Privacy Policy
This policy explains what Tensai Plan collects, why, who can see it and what you can do about it. It applies to tensaiplan.com and to the Tensai Plan application.
Who we are
Tensai Plan is operated by Víctor Méndez, based in Uruguay ("we", "us"). You can reach us at support@tensaiplan.com.
Tensai Plan is a personal finance application: you record income, expenses and transfers, alone or shared with the members of a project, and an assistant helps you enter and query them.
What we collect
Account data: your name, email address and, if you sign in with Google, the profile picture Google provides. Your password, when you use one, is stored only as a salted hash.
Your books: the projects, accounts, categories, budgets, recurring rules and transactions you or your project members enter, including descriptions, notes and merchant names.
Attachments: the receipt photos and files you attach to a transaction.
Assistant messages: what you type or say to the assistant, and the drafts it produces.
Technical data: your IP address and browser identifier, used for sign-in alerts and to limit abuse; the language and theme you choose; the time zone your browser reports.
Usage events: which screens and features you use (for example "first transaction created"), recorded in our own database to understand how the product is used.
How we use it
To provide the service: keeping your ledger, computing balances and reports, sending the emails you ask for (verification, invitations, password reset) and the ones that keep your account safe (a sign-in from a new device, a password change).
To run the assistant: your message, the receipt photo you attach and a snapshot of the relevant project (accounts, categories, recent totals) are sent to the model provider so it can answer.
To keep the service working and honest: rate limits, error logs and usage metrics.
We do not sell your data and we do not show advertising today. If either ever changes, this policy changes first and you will be told.
The assistant and AI processing
The assistant is powered by Claude models from Anthropic. Your content is sent to Anthropic solely to serve your request and is not used by us or, under our agreement with them, by Anthropic to train models.
Every draft the assistant produces is shown to you before it is saved. Nothing enters your books without your confirmation.
Assistant use is limited by weekly quotas. We count messages and photos to enforce them.
Who can see your data
The members of a project see that project’s books according to their role (Admin, Editor or Viewer), and the activity log records who created, edited or deleted what. You decide whom you invite; only the invited address can accept.
Service providers process data on our behalf, each bound by contract to process it only for us: hosting and database providers in the United States, a storage provider for attachments, an identity provider for Google sign-in, Anthropic for the assistant, an email delivery provider and, when enabled, a product-analytics provider. The full list is available on request at support@tensaiplan.com.
We disclose data to authorities only when the law requires it.
Cookies and local storage
We use a session cookie to keep you signed in, and our identity provider sets its own cookies when you sign in with Google. We store your language, theme and small interface preferences in your browser. There are no advertising or cross-site tracking cookies.
How long we keep it
Your data stays as long as your account exists. When you delete your account from Settings, the projects you own, their attachments and your memberships are deleted immediately, and the identity linked to your Google account is removed from our sign-in provider. Backups that still contain the data expire within 30 days.
Before deleting, you can export any project as CSV from its settings.
Security
Data travels over TLS and is encrypted at rest by our providers. Attachments are served through short-lived signed URLs. Access to a project is checked on the server on every request, according to your role. Sign-in attempts are rate-limited, and you receive an email when your account is used from a new device.
Your rights
You can see and change your data in the app, export it, and delete your account yourself. Whatever your country, you may ask us for access, correction, portability or deletion by writing to support@tensaiplan.com. We answer within 30 days.
If you are in the European Economic Area or the United Kingdom, our legal bases are the performance of our contract with you and our legitimate interest in keeping the service secure and improving it. You may also complain to your local data protection authority.
Children
Tensai Plan is for people aged 13 and over. We do not knowingly collect data from younger children; if you believe a child has an account, write to us and we will delete it.
International transfers
Our providers store and process data mainly in the United States. By using the service you accept that your data is processed there under our agreements with those providers.
Changes
When this policy changes in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top is the date of the current version.