Privacy and personal data policy
In force since October 6, 2026. This is a translation; the Spanish version governs.
Your finances stay on your device. Quincena has no server holding your accounts or transactions, shows no ads, and does not sell or share your data for analytics.
1. Who is responsible
DL SOFT TECHNOLOGIES SAS, a Colombian company with tax ID (NIT) 902024441-0, based in Bucaramanga, is responsible for the personal data the Quincena app handles, under Colombia's Law 1581 of 2012 and Decree 1074 of 2015. Its address is Carrera 28 # 54-28, Bucaramanga, Santander, Colombia, and its phone number is +57 316 605 0934. For any question, claim or request about your data, write to admin@dlsoft.dev.
2. What data the app handles and where it stays
| Data | Where it stays | Who else receives it |
|---|---|---|
| Your name, how you get paid, your accounts, transactions, categories, goals, budgets and what you import from statements. | Only on your device, in a local database. | No one. |
| The notifications that reach your phone, such as those from your bank and wallet apps and your texts, if you allow access on Android; Apple Pay payments and screenshots you choose to read. | On your device. The text is read there; only notifications with an amount and its currency are kept, and security codes are discarded. | No one. |
| Your phone's precise location, if you turn on "Use where the payment happened" (it comes off). Quincena collects location data to suggest the shop of a payment, even when the app is closed or not in use: it only looks at it when a payment notification arrives. | On your device. | Only the coordinates go to Photon (OpenStreetMap, run by Komoot) to find the nearby shop: nothing else, and to no one else. |
| Your questions to Gemini and the figures the app works out to answer them. | Not kept on any Quincena server. | Google, through Firebase AI Logic and Gemini on Google Cloud's Agent Platform. Google does not use them to train its models; it only keeps them for up to 90 days if a safety system flags them as possible abuse. |
| A statement you ask Gemini to read. | On your device. | Google, on the same terms as questions, only when you ask. |
| A Gemini answer you choose to report: your question, the answer with its figures, the reason and anything you write. | In Cloud Firestore, DL SOFT's Firebase database, without your name or any identifier of yours. It is deleted after 90 days. | DL SOFT, which reviews it. Google stores it as Firebase's provider. |
| An anonymous identifier and the app's verification. | On your device. | Firebase Authentication (an anonymous account, deleted after 30 days) and Firebase App Check, which uses Apple's App Attest and DeviceCheck, Google's Play Integrity, or reCAPTCHA Enterprise on the web to check that questions and reports come from Quincena. |
| Your read-only Binance key, if you connect your account. | In your device's keychain, never in the database or in what you export. | Binance, which receives the signed requests straight from your device. |
| A sync file, if you use Quincena on more than one device. | Wherever you save or send it. It is end-to-end encrypted with a code only your devices have. | No one else can read it. Whoever stores or carries it, such as iCloud or the chat you use, sees only an encrypted file. Quincena does not receive it. |
| A backup you export. | Wherever you save it. It is encrypted with your backup code, unless you choose the unencrypted file. | Encrypted, no one else can read it. Quincena does not receive it. |
| The home screen widget's figure, if you add it: what you can spend and until when. | On your device, in the space the app shares with its widget. If you hide amounts, the figure is not kept there. | No one. |
| Public addresses of wallets you choose to follow. | On your device. | mempool.space, a public Ethereum node (PublicNode) and TronGrid, which see the address looked up. |
| Prices and exchange rates. | On your device. | Binance, datos.gov.co and Frankfurter only receive which currencies are asked for, never how much you hold. |
3. What it is used for
- Showing your accounts, transactions, balances and projections, and recording what you capture or import.
- Answering the questions you ask Gemini.
- Reviewing the Gemini answers you report, to correct them and filter the ones that follow.
- Checking that requests to Gemini and reports come from the app, and limiting abuse.
- Reading prices, rates and balances from the sources you connect.
Quincena does not use your data for advertising, commercial profiles or analytics, and does not sell it.
4. Your rights
You have the right to know, update and correct your data; to ask for proof of your authorization; to be told how it is used; to revoke the authorization and ask for it to be deleted; to access it free of charge; and to file complaints with Colombia's Superintendence of Industry and Commerce.
Since your financial data is on your device, you can exercise most of these rights in the app itself: see and correct any transaction, export everything to a file, turn off each optional feature, disconnect Binance and delete everything from Settings. For anything else, write to admin@dlsoft.dev. Questions are answered within ten business days and claims within fifteen, as the law requires.
5. Authorization
By using Quincena you authorize the handling described here. Each optional feature asks for your permission separately before it turns on: notifications, location, Gemini, Binance, wallets and syncing between your devices. Before your phone asks to let the app read your notifications or use your location, the app tells you what data it uses, what for, when and where it goes, and only goes on if you tap "Accept". You can turn it off at any time. A report about an answer leaves only when you send it.
6. Minors and sensitive data
Quincena is not directed at people under 18 and does not ask for sensitive data.
7. International transfers
Some of the providers above process data outside Colombia, mainly in the United States. They only receive what the table in section 2 shows, when you use the feature that needs them.
8. Security and retention
The app's data lives on your device and is protected by its own system; the Binance key, the sync code and the backup code are kept in the keychain; every connection, every sync file and every backup, unless you choose the unencrypted file, is encrypted. Data is kept until you delete it or uninstall the app. The anonymous Firebase account is deleted after 30 days, and reports about answers after 90.
9. Changes
If this policy changes, the new version is published on this same page with the date it takes effect.