Privacy Policy

Privacy Policy

Effective date: September 18, 2026

SikaNomics ("we," "us," or "our"), operated by MikeSoft Studio, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the SikaNomics web application and related services (the "Service").

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service. This policy should be read together with our Terms of Service.

1. Information We Collect

We collect the following categories of information:

a) Account Information

When you register, we collect your email address, display name, and profile photo (if provided via Google Sign-In). If you sign up with email and password, we store your hashed credentials through our authentication provider.

b) Financial Data You Provide

This includes transaction records (amounts, descriptions, categories, dates, type), financial goals (target amounts, deadlines, contributions), and preferred currency. This data is entered voluntarily by you and is essential to the core functionality of the Service.

c) Usage Data

We may automatically collect technical information such as browser type, device type, operating system, IP address, pages visited, and timestamps. This data is used for analytics, performance monitoring, and improving the Service.

d) Cookies & Local Storage

The Service may use cookies, local storage, or similar technologies to maintain your session, remember preferences (such as theme and currency), and support authentication. We do not use third-party advertising cookies.

e) Notification Data

If you enable notifications, we collect your notification preferences and the contact details needed to deliver them (your email address). We also keep a log of the notifications we send you so you can review them in your notification inbox.

f) Bank Statement Imports

If you use statement import, the statement file or pasted text is read entirely within your browser and is never transmitted to us or to any third party. It is not stored on our servers at any point. We do not request, and cannot access, your bank credentials, and we have no ability to reach or move money in your account. The only data our servers receive from an import are the individual transactions you review and approve, together with a count-only record of the import — the number of rows imported, skipped, and the date range covered, plus the statement name you chose and whether you have undone it. That record contains no statement content, no account number, and no balances. Keeping it lets you undo an import in one step and see a clear history of what you have done, and it is removed when you delete your account.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • to provide, operate, and maintain the Service, including authentication, transaction tracking, statement import, goal management, and financial analytics;
  • to personalize your experience, such as displaying your preferred currency and theme;
  • to generate aggregated insights and analytics from your financial data (visible only to you);
  • to communicate with you about service-related matters, including security alerts and the notifications you choose to receive (via email);
  • to detect, prevent, and address technical issues, fraud, and security threats;
  • to comply with legal obligations and enforce our Terms of Service.

We do not use your personal financial data for advertising, marketing to third parties, or profiling purposes.

Where applicable data-protection laws require a lawful basis for processing (such as the General Data Protection Regulation), we rely on the following:

  • Consent — you provide consent by creating an account and using the Service;
  • Contractual necessity — processing is necessary to deliver the Service under our Terms;
  • Legitimate interests — we process usage data to improve, secure, and monitor the Service.

4. Data Storage & Security

Your data is stored using secure cloud infrastructure that provides encryption at rest and in transit. While we implement reasonable administrative, technical, and physical safeguards to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account remains active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal data within a reasonable timeframe, unless retention is required by law. You can delete your account and its data at any time directly from your profile page.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

  • Service providers — with third-party vendors who assist in operating the Service (for example, Google Cloud/Firebase for hosting, storage, and authentication, and our email delivery provider). These providers are bound by their own privacy and security obligations;
  • Legal compliance — when required by law, regulation, legal process, or governmental request;
  • Protection of rights — to enforce our Terms, protect our rights or safety, or investigate potential violations;
  • Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, and you will be notified of any changes.

We do not sell, share, or license your financial data to banks, credit bureaus, data brokers, or advertising networks. Because statement files never leave your device, no bank or statement provider ever processes data on our behalf.

6. International Data Transfers

Your data may be processed and stored in jurisdictions outside your country of residence, including the United States, where Google's infrastructure is located. By using the Service, you consent to such transfers. Where required, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in accordance with applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you;
  • Correction — request correction of inaccurate or incomplete data;
  • Erasure of an import — undo a bank statement import to remove the transactions it created in one step. Rows you have edited since importing are kept rather than deleted, so your correction is not lost, and we tell you how many were kept;
  • Deletion — request deletion of your personal data ("right to be forgotten");
  • Portability — request your data in a structured, machine-readable format;
  • Restriction — request that we limit processing of your data in certain circumstances;
  • Objection — object to processing based on legitimate interests;
  • Withdraw consent — withdraw consent at any time where processing is based on consent (this does not affect prior lawful processing).

To exercise any of these rights, please contact us using the details in Section 11. We will respond within the timeframes required by applicable law.

8. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take reasonable steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us.

9. Third-Party Links & Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective date" at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, email us at mikesoftstudio@gmail.com. You can also use the contact form on our website.

If you are located in the European Economic Area and believe your data-protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.