Privacy

Fi.Art | Last updated: October 17, 2026

Local storage

All your financial data is stored exclusively locally on your device in a SQLite database. There is no server, cloud storage or external database your data is sent to. The developer has no access to your data at any time.

Backups and exports only leave the device if you explicitly save or share them.

Internet sources

Fi.Art connects to the following external sources for non-personal reference data:

Frankfurter API (api.frankfurter.app): exchange rates based on ECB data
Open Exchange Rates via fawazahmed0 (cdn.jsdelivr.net): additional exchange rates
World Bank API (api.worldbank.org): historical inflation indices (CPI)
Statbel (bestat.statbel.fgov.be): Belgian consumer price index
fi-art.app: once a day a public version file, to tell you when a new version of Fi.Art is available
App Store / Google Play: purchases and the trial go through the store of your device; Fi.Art receives no payment details

No personal information is sent with these requests. Only public exchange rates, inflation indices and the version file are fetched.

Bank integration (optional)

If you choose to fetch bank transactions automatically, you use Enable Banking: a European open banking platform that complies with all EU regulations (PSD2). Enable Banking does not store your transaction data and does not sell it on.

You provide your own API key (BYOK = Bring Your Own Key). The developer of Fi.Art has no access to your bank data and does not act as an intermediary.

More information about Enable Banking:

Data protection (GDPR)

Although Fi.Art does not send data to an external server, it does process personal and financial data on your device. Below is a transparent explanation of how this relates to the General Data Protection Regulation (GDPR).

Data controller

The developer of Fi.Art does not act as the data controller for your data. You are the sole data controller yourself: you enter data, manage it and decide what happens to it. Fi.Art acts purely as a local tool, comparable to a spreadsheet on your own computer.

Legal basis

The processing is based on your explicit consent and your own action (Art. 6(1)(a) GDPR). You enter data, import files or activate bank integration yourself, always on your own initiative. Because all data stays local and the developer has no access, there is no processing by third parties that would require a data processing agreement.

Categories of personal data

Fi.Art can process the following categories of data, depending on what you enter yourself:

Financial data: transactions, amounts, account numbers (IBAN), balances
Identification data: names of counterparties, your own name (optional in the profile)
Categorisation data: categories, tags and notes you assign
Bank descriptions: original transaction descriptions from CSV import or bank integration
Profile data: age, retirement age, FIRE goals (optional)

No special categories of personal data (health, ethnicity, biometrics, etc.) are processed.

Data subjects

The data relates exclusively to:

Yourself as the user of Fi.Art
Counterparties of your transactions (names of companies or people appearing on bank statements)

Fi.Art is designed for individual use. No data of minors is processed unless a parent/guardian uses Fi.Art themselves and enters transactions.

Purposes of processing

Your data is processed exclusively for the following purposes:

Providing insight into your personal finances (expenses, income, balance)
Categorisation and analysis of transactions
FIRE calculations and retirement planning
Currency conversions and inflation corrections
Travel cost management and splitting

Data is never used for profiling, advertising, marketing or resale.

Technical and organisational measures

The following measures protect your data:

Local storage: all data stays on the device in a SQLite database (no cloud, no server)
No network transmission of personal data: only anonymous API requests for exchange rates/inflation and the daily public version file
No analytics or tracking: Fi.Art contains no trackers, no Firebase Analytics, no crash reporting to third parties
No accounts or registration: no login, email or password is required
OS security: the database resides in the secure app sandbox of iOS/Android
BYOK principle for bank integration: your own API key, not shared with the developer
Open banking standards: Enable Banking is PSD2-certified and does not store transaction data

The developer has no technical means to view, copy or modify your data.

Retention periods

Your data is kept as long as you use Fi.Art. If you delete Fi.Art, the database is permanently removed by the operating system. There is no external copy.

Backups you export yourself are your own responsibility. The developer has no access to them.

Rights of data subjects

Because all data is stored locally on your device and the developer has no access, you exercise your GDPR rights as follows:

Right of access: open Fi.Art and all data is immediately visible
Right to rectification: edit transactions, categories or profile data directly in Fi.Art
Right to erasure: delete individual items or the entire database via Settings > Database
Right to data portability: export your full database as a SQLite file or CSV
Right to restriction: you decide yourself which data you enter and which features you use

No request to the developer is needed to exercise these rights. You have full self-control over your own data.