Privacy policy

1. Who is responsible

Metrosion Inc., a Delaware corporation ("Metrosion," "we," "us" or "our"), owns and operates the PonderFi website, mobile applications and related services. This policy covers information we process in connection with those services, including early-access and support conversations.

For privacy questions or requests, contact support@ponderfi.com. Where applicable data-protection law uses the term, Metrosion is the controller of personal information described in this policy.

2. Information we process

Category	Examples and source
Account and session information	Email address and display name you provide; account identifiers, verification requests, session records and sign-in status created when you use the service.
Financial records and uploads	Account names, income, expenses, categories, amounts, dates, notes, budgets, debt and repayment records, and receipt photos you enter or upload.
Sharing information	Account membership, sharing settings and records contributed to a shared account. Other users may provide information about a transaction involving you.
Technical and notification information	IP addresses and request or error information processed by our service or hosting infrastructure; device push tokens and notification settings when used.
Communications	Your email address, messages and any device details or attachments you choose to send for support, feedback or early access.

You do not need to connect a bank to use PonderFi. We do not request your bank-login credentials. Do not put passwords, verification codes, government identifiers, full payment-card details or unrelated sensitive information in transaction notes or uploads.

You may be able to use a guest session without providing an email address. Guest mode still uses server-side identifiers and records; it is not an offline or untraceable mode. Signing out can remove your access to guest records, and some underlying records may remain as described below.

3. Why we use information

• Provide authentication, account access, financial records, uploads, synchronization and shared-account functionality.
• Calculate balances, budget progress and analytics from the records entered into the service.
• Deliver sign-in messages and optional service or account-activity notifications.
• Answer questions, handle early-access requests and improve the service using feedback and operational information.
• Protect users and the service, investigate errors and abuse, comply with legal obligations and establish or defend legal claims.

We do not sell or rent personal information, disclose it for cross-context behavioral advertising, or use financial records to train general-purpose AI models. PonderFi does not use third-party advertising or behavioral analytics SDKs in the mobile app.

Where a legal basis is required, we rely on performance of our contract with you for core service functions; legitimate interests for proportionate security, support and service administration; legal obligations where applicable; and consent where required for optional processing. You can withdraw consent for future optional processing without affecting earlier lawful processing.

4. Shared accounts and other disclosures

Sharing you choose. An enabled share link can let another user join the selected account. Members can access that account's records and contribute supported activity. Account owners can review membership and remove access. Keep links private and share only with people you trust. A shared account does not give members access to your other personal accounts.

Shared records can include personal details in names, notes and attachments. Account owner or member information, such as an email address, may also be visible through sharing features. Activity notifications may include account names or activity details and may appear on a device's lock screen depending on settings. Removing access cannot recall information someone has already copied, downloaded or received in a notification.

Service providers. We use DigitalOcean infrastructure in the United States to host the service and its data. Other necessary providers may process information to deliver email, push notifications, support communications or website hosting. For example, push delivery may involve Expo, Apple or Google depending on your device and configuration. We share information needed for the relevant service, subject to applicable contractual and legal requirements.

Legal and business reasons. We may disclose information when required by law, to respond to valid legal process, protect rights or safety, investigate abuse, or in connection with a merger, financing, acquisition or transfer of the business. We apply applicable confidentiality and data-protection requirements and give notice where required. We may also disclose information at your direction.

5. Retention, removal and deletion

We retain personal information as needed for the purposes in this policy, taking account of whether you use the service, the nature of the record, security needs, legal obligations and the need to resolve disputes. We do not promise that every category follows the same retention period.

In-app removal and account closure. Some PonderFi operations mark records as deleted or remove them from active views rather than immediately erasing the underlying database records. Deleting an account or transaction does not by itself guarantee that related attachments, historical records or backups have been permanently erased.

To request deletion of personal information or closure of your user profile, email support@ponderfi.com. We verify the request and handle it within the time required by applicable law, explaining any lawful exception or necessary extension. We do not represent that in-app removal alone completes a legal erasure request.

Copies may remain in backups, security records or legal records for a limited period where necessary or permitted by law. Records contributed to another person's shared account may also need separate review, including consideration of other users' rights. We will explain applicable limitations in responding to your request. Uninstalling the app does not close your account or erase server-side records.

6. Security and international processing

We use technical and organizational measures intended to protect information against unauthorized access, loss and misuse. No service can guarantee absolute security. Keep control of your email account and devices, protect sign-in codes, and review shared-account membership.

Service data is hosted on DigitalOcean infrastructure in the United States. Support, communications and delivery providers may also process information where they operate. If you access PonderFi from another country, your information may be processed outside your country, where laws may differ. We apply safeguards required by applicable law to covered international transfers. Contact us to ask about safeguards relevant to your information.

7. Your choices and rights

• Review and update supported information and sharing settings in the app.
• Manage camera, photo and notification permissions in device settings. Refusing optional permissions may limit the related feature.
• Leave a shared account or, as an owner, manage members. Previously copied information cannot be recalled.
• Contact us to request access, correction, deletion, account closure or a copy of your information.

Depending on your location and applicable law, you may have rights to know or access information; correct it; delete it; obtain a portable copy; restrict or object to certain processing; withdraw consent; use an authorized agent; appeal a decision; and complain to a data-protection authority. These rights may be subject to lawful limits. We do not discriminate against you for exercising applicable privacy rights.

For California residents, the categories collected and disclosed for business purposes are described above. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics for advertising. Rights under California law apply where the relevant law covers the business and the processing.

Send requests to support@ponderfi.com. We may ask for information reasonably needed to verify identity or an agent's authority. Please do not send identity documents or sign-in codes in an initial email.

8. Website, device storage and third parties

Our marketing-site code does not set advertising cookies or include advertising pixels or third-party analytics scripts. Hosting and access services may process request information and use necessary authentication or security storage. The app uses local and secure device storage for session information and preferences; some cached information may remain until the app or device clears it.

We do not use browser Do Not Track signals to change processing because the service does not use cross-site advertising tracking. Where applicable law requires recognition of a privacy preference signal, we honor that requirement.

Camera or photo-library access is used for features you choose, such as attaching a receipt. We do not ask for contacts or calendar access for finance tracking. Third-party services you choose to use, including your email provider or an app store, have their own privacy practices.

9. Children

PonderFi is not directed to children under 13 and is not intended for users below the age needed to enter a valid agreement in their location unless a parent or guardian provides any legally required authorization. We do not knowingly collect personal information from children under 13. If you believe a child has provided information in violation of these requirements, contact us so we can investigate and take appropriate action.

10. Policy changes and contact

We may update this policy as the service or legal requirements change. We will revise the date above and provide additional notice or obtain consent for material changes when required. An update does not replace any consent that applicable law requires.

Privacy questions, complaints and requests can be sent to Metrosion Inc. at support@ponderfi.com. You can also use the privacy request instructions on our contact page.