Fintir turns your spending into personalized intelligence — rewards, insights and offers made for you. That only works if you can trust us with your data. So here's the deal, in plain language: we use your data to give you value, and we never sell it. Ever.
We do not, and will not, sell your personal data — to advertisers, data brokers, anyone. There is no version of Fintir where your data is the product.
We use your data for one purpose: to give you tangible value — rewards, insights and offers tailored to how you actually live.
We make money from brand partnerships and at-cost banking fees — never by monetising your data or your balance.
You can see what we hold, correct it, export it, or ask us to delete it — and turn personalization off — at any time.
Fintir is operated by [Fintir legal entity name, company number and registered address] ("Fintir", "we", "us"). For everything in this notice, we are the data controller. Fintir provides banking through a licensed European e-money institution (EMI) partner, [EMI partner name], which safeguards your funds under EU e-money regulations.
To run a regulated account and to personalize it for you, we collect:
Where the law requires your consent (for example, certain personalization or location use), we ask for it and you can withdraw it at any time. Our legal bases are set out in full in the [legal bases table — to be finalised with counsel].
This is the important part, because it's where most apps quietly sell you. Fintir doesn't. When a partner offers a reward, we match it to the right people using your data on your side of the fence. The partner funds the reward — but they never receive your name, your account, or your transactions.
At most, partners see aggregate, anonymised results — for example, how many people redeemed an offer — never anything that identifies you. The intelligence stays with you and us; the money comes from the partner.
We share only what's necessary, only with:
Not advertisers. Not data brokers. Not the reward partners. That list is the whole list.
Under the GDPR you can, at any time:
To exercise any of these, email privacy@fintir.io.
Your data is encrypted in transit and at rest, access is tightly limited, and sensitive card details are handled under PCI-DSS controls — we store only what we need. Your funds are safeguarded by our EMI partner under EU regulations, separate from our own money.
We keep your data for as long as you're a customer, and afterwards only as long as the law requires (regulated financial records must be retained for [retention period, typically 5–7 years]). After that, we delete or anonymise it.
If we change this notice we'll update the date above and, for anything material, tell you directly. Questions, requests, or anything privacy-related: privacy@fintir.io, or write to [Fintir registered address].