1. Introduction
This Privacy Policy explains how Fundiva ("the App", "we", "us") collects, uses, stores and protects your information when you use the App to manage and track your savings, provident and pension funds. Fundiva is operated by ERezult (Erez Cohen), Israel. By using the App you agree to this policy.
2. What information we collect, and how
We collect only the information needed to run the App, and only in the following ways:
- Account details — your email address and sign-in credentials, provided by you when you create an account or sign in (including Sign in with Apple).
- Fund data — the information you enter manually or import about your savings, provident and pension funds: fund owner, financial institution, balances, contributions, returns and management fees.
- Report files — PDF files and photos of fund reports that you choose to upload from your device, share into the App, or capture with the camera, for the purpose of automatic data extraction (see section 4). A report may contain personal information such as your name, ID number, account or policy number, and financial figures.
- Group data — membership, roles and permissions in shared groups (for example family members or partners) that you create or join.
- Purchase status — whether you hold an active subscription, received from Apple's App Store. We never see your payment details.
We do not collect location data, contacts, advertising identifiers or browsing data, and we do not track you across other apps or websites.
3. How we use your information
Your information is used solely to operate the App: showing your balances and insights, syncing data between members of a group, extracting data from the reports you upload, providing customer support, and securing the service. We do not sell personal information, and we do not use it for advertising or profiling.
4. Processing by artificial intelligence (Google Gemini)
Nothing is sent to the AI service until you explicitly agree inside the App. Before the first report is processed, the App shows a consent screen that explains exactly what is sent and to whom, and asks you to tick a box and confirm. The box is never pre-ticked. If you decline, no data is sent and you can enter fund data manually instead.
- What is sent: the report file you chose to scan (the PDF or photo). The report may include personal information such as your name, ID number, account/policy number, and financial figures (balances, contributions, returns, fees). If you later correct values the AI extracted, the corrected field values (not the file again) may also be sent so that future extractions learn your report format.
- To whom: Google LLC, through the Google Gemini API, on Google's servers (which may be located outside Israel and the EU). The file passes through our secure backend (Supabase Edge Functions) and is forwarded to Google only after our server confirms that your consent is on record.
- Why: only to read the report and return structured fund data (institution, balances, contributions, returns and fees) so you do not have to type it yourself.
- How it is protected: the data is transmitted encrypted (TLS). Google processes it under the Gemini API Terms of Service and Google's data-processing commitments, which provide protection of your data equal to that described in this policy. Google does not use your reports to train its models and retains them only as long as needed to process the request.
- Retention on our side: the uploaded report file is stored in your account so you can review it, and is deleted when you delete the fund entry or your account.
- Withdrawing consent: you can withdraw your consent at any time in Settings → AI document-processing consent → Revoke consent. After withdrawal, no further reports are sent to Google; data already extracted remains in your account until you delete it.
5. Infrastructure and data storage
The App runs on Supabase (a managed PostgreSQL database, authentication and file storage service). Row-Level Security policies ensure that each user and group can access only their own data. Authentication is also handled by Supabase.
6. Third parties
We share limited information only with the service providers required to operate the App. Each of them is bound by contractual and technical commitments that provide the same or equal protection to your data as this policy:
- Supabase — database hosting, user authentication and file storage.
- Google (Gemini API) — processing of the fund reports you choose to scan, for automatic data extraction only, and only after your explicit consent (section 4).
- Apple — App distribution, in-app purchases and subscriptions through the App Store.
No other third party receives your personal information. We never share fund data with advertisers, data brokers or analytics networks.
7. Data retention and deletion
Your data is kept for as long as your account is active. You can delete your account and all data associated with it directly from the App at any time (Settings → Danger zone → Delete account). After deletion, personal data is removed from our active systems in accordance with our infrastructure providers' retention policies.
8. Your rights
You may request access to the data we hold about you, export it, correct inaccuracies, withdraw consent, or delete your account and all related data. Some of these actions are available directly in the App; for anything else, contact us with a detailed request.
9. Security
We apply reasonable, industry-standard safeguards — encrypted communication, row-level access control and secure authentication — to protect your data from unauthorised access, use or disclosure. No method of security is completely infallible.
10. Children
The App is not intended for use by anyone under 16, and we do not knowingly collect information from minors.
11. Changes to this policy
We may update this policy from time to time. Material changes will be published on this page with an updated date, and where the changes affect AI processing you will be asked to consent again in the App.
12. Contact
For questions, access or deletion requests, or any privacy matter, contact us: