Privacy Policy

Last updated: 28 September 2026

OpheliaHub is a personal and family finance management application. This policy explains what data the app handles and how it is used.

Who this applies to

OpheliaHub is operated privately for the use of its account holders and their household members. It is not a public service and does not sell access to third parties.

Data we process

• Account profile information from your sign-in provider (name, email, profile image).
• Financial data you enter or import: accounts, transactions, balances, categories, budgets, tags, and investment holdings.
• Bank account information you choose to connect via PSD2 open banking (account details and transaction history), retrieved on your behalf through a licensed account-information service provider.

How bank connections work

When you connect a bank, you authorize access directly with your bank. OpheliaHub never sees or stores your bank login credentials. Account access is performed through Enable Banking (a licensed AISP) using read-only Account Information Services (AIS); OpheliaHub does not initiate payments. You can disconnect a bank at any time, and bank consent expires automatically and must be renewed periodically as required by law.

How your data is used

Your data is used solely to provide the app's features to you — displaying balances, categorizing transactions, tracking budgets and net worth, and importing transactions. Data is shared only between members of your own household where you have enabled shared accounts. It is not sold or shared with advertisers or other third parties.

Storage and retention

Data is stored in a private database and retained while your account is active. You can delete transactions, disconnect banks, or delete your account, which removes your associated data.

Analytics and cookies

With your permission, OpheliaHub uses Google Analytics to count visits and see which pages are used. Nothing from Google loads until you click Accept in the cookie banner. It receives only the kind of page you opened — with record identifiers and search terms removed — and never your financial data, names, account names or email. Advertising features and Google signals are turned off. If you accept, Google Analytics sets first-party cookies named _ga and _ga_*.

We also use Vercel Web Analytics, which sets no cookies and counts page views without identifying you.

We also use Cloudflare Web Analytics, which counts visits without cookies or personal identifiers — only which pages are viewed and how many times — so it needs no consent.

You can change or withdraw your choice at any time; withdrawing stops Google Analytics and deletes its cookies from this browser. Cookie settings

Your choices

• Disconnect any bank connection at any time from Settings.
• Delete individual records or your entire account.
• Contact the operator for any data request.

Contact

For privacy questions, contact the account operator at roberto.b.a.aragao@gmail.com.