Privacy Policy
Last updated: [date of publication]
1. Who we are
AMOne is operated by [operator legal name], [address], [country] ("we"). Contact for privacy questions: [privacy email].
2. What we collect
- Account data: email address, password (stored only as a secure hash by our authentication provider), name if you give one, country, time zone, currency and display preferences.
- Your financial records: everything you enter or import (accounts, cards, transactions, EMIs, investments, sadaqa, zakat, goals, notes). This is stored as your private workspace.
- Security data: sign-in and sign-out times, devices you use (browser and operating system name and a random device identifier), IP address recorded by the authentication service, and security events such as password changes.
- Files you upload (when this feature is enabled), stored in a private folder that only your account can access.
We do not buy data about you, and we do not use advertising or tracking cookies.
3. Why we use it (purposes and legal basis)
- To provide your account and the service you asked for (performance of our agreement with you).
- To keep your account secure, detect abuse and prevent fraud (legitimate interest / legal obligation).
- To send account emails you need: confirmation, password reset, security notices (performance of the agreement).
- Optional features that process data outside AMOne, such as an AI assistant, are used only after you switch them on and give consent; you can withdraw consent at any time.
4. Who can see your financial records
Only you. Your workspace is protected in the database by rules that only allow the signed-in owner to read or change it. AMOne's administrators can see account status, registration date, last sign-in and storage size, but the administration tools cannot read your financial records. People with direct infrastructure access (our hosting provider and our database administrators) are bound by confidentiality, and access is logged. We do not sell or share your financial records.
5. Service providers (processors)
- Database, authentication and file storage: Supabase Inc. (region: [region chosen at setup, e.g. EU (Frankfurt)]).
- Website hosting: [hosting provider, e.g. Netlify / Vercel / Cloudflare].
- Email delivery: [SMTP provider configured in Supabase].
- Market data shown in Stock Analysis comes from public sources; your holdings are not sent to them except the ticker symbols you look up.
Some providers may process data outside the UAE. Where required we use appropriate safeguards [to be confirmed with each provider's data processing agreement].
6. Storage on your device
AMOne keeps a copy of your workspace in your browser's storage (localStorage) so it works offline, and a session token so you stay signed in. These are not cookies for tracking. Signing out removes the copy from that device unless you choose to keep it. "Device unlock" uses your device's fingerprint, face or PIN; your biometric data never leaves your device and is never sent to us.
7. How long we keep data
- Your workspace: until you delete it or your account.
- Version history: the most recent 120 versions of your workspace.
- Security log: [24 months], then deleted.
- Backups: database backups are kept by our provider for [7 – 30] days; deleted data disappears from backups when they expire.
- After account deletion your data is removed from the live database immediately and from backups when they expire.
8. Your rights
You can access and download all your data (Security Centre → Download all my data), correct it in the app, delete your account yourself (Security Centre → Delete my account), withdraw consent for optional features, and object to or ask us to restrict processing. Contact [privacy email]. You may also complain to the UAE Data Office or your local data protection authority.
9. Security
Encrypted connections (HTTPS), hashed passwords, database row-level security for every table, session expiry, rate-limited sign-in, device management and optional device unlock. No system is perfectly secure; tell us at [security email] if you find a problem.
10. Children
AMOne is not intended for people under 18.
11. Changes
We will tell you about material changes by email or in the app before they apply.