android browser tab; verify your passkey and approve a five-minute code before returning to the app. Both paths connect only this app to your free FinanceFD account. Only create a new free passkey if you do not already have an account. FinanceFD receives public credential information and verification results, not your biometric data. Credential providers handle any passkey synchronization between your devices.

A connected account syncs canonical market favorite IDs, completed lesson IDs, lesson bookmarks and saved notes to FinanceFD’s Cloudflare-hosted account database. Notes are limited to 2,000 characters. The app refreshes signed-in data on startup, on returning to the app, when a network connection returns and when you choose Sync account now. Pending edits are retried for the same account. Notes are not public, are not end-to-end encrypted and are not sent as tutor prompts or analytics events. No subscription or payment is required.

Account data and pending edits are cached in the app’s private local storage, separately by account, to support offline use. A stale note does not silently replace a newer note: your draft is kept for comparison and an explicit choice. A sign-in expiry hides account data; an unsynced draft can remain cached for reconnection to the same account. Guest data is not automatically imported into an account. You can explicitly import this device’s guest learning, lesson bookmarks, notes and market favorites after connecting; existing account notes require comparison before replacement.

Authentication storage and retention

The app encrypts its account authorization token with an Android Keystore key. The token is kept outside JavaScript local storage and is restricted to free account sync; it cannot authorize checkout, billing changes or paid access. The server stores a token hash, the account and passkey reference, expiry and connection timestamps. App connections expire after at most 30 days and can be revoked. Connection secrets and user codes expire after five minutes and are used once; server cleanup of expired records occurs on the next applicable cleanup run.

Account favorites, completed lessons, bookmarks and notes have no automatic expiry. Remove a favorite, clear completion, remove a bookmark or erase and save a note to change the account record. A note revision counter can remain to prevent an old device from overwriting a later change. Offline devices can show cached copies until they reconnect or their local app data is cleared. The website privacy notice describes provider and retention limitations.

Markets and TradingView

The app includes the FinanceFD catalog and indexed search. Searching the bundled catalog itself does not contact TradingView. Opening Markets automatically loads the Market Glance ticker and Symbol Info quotes for the displayed favorite and browse rows; the first visible rows start promptly and the remaining rows load as you scroll. Opening an instrument loads its chart. The TradingView frames are sandboxed and set to no-referrer. TradingView receives the displayed symbols and ordinary network information such as your IP address; feeds may be delayed, incomplete or unavailable, and its privacy policy applies. FinanceFD does not read frame price data or send your account token, notes or bookmarks to TradingView. Leaving Markets removes the frames from the app screen. TradingView’s privacy policy applies to its service.

Other network connections

When you tap Refresh news, the app requests the public edition from www.financefd.com. Account sync requests go to FinanceFD’s account service. FinanceFD’s hosting provider receives ordinary connection information such as IP address, requested URL and time. We do not promise a server-log or backup retention period that has not been verified. General article and source links open a browser after confirmation; notes, bookmarks and account tokens are not attached to those links. FinanceFD links can include the non-personal fd_app=android-free marker to display the app’s free website view.

