Privacy Policy

Last updated: October 2, 2026

This policy explains what information Finitu ("Finitu," "we," "us") collects when you use finitu.app and the Finitu mobile apps, how we use it, who can see it, and the choices you have. Finitu is a US company and this policy is written for people in the United States.

The Short Version

  • We collect what we need to run Finitu for your team: your account, your tasks, and your time entries.
  • GPS location and QR codes are optional. Finitu works without them.
  • When location is used, it is attached to check-ins on tasks to show where work happened. It is recorded only while someone is checked in, never all day.
  • Location is not used for payroll, and we do not sell your information or use it for advertising.
  • Your data is visible to you and the admins on your account, not to other Finitu customers.

Information We Collect

Account information

Your name, email address, password (stored in hashed form), and, for account owners, company details such as company name, address, and phone number. If you turn on two-factor authentication, we store the settings needed to verify your sign-ins.

Work content

Everything your team puts into Finitu: tasks, projects, checklists, comments, messages, notes, photos, and locations you set up, along with who created, assigned, and completed each item.

Time entries

When someone checks in or starts a timer, we record the check-in and check-out times, the task or location it belongs to, how the check-in happened (button or QR scan), and any notes.

Location information

If location is allowed on the device, we record GPS coordinates and the accuracy reported by the device when a person checks in and checks out. If the account has location tracking turned on, we also record location about every 30 seconds while that check-in is active, and we stop when the person checks out. If location is off or unavailable, the check-in is saved without coordinates. See How Location Works below.

Usage and device information

We record how Finitu is used, such as pages viewed, features used, and session times, along with basic device information like browser, operating system, and screen size. We use this to keep Finitu working and to improve it. We also keep technical logs of errors and sign-in activity for security.

Payment information

Payments are processed by Stripe. We receive your subscription status and billing details from Stripe, but we do not store full card numbers.

Notifications

If you allow push notifications, we store the device token needed to deliver them.

How Location Works

Location in Finitu is tied to work, not to people's whole day. It exists so a team can see where and when a task was done.

  • Optional. GPS and QR codes are both optional. A person can deny location permission on their phone and still check in; the entry is saved without coordinates.
  • Only while checked in. Location is recorded at check-in and check-out. Ongoing location is recorded only while a check-in is active, and only if the account has that setting turned on. It stops at check-out.
  • Admin controls. Account admins can turn ongoing location tracking off for the whole account.
  • Not for payroll or monitoring. Finitu records location to show where work happened on tasks. It does not calculate pay, and we do not use location for advertising.

If your organization uses Finitu's location features, your organization decides how they are used and is responsible for telling its team members about them.

Who Can See Your Information

  • You can see your own time entries and location records.
  • Admins on your account can see time entries and location records for everyone on that account, along with the account's tasks, projects, and checklists.
  • Other people on your account can see the tasks, projects, and messages they have access to based on their role and permissions.
  • No one outside your account, including other Finitu customers, can see your account's data.
  • Finitu staff access account data only when needed to provide support, keep the service secure, or meet legal obligations.

How We Use Information

  • To provide Finitu: show your tasks, record time, send notifications, and generate reports.
  • To send account emails such as verification, password resets, and billing notices.
  • To keep accounts secure, prevent abuse, and fix problems.
  • To understand how Finitu is used so we can improve it.
  • To meet legal obligations.

We do not sell personal information, and we do not share it for targeted advertising.

Service Providers

We use these providers to run Finitu. They process information on our behalf only to provide their services:

  • Supabase: database, sign-in, and file storage
  • Vercel: website hosting and performance measurement
  • Stripe: payment processing
  • Email delivery providers: account and notification emails
  • Firebase Cloud Messaging: push notifications
  • OpenStreetMap: maps and address search when you set up locations

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy would continue to apply.

How Long We Keep Information

We keep your information for as long as your account is active. When a user is removed from an account, their personal information is deleted. When an account is deleted, its data is deleted, including tasks, time entries, and location records. Copies in backups and logs may remain for a limited time before they are overwritten. We may keep billing records longer where the law requires it.

Your Choices

  • Turn off location permission for Finitu in your phone or browser settings at any time.
  • Turn off push notifications in your device settings.
  • Update your name and email in your Finitu settings.
  • Ask your account admin to remove you from an account, or ask us to delete your information.
  • Account owners can delete the account and its data.

Your State Privacy Rights

Depending on where you live, state laws such as the California Consumer Privacy Act may give you the right to know what personal information we hold about you, to get a copy of it, to correct it, and to have it deleted. To make a request, email support@finitu.app. We will verify your request and will not treat you differently for using these rights. If your information is part of an organization's Finitu account, we may refer your request to that organization.

Security

We protect information with encryption in transit, access controls that keep each account's data separate, hashed passwords, and optional two-factor authentication. No system is perfectly secure, so please use a strong password and keep it private.

Children

Finitu is a business tool and is not directed to children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

If we make material changes, we will update the date at the top of this page and, where appropriate, let account owners know by email or in the app.

Contact Us

Questions about this policy or your information? Email support@finitu.app or visit our contact page.