🔒

Privacy Policy

Last updated: March 30, 2026

1. Our Privacy Commitment

ExoFlow is built with privacy as a core principle. As a private and secure personal finance tracker, we believe your financial data is deeply personal and should remain entirely under your control.

✅
Zero Data Sharing

We do not collect, store, transmit, or sell any of your personal or financial data. Period.

2. What Data You Enter

When using ExoFlow, you may enter the following types of information:

👤

Account Information

Name, email, and password for authentication.

🏦

Financial Accounts

Account names, types, and balances.

💳

Transactions

Income, expenses, and transfers with amounts, dates, and categories.

🔔

Reminders

Payment and receivable reminders with due dates and amounts.

3. How Your Data is Stored

All data is securely stored in a Cloudflare D1 database. This means:

  • Your data is synced reliably and rapidly through Cloudflare's edge network
  • Passwords are securely hashed on the server and never stored in plain text
  • Your sensitive data is protected using enterprise-grade infrastructure
  • You can request account deletion to permanently remove your data
💡
Data Portability

You have full control to export your data using the Import/Export feature to create your own offline backups whenever you need.

4. Third-Party Sharing

🚫
We Never Sell Your Data

ExoFlow does not share, sell, rent, or trade your personal data to any third parties or advertisers.

Specifically, we do NOT:

  • Sell your data to advertisers or data brokers
  • Share information with analytics companies
  • Provide data to any government or corporate entities
  • Use your data for marketing or profiling purposes
  • Integrate with any third-party tracking services

5. Cookies & Tracking

ExoFlow uses only essential browser mechanisms for application functionality:

  • Cookies: Used strictly to securely maintain your HttpOnly login session
  • Cloudflare Infrastructure: Used for secure data transfer and storage operations

We do not use:

  • Tracking cookies or advertising pixels
  • Analytics tools (Google Analytics, etc.)
  • Social media trackers or fingerprinting techniques

6. Data Security

Security measures implemented in ExoFlow:

🔐

Password Hashing

Passwords are cryptographically hashed on the server.

☁️

Encrypted Transit

All data transfer is secured using SSL/TLS.

🔍

Proprietary Audits

Code is privately audited to ensure the highest security.

🧱

Data Isolation

Multi-user data is isolated at the database level.

7. Your Rights

You maintain full control over your financial data at all times:

  • Access: View all your data directly within the application
  • Export: Download all your data anytime via JSON/CSV export
  • Delete: Remove individual records or delete accounts completely
  • Modification: Edit or update any record at any time

8. Children's Privacy

ExoFlow is not specifically designed for children under the age of 13. We do not knowingly collect information from children. If you are under 13, please use this application under the supervision of a parent or guardian.

9. Privacy Transparency

Our privacy practices are fully documented and transparent:

  • All database operations are tightly scoped to the authenticated user
  • You can request a full summary of your stored details at any time
  • We adhere strictly to all documented data retention limits

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Since ExoFlow is proprietary, all changes to the privacy policy are tracked in the project's version history.

By using ExoFlow, you acknowledge that you have read and understood this Privacy Policy. Your privacy matters — and with ExoFlow, it's always protected.