Analytics, advertising, AI and payments

The app has no analytics or advertising SDK. Optional first-party app usage sharing is a separate feature and is unavailable unless enabled by the FinanceFD service; it sends no events until you affirmatively opt in. If enabled, it sends only the coarse app section you open (Learn, Markets, Money Lab, News, Saved or Settings) and the app version, to improve navigation. FinanceFD stores daily aggregate screen-event counts, scheduled for deletion after 90 days; these are events, not people or installs. The event records contain no account, passkey, device or install identifier, favorites, ticker, search, lesson ID, note or Ask Fin prompt. The Cloudflare-hosted endpoint necessarily receives the request IP address and time for network delivery and protection; a short-lived hash is used only in volatile memory for rate checking and is not stored with usage records. Provider-side request-log retention has not been verified. Turning sharing off stops future events; already combined daily counts cannot be attributed to or deleted for one person. This is independent of app account sync and passkey sign-in. This app has no brokerage connection, payments or in-app purchases. The optional in-app Ask Fin feature uses FinanceFD’s Cloudflare Worker and Cloudflare Workers AI. The app sends a question, up to four recent conversation turns, the selected topic and mode only after you enable consent and submit. The worker uses the request IP address for rate limiting. The app does not include your account token, favorites, notes or lesson progress. Conversation text stays in app memory and is not saved to app storage. The worker code does not intentionally save prompts or answers; Cloudflare infrastructure and provider log retention periods have not been verified. AI answers can be inaccurate and are for general education. Cloud mode never receives the local conversation when you switch engines. Switching engines clears the conversation and requires a fresh cloud choice. If you choose the website tutor, that service’s separate choices and privacy notice apply. Optional website analytics consent is independent of account sync. Changing optional consent does not cancel billing or revoke passkeys or app account connections.

Optional on-device Fin and answer reports

In version 0.3.0-beta.7 and later, local Fin uses the native LiteRT-LM CPU runtime and a Qwen3 0.6B model. On a supported 64-bit phone, a separate affirmative choice downloads a pinned, checksum-verified model of 344,671,744 bytes (about 345 MB) from Hugging Face and its delivery providers. Those providers receive the model-file URL, IP address and ordinary connection information; your questions and FinanceFD account token are not part of the download. Their log retention has not been independently verified. See Hugging Face privacy. The model stays in private, backup-excluded app storage until you remove it, delete local app data, clear app storage or uninstall.

After that download, local questions and answers are generated on the device. Chat stays in memory, is cleared when leaving Fin or switching engines, and is not written to app storage. Leaving Fin or pausing the app unloads the local engine. Local failure never automatically sends a question to cloud AI. Cloud AI remains a separate choice. The model may give inaccurate or harmful answers despite learning boundaries; verify important information.

Each generated answer has an in-app Report answer control. Only if you review an editable excerpt and separately agree to send it, FinanceFD receives that excerpt (up to 2,000 characters), report category, local/cloud engine label and app version through its Cloudflare-hosted service. The request does not attach your question, conversation history, account token, favorites, notes or lesson progress. An answer itself can repeat information you typed, so remove private information first. Reports are stored for safety review by the passkey-authorized administrator and deleted once older than 90 days on the next submission or administrator review. A timed purge has not been verified. Network protection uses a hashed IP rate-limit key that expires after two minutes; the application does not store a raw IP address with the report. Provider logs and backup retention have not been verified. Deleting the local app does not delete a report already submitted; use the privacy request contact for a request we can verify.

Sign-out, local deletion and account deletion

Sign out of app revokes the app connection when online and removes the current account cache on this device. The app reports when server revocation cannot be confirmed. You can revoke the app from the website’s authenticated session controls. Signing out, clearing app storage and uninstalling do not cancel existing website billing or delete your server account.

Settings → Delete my local app data signs out and removes guest learning data, market favorites, appearance, optional usage preference, saved news, cached account data, unsynced drafts and the downloaded local Fin model and runtime cache. It does not delete account data already saved on FinanceFD. Unsynced drafts can be lost by local deletion or uninstalling.

Request FinanceFD account and associated data deletion. This resource also works without the app. You can email support@financefd.com to initiate a request; ownership must be verified. An email address or payment receipt alone does not identify your passkey account. Any necessary billing steps or legitimate legal, accounting, security or fraud-prevention retention will be explained when handling the request. No automatic server-account deletion or unverified response-time guarantee is promised.

Support and changes

Support email is processed separately by your mail provider and ours. Send only information needed for your request; deleting app data does not delete a message you sent. Contact Android support or account deletion requests. Material changes will be described in the updated notice and website change notice, with any additional notice or consent required before a new use begins. See the website privacy policy for website cookies, privacy signals, processors and request options.