Privacy Policy

Privacy Policy

Effective date: September 18, 2026

SikaNomics ("we," "us," or "our"), operated by MikeSoft Studio, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the SikaNomics web application and related services (the "Service").

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service. This policy should be read together with our Terms of Service.

1. Information We Collect

We collect the following categories of information:

a) Account Information

When you register, we collect your email address, display name, and profile photo (if provided via Google Sign-In). If you sign up with email and password, we store your hashed credentials through our authentication provider.

b) Financial Data You Provide

This includes transaction records (amounts, descriptions, categories, dates, type), financial goals (target amounts, deadlines, contributions), and preferred currency. This data is entered voluntarily by you and is essential to the core functionality of the Service.

c) Usage Data

We may automatically collect technical information such as browser type, device type, operating system, IP address, pages visited, and timestamps. This data is used for analytics, performance monitoring, and improving the Service.

d) Cookies & Local Storage

The Service may use cookies, local storage, or similar technologies to maintain your session, remember preferences (such as theme and currency), and support authentication. We do not use third-party advertising cookies.

e) Notification Data

If you enable notifications, we collect your notification preferences and the contact details needed to deliver them (your email address). We also keep a log of the notifications we send you so you can review them in your notification inbox.

g) Engagement & Habit Data

To show your streak, milestones and achievements, we record which days you took a meaningful action in your money — for example logging a transaction, setting a budget, contributing to a goal, updating a debt, or importing a statement. We store the dates of those actions, your current and longest run, any grace days used, and which achievements you have earned. Simply opening the app is not treated as an action and does not advance a streak; we do keep a record of the last time you opened the app, which is used only to avoid nudging you about something you have just done.

h) Notification Preferences

Alongside your email address, we store the notification settings you choose: which categories you receive, the times you want to hear from us, your timezone, and any quiet hours you set. These are used to decide what to send and when. Turning off all notifications means we send none of the optional categories; sign-in and account-security alerts are treated separately and are described below.

i) Bank Statement Imports

If you use statement import, the statement file or pasted text is read entirely within your browser and is never transmitted to us or to any third party. It is not stored on our servers at any point. We do not request, and cannot access, your bank credentials, and we have no ability to reach or move money in your account. The only data our servers receive from an import are the individual transactions you review and approve, together with a count-only record of the import — the number of rows imported, skipped, and the date range covered, plus the statement name you chose and whether you have undone it. That record contains no statement content, no account number, and no balances. Keeping it lets you undo an import in one step and see a clear history of what you have done, and it is removed when you delete your account.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • to provide, operate, and maintain the Service, including authentication, transaction tracking, statement import, goal management, and financial analytics;
  • to personalize your experience, such as displaying your preferred currency and theme;
  • to generate aggregated insights and analytics from your financial data (visible only to you);
  • to communicate with you about service-related matters, including security alerts and the notifications you choose to receive (via email). Money and security problems, and genuine milestones, are sent when they happen; lower-priority updates are gathered into one daily summary so you are not emailed repeatedly about small things. You can set a daily limit, quiet hours, and per-category switches in your notification settings. A few alerts are deliberately grouped rather than sent one per occurrence — large transactions and automated recurring bills produce at most one email a day however many there were, and an alert about the same goal completing is sent once. In addition to the limit you choose, we cap all email from SikaNomics at a fixed maximum per day regardless of settings, so a fault on our side cannot flood your inbox. Anything held back by a limit is still recorded and visible in the app;
  • to detect, prevent, and address technical issues, fraud, and security threats;
  • to comply with legal obligations and enforce our Terms of Service.

We do not use your personal financial data for advertising, marketing to third parties, or profiling purposes.

3. Legal Basis for Processing

Where applicable data-protection laws require a lawful basis for processing (such as the General Data Protection Regulation), we rely on the following:

  • Consent — you provide consent by creating an account and using the Service;
  • Contractual necessity — processing is necessary to deliver the Service under our Terms;
  • Legitimate interests — we process usage data to improve, secure, and monitor the Service.

4. Data Storage & Security

Your data is stored using secure cloud infrastructure that provides encryption at rest and in transit. While we implement reasonable administrative, technical, and physical safeguards to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account remains active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal data within a reasonable timeframe, unless retention is required by law. You can delete your account and its data at any time directly from your profile page.

Deleting your account removes your transactions, budgets, goals, goal contributions, debts, recurring transactions, statement import records, notifications, habit and streak data, achievements, and notification preferences. Where we are required to retain something — for example invoices or records required by law — we will keep only what is necessary for that purpose and will restrict how it is used.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

  • Service providers — with third-party vendors who assist in operating the Service (for example, Google Cloud/Firebase for hosting, storage, and authentication, and our email delivery provider). These providers are bound by their own privacy and security obligations;
  • Legal compliance — when required by law, regulation, legal process, or governmental request;
  • Protection of rights — to enforce our Terms, protect our rights or safety, or investigate potential violations;
  • Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, and you will be notified of any changes.

We do not sell, share, or license your financial data to banks, credit bureaus, data brokers, or advertising networks. Because statement files never leave your device, no bank or statement provider ever processes data on our behalf.

6. International Data Transfers

Your data may be processed and stored in jurisdictions outside your country of residence, including the United States, where Google's infrastructure is located. By using the Service, you consent to such transfers. Where required, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in accordance with applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you;
  • Correction — request correction of inaccurate or incomplete data;
  • Erasure of an import — undo a bank statement import to remove the transactions it created in one step. Rows you have edited since importing are kept rather than deleted, so your correction is not lost, and we tell you how many were kept;
  • Deletion — request deletion of your personal data ("right to be forgotten");
  • Portability — request your data in a structured, machine-readable format;
  • Restriction — request that we limit processing of your data in certain circumstances;
  • Objection — object to processing based on legitimate interests;
  • Withdraw consent — withdraw consent at any time where processing is based on consent (this does not affect prior lawful processing);
  • Stop non-essential email — unsubscribe from email at any time, without affecting the rest of the Service.

How to stop our emails. Every email we send includes an unsubscribe link in the footer, and an unsubscribe link in the email header where your mail client supports one — using that header link stops future sends with a single click and no sign-in. If you would rather choose what you hear about, your notification settings let you switch off individual categories, set quiet hours, and choose a daily limit. Turning off all notifications also turns off the optional money reminders and summaries. Account-security sign-in alerts are treated separately: we send those because a sign-in you did not make is worth knowing about, and you can turn them off in the same place.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within the timeframes required by applicable law.

8. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take reasonable steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us.

9. Third-Party Links & Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective date" at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, email us at mikesoftstudio@gmail.com. You can also use the contact form on our website.

If you are located in the European Economic Area and believe your data-protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

Back to home