Español
Privacy Policy
Last updated: November 3, 2026
Platifica is a personal finance app for tracking transactions, budgets, fixed expenses, debts, savings goals and net worth. It runs at app.platifica.com and as iPhone and Android apps. This policy explains what data it collects, why, who it’s shared with and how you can delete it. If this version and the Spanish version differ, the Spanish version prevails.
In short
- We only use your data to make the app work. We don’t sell it or use it for advertising.
- There are no ads, no third-party analytics and no cross-app tracking.
- We don’t connect to your bank accounts or ask for their passwords.
- You can delete your account and all your data in the app, under Settings → Delete account.
1. Who is responsible
Platifica is developed and operated by Mario Mantilla, in Colombia, who is the controller of your data. For any question or request about your data, write to soporte@platifica.com.
2. What data we collect
Account data
- Name and email address.
- Password. We only store a hash (bcrypt), never the plain password.
- Profile photo, if you choose to add one.
Financial data you record
Transactions (income and expenses), budgets, fixed expenses and their payments, debts and their payments, savings goals, assets and liabilities, categories, templates and your settings (currency, time zone, language and theme). You type or confirm this data yourself: Platifica doesn’t get it from your bank.
Automatic transaction capture (optional)
If you turn it on, Platifica receives transaction alerts from your banks and turns them into drafts that you confirm or discard:
- Android, notifications: the app reads the phone’s notifications and only sends those from banking apps (and other apps you add) that include an amount. For each one it sends the text, the app name and the time. Filtering happens on the phone: your chats, emails and other notifications never leave it. Before turning it on, the app explains this use and asks for your consent; you can turn it off at any time.
- iPhone, shortcut: the Shortcuts automation you set up sends the text of your banks’ alerts (SMS, notifications from their apps, from Wallet and from your email apps) that include an amount.
- Email: the emails from your banks that you forward to your personal Platifica address.
For each alert that is a transaction we store the original text and what is read from it (amount, merchant, date and suggested category). If an alert turns out not to be a transaction (a promotion, a verification code, a declined purchase), it is dropped on the spot and nothing is stored.
Assistant (optional)
The messages you type or dictate and the files you attach (for example, a photo of a receipt or a PDF statement). To answer, the assistant also uses a summary of your financial data in Platifica. Voice notes and attachments are not kept on our server after they’re processed, and the conversation history is stored only on your device.
Technical data
Our server logs the IP address, date and path of each request to keep the service secure and fix problems. On your device, the app stores your session (in the iOS Keychain or Android Keystore) and some preferences.
3. How we use it
- To provide the service: store your data, show your finances and calculate budgets, debt payoff plans and projections.
- To turn your banks’ alerts into draft transactions.
- To answer your questions in the assistant and record what you ask it to.
- To send service emails, such as the password reset link. We don’t send marketing emails.
- To protect the service and your account, for example against abusive sign-in attempts.
- To improve how bank alerts are read: we may review stored alert texts only to fix how they’re interpreted.
We don’t use your data for advertising or to build commercial profiles, and we don’t sell or rent it.
4. Who we share it with
Only with the providers we need to run Platifica, who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Server and database (Amazon Lightsail) and encrypted backups (Amazon S3). | United States |
| Anthropic and OpenAI | AI models that process the assistant’s messages and attachments, transcribe voice notes and read the text of bank alerts. Under their business terms, they don’t use this data to train their models. | United States |
| Cloudflare | Receives the emails you forward for email capture and passes them to our server. It also manages the domain. | United States |
| Resend | Sends service emails (for example, password resets). | United States and Brazil |
Apple and Google distribute the apps through their stores and handle download data under their own policies. We would only share data with authorities if a law or a valid court order requires it.
Because these providers are outside Colombia, your data is transferred to other countries, mainly the United States. By using Platifica you authorize this; we choose providers with appropriate security measures.
5. How long we keep it
- While you have an account. You can delete transactions and other records at any time.
- When you delete your account, your account and all your data are removed from the database immediately.
- Backups are encrypted and only used to restore the service after a failure. They’re deleted automatically: daily backups after 35 days and monthly backups after 400 days. If you delete your account, your data disappears from the backups as they expire.
- Server technical logs: 14 days.
6. How we protect it
All traffic is encrypted (HTTPS). Passwords are hashed, the app’s session is kept in the phone’s secure storage, backups are encrypted and server access is restricted. No system is perfect, but we work to protect your data and will tell you if an incident affects it.
7. Phone permissions
- Microphone: only while you record a voice note for the assistant.
- Camera and photos: only when you choose a profile photo or an image for the assistant.
- Notification access (Android, optional): for the automatic capture described above.
- Show notifications (Android, optional): to tell you when an expense is detected.
You can revoke any of these permissions in your phone’s settings.
8. Your rights
Under Colombia’s Law 1581 of 2012 and any data protection law that applies to you, you can:
- Access, update and correct your data. You can edit most of it directly in the app.
- Request a copy of your data.
- Delete your account and your data: in the app, under Settings → Delete account (more details).
- Withdraw your consent, for example by turning off automatic capture.
- File a complaint with Colombia’s Superintendence of Industry and Commerce (SIC) or your local data protection authority.
To exercise any of these rights, write to soporte@platifica.com from your account’s email address. We answer queries within 10 business days and complaints within 15.
9. Children
Platifica is not intended for anyone under 18, and we don’t knowingly collect data from minors. If you think a minor has given us their data, write to us and we’ll delete it.
10. Changes to this policy
If we change this policy, we’ll publish the new version here with its date. If the change is significant, we’ll also let you know in the app or by email.