This is a private, self-hosted installation of Firefly III, a personal finance manager. It is operated by one individual for managing their own household finances. It is not a public service, it is not offered to other people, and no accounts are available to anyone else.
Matej Ajster — an individual acting in a personal capacity.
Contact: matej.ajster@gmail.com
Only the operator's own data. There is exactly one user of this service, and that user is also the sole data subject. No data belonging to any other person is collected, imported, or processed.
On a single virtual server rented from Hetzner Online GmbH, located in Nuremberg, Germany. All data remains within the European Union. The database is not exposed to the internet and is reachable only from within the server.
The following services necessarily receive some data in order to function:
| Provider | What it receives | Why |
|---|---|---|
| Hetzner Online GmbH (Germany) | All stored data, as the hosting provider | Runs the server |
| Enable Banking Oy (Finland) | Account access authorisation and the transaction data it returns | Retrieves transactions from the operator's own bank under PSD2 |
| Anthropic PBC (Claude API) | Descriptions, counterparty names, dates, and amounts of uncategorised transactions | Suggests a categorisation rule for the operator to approve |
| Backblaze Inc. | Backups, encrypted on the server before upload | Off-site backup storage |
Data is not sold, rented, shared for advertising, or disclosed to anyone else. There are no analytics, trackers, or advertising services on this site.
For transactions that have no category, the description, counterparty name, date, and amount are sent to Anthropic's Claude API, which may look up a merchant name on the web, to suggest a categorisation rule. No account numbers or credentials are sent. A suggestion changes nothing until the operator reviews and approves it. This feature can be turned off entirely, in which case nothing is sent to Anthropic.
Financial records are kept until the operator deletes them. Bank access consent expires automatically under PSD2 rules (typically every 90–180 days) and must be renewed deliberately. Consent can be withdrawn at any time through Enable Banking or by deleting the application, which immediately stops any further access to bank data.
As the sole data subject is also the operator and administrator of this system, rights of access, rectification, erasure, and portability are exercised directly through full administrative control of the server and its data. Enquiries may be sent to the contact address above.
All traffic is served over HTTPS. Administrative access is restricted to SSH key authentication with passwords disabled. Backups are encrypted before leaving the server. Credentials are stored outside version control.
This policy may be updated if the setup changes. The date at the top reflects the current version.