Centje privacy policy

What data Centje uses

From your bank, only after you give permission at your bank: account number (IBAN), account name and type, balance, and transactions (date, amount, counterparty, description).

What you enter in the app: categories, budgets, savings goals, notes, labels, cash spending, things you own or owe, and what the coach remembers about you (you can see and delete this in the app).

Technical data: a random device code (Centje stores only a hash of it) and, if you turn on notifications, a push code from Expo. Centje does not ask for your name, email address or a password.

If you sign in with Apple: a code Apple makes for your Apple ID and Centje, so you can get back into your account on a new phone. No name and no email address.

To prevent misuse and keep costs in check: which access code you used, what the AI cost for your account per day, and when an account is made, a hash of the network (IP) address it came from, deleted after a day. If you send feedback: your message and the screen you were on.

To see whether Centje helps: on which days you used the app and how many questions you asked the coach (not what you asked), and once a day a few results from the analysis: savings found and achieved, whether you stayed within your weekly allowance, and how much was left at the end of the month. People running Centje only see totals over everyone, and money totals only over at least five people, so no one can be recognised. This is kept for at most 400 days and is deleted with your account.

Why

To show your spending, find recurring costs and small leaks, send the notifications you choose, keep your data between your phones (and with your partner if you invite one), and answer your questions in the AI coach if you use it.

Legal basis: performing the agreement with you when you use the app (Article 6(1)(b) GDPR). Your bank asks for your explicit consent before it shares account data (PSD2). Preventing misuse, watching what the AI costs and measuring whether Centje helps are based on our legitimate interest (Article 6(1)(f) GDPR).

Bank connection

Read-only, through Enable Banking Oy (Finland), a licensed account information service provider. Centje can never make payments. Your consent lasts at most 180 days; you can end it at any time in the app or with your bank.

When you have the app open, Centje passes your IP address and the kind of device or browser on to your bank when it fetches transactions, because the PSD2 rules ask for this.

AI coach

When you ask the coach something, a summary of your finances and the transactions it looks up are sent to Anthropic (Claude). Account numbers are left out and names of people you pay are replaced by a code. Anthropic does not use this data to train its models. Anthropic is based in the United States; the transfer is covered by the safeguards in its data processing terms, such as the EU standard contractual clauses.

Where your data is kept

In a database at Neon, on servers in Frankfurt, Germany. Your phone also keeps a copy. If you turn on notifications, the text of each notification goes through Expo’s push service (United States) to Apple.

Shop logos

To make shops easy to recognise, the server fetches logos from logo services (such as logo.dev and Wikidata) using the shop’s web address. Nothing about you is sent with it.

How long

As long as your account exists. "Verwijder al mijn gegevens" (Delete all my data) in Settings ends your bank connections and deletes everything right away; copies may stay in the hosting provider’s backups for a short time.

Sharing

Centje never sells your data and shows no ads. Only the providers named above process it, for the purposes above.

Security

Encrypted connections (HTTPS), device codes stored only as a hash, bank and AI keys only on the server, and an optional Face ID lock in the app.

Your rights

You can ask to see, correct, delete or restrict your data, object to its use, and take it with you (the app also exports your transactions as CSV). Email privacy@centje.io. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If this policy changes, the new version appears here with a new date. Important changes are also announced in the app.