Privacy Policy
Ofemy is a budgeting app for households. This policy explains, in plain language, what personal data we process when you use it, why, and what rights you have under the General Data Protection Regulation (GDPR).
Last updated:
1. Who is responsible
The controller of your personal data is ("we", "us"). We operate Ofemy at budget.ofemy.com.
2. Definitions
- Account: your personal sign-in (name, e-mail, password).
- Workspace: a budget shared by a household or another group. A workspace has members with roles (Owner, Admin, Member, Viewer) and holds the financial records described below.
- Workspace data: everything recorded inside a workspace: transactions, categories, recurring templates, imported statements, receipts and reports.
- Member: a person who has joined a workspace by invitation.
3. What data we process
3.1 Account data
Name, e-mail address, a hashed password, the date you accepted the Terms of Use, whether your e-mail is verified, your active sessions (browser, device type, IP address, last activity) and, if applicable, the date your account was suspended.
3.2 Workspace data you and other members enter
Income and expense transactions (amount, date, category, notes, who recorded them), income and expense categories, recurring templates, workspace name and currency. Financial information of this kind can reveal a lot about a household's life; we treat it as confidential and it is visible only to the members of that workspace, according to their role.
3.3 Bank statement imports
When you import a FiDAViSta statement file, we read the transactions it contains (date, amount, counterparty, description, reference) so you can review them and turn them into transactions. The uploaded file is processed and not kept; the imported lines you accept become workspace data and the import batch is pruned automatically after the review period.
3.4 Receipts
When you upload a receipt (photo, PDF or pasted text) it is stored with the workspace and processed to suggest the shop, date, total and line items. Extracting this information uses an AI text-recognition service provided by OpenAI (see section 5); the receipt image or text is sent to that service for the sole purpose of reading it and is not used by OpenAI to train models under the terms of its API. You can review and correct every suggestion before it becomes a transaction. Receipt scanning can be switched off by the platform administrator, in which case this processing does not happen.
3.5 Invitations
When a member invites someone, we process the invitee's e-mail address, the invited role, the inviter's name and the invitation status in order to deliver the invitation and let the invitee join.
3.6 Technical data
Server logs (IP address, requested URL, timestamp, browser type), security events (failed sign-ins, rate limits) and error reports needed to keep the service running and secure. We do not build profiles from this data.
4. Why and on what basis
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Providing the service: accounts, workspaces, budgeting features | Account and workspace data | Performance of a contract (art. 6(1)(b)) |
| Delivering invitations, verification and password-reset e-mails | E-mail address, name | Performance of a contract (art. 6(1)(b)) |
| Reading uploaded receipts | Receipt content | Performance of a contract (art. 6(1)(b)); you choose to upload |
| Security, abuse prevention, troubleshooting | Technical data, session data | Legitimate interest in a secure, working service (art. 6(1)(f)) |
| Complying with legal obligations (e.g. responding to authorities) | Whatever is required | Legal obligation (art. 6(1)(c)) |
We do not use your data for advertising, we do not sell it, and we do not make automated decisions with legal effects about you.
5. Who receives the data
Other members of your workspace see the workspace data according to their role. Owners and Admins can also see the member list with names and e-mail addresses. Choose whom you invite with care.
We use a small number of service providers (processors) who act on our instructions under data-processing agreements:
- Hosting: Hetzner Online GmbH (Finland, EU), where the application and database run.
- E-mail delivery: the SMTP provider that sends invitation, verification and password-reset messages.
- Receipt recognition: OpenAI, L.L.C. (USA), which receives the content of receipts you upload, only for the time needed to read them.
We disclose personal data to authorities only when the law obliges us to.
6. International transfers
Your account and workspace data are stored in the European Union. Receipt content sent for recognition is processed by OpenAI in the United States under the European Commission's Standard Contractual Clauses and OpenAI's participation in the EU-US Data Privacy Framework. We do not otherwise transfer personal data outside the EU/EEA.
7. How long we keep it
- Account data: for as long as your account exists. When you delete your account (Settings → Account) it is removed immediately; transactions you recorded in workspaces owned by others stay in those workspaces without your name attached.
- Workspace data: for as long as the workspace exists. A deleted workspace can be restored by its owner for 30 days and is then permanently purged, including receipts.
- Import batches: the review copy of an imported statement is pruned automatically once the review period has passed; accepted lines live on as transactions.
- Sessions: expire after 2 hours of inactivity; you can sign out other devices at any time.
- Server logs: 14 days.
- Invitations: until accepted, revoked or expired.
8. Your rights
Under the GDPR you can ask us to:
- access the personal data we hold about you and receive a copy (the CSV export covers your transactions);
- rectify inaccurate data (most of it you can edit yourself under Settings);
- erase your data (delete your account under Settings → Account, or write to us);
- restrict or object to processing based on our legitimate interests;
- port your data to another service in a machine-readable format;
- withdraw consent at any time where processing is based on consent, without affecting what happened before.
Write to ; we answer within one month. You also have the right to lodge a complaint with a supervisory authority, in Latvia the Datu valsts inspekcija (dvi.gov.lv), or the authority of the EU country where you live.
9. Security
Connections are encrypted with TLS. Passwords are stored only as salted hashes. Sessions are encrypted and bound to your browser; sign-in attempts are rate-limited. Every database query is scoped to the workspace you are working in so that data from one workspace can never appear in another. Access to production systems is limited to the people who operate the service.
10. Children
Ofemy is intended for adults managing a household budget. We do not knowingly create accounts for children under 16. A parent may of course record a child's expenses in their own workspace.
12. Data breaches
If a personal-data breach is likely to put your rights at risk, we will inform you and the supervisory authority without undue delay, as required by GDPR articles 33 and 34.
13. Changes to this policy
We may update this policy when the service or the law changes. The date at the top shows the current version. For material changes we will notify signed-in users in the app.