Draft. Adelante isn't open to the public yet. This page hasn't been reviewed by a lawyer and will be finalized before launch. Text in [brackets] is still to be filled in.
1Using Adelante without an account
You can use Adelante without creating an account. Then your budget stays on your device and never reaches us: we can't see it, sync it or get it back if the device is lost or the app is removed. The rest of this policy applies in the same way where it can: usage statistics only if you say yes (linked to a random ID made on your device, since there is no account), error reports, and ads on the free plan. If you later create an account or sign in, your budget is saved to that account, and the usage statistics from before are joined to it.
2What we collect
- Your account: your email address, the name you give (optional) and your password. The password is stored only in a scrambled form (a hash) that can't be turned back into it.
- Your budget: what you type into Adelante: account names and balances, recurring items, transactions, notes, and your settings. We keep earlier saved versions for a while (the most recent ones, then one a day for up to 30 days) so a mistake or a sync problem can be undone.
- Usage statistics (only if you say yes, where we ask first: see "Your choices"): which screens and features you use (for example "opened Insights" or "added a recurring item"), things that happen to your account (for example "signed in" or "Pro started"), when, the kind of device, the app's language and your plan, and how often ads on the free plan are seen and tapped. They're linked to a random ID, not your email or name, and never include amounts, names, notes or anything you type. They're kept on our own servers; no analytics company receives them.
- Your privacy choices: what you chose and when, so we can show we respected it.
- Technical information: your IP address, used to limit repeated sign-in attempts and kept for about a day; the kind of device and browser you sign in from, kept with each sign-in so you can tell your sessions apart; and server logs of requests (which page or action, whether it worked, how long it took) used to keep Adelante working and secure.
- Error reports: if something breaks inside the app, it sends us what went wrong and where in our code, which screen you were on, the last few things the app did before it broke (screens opened and the kinds of action taken, such as "added an entry"), the kind of device, the app's language and version, and your account's ID (not your email). Never amounts, names, notes or anything you typed. We use them only to find and fix bugs.
Adelante doesn't ask for or store bank logins, card numbers or government IDs.
3On your device
- A sign-in cookie keeps you signed in.
- A copy of your budget is kept on each device so Adelante works offline. Signing out removes it from that device.
- Your preferences (theme, language, whether to show past entries, your privacy choices) are remembered on the device.
- If you said yes to usage statistics, a short queue of usage events waits on the device until it's sent; saying no empties it.
- An error report that couldn't be sent (for example while offline) waits on the device, at most five of them, until it can be.
Adelante itself doesn't use advertising or tracking cookies. [When an ad network is connected, ad partners may use cookies or device identifiers to count ad views and clicks, but only if you said yes to "Ad measurement"; this section will name them.]
4How we use it
- To run Adelante: your forecast, syncing between your devices, and your account.
- To send emails you need: confirming your address, resetting your password, confirming an email change. We don't send marketing email.
- To keep Adelante secure and working, and to fix problems.
- With your yes, to understand how Adelante is used (which features matter, where people get stuck, how the free plan and Pro compare) and to count ad views and clicks.
We don't sell or share your personal information, and we don't use your budget for anything other than showing it to you.
When you ask us for help, our support tools show your account details (email, plan, the devices you're signed in on) and how much is in your budget (how many accounts and entries, and when it was saved), not what's in it. With them we can resend an email, change your plan, put back an earlier saved version of your budget, sign you out, or delete your account when you ask. Each of those actions is recorded.
5Ads on the free plan
The free plan shows ads; Adelante Pro has none. Ads are chosen by the screen they appear on, never by your budget, and are never personalized: no amounts, names, notes or other budget data ever go to an advertiser. Ads never appear inside edit screens. If you say no to "Ad measurement" you still see ads on the free plan, just without ad cookies or device identifiers. In the European Union, the UK and Switzerland, Google's own consent form asks about ad cookies instead, and you can open it again any time from Settings → Privacy choices → "Ad choices". To know whether that applies, we look at the country your connection comes from; we don't store it. [Draft: the ad networks (for example Google AdSense on the web and AdMob in the phone apps), what they receive and their own policies will be listed here before any real ads appear.]
6Companies that help us run Adelante
- Proton sends our emails and stores our encrypted backups.
- [Hosting and network providers to be listed at launch.]
7How long we keep it
- Your account and budget: until you delete them.
- Usage statistics: 13 months, then deleted. Your privacy choices: until you delete your account.
- Sign-in attempt records: about a day. Email links: until they expire (48 hours at most).
- Server logs and error reports: 30 days.
- Backups: nightly, encrypted, replaced over time. Something you've deleted can remain in an older backup until that backup is replaced, for up to 30 days.
8Your choices
- Usage statistics and ad measurement: in the European Union and the rest of the EEA, the UK, Switzerland, Brazil and Colombia, you choose when you first use Adelante, and both stay off until you say yes. There you can change it any time in Settings → Privacy choices, and saying no to usage statistics stops them right away on that device. Everywhere else both are on and Adelante doesn't ask; if your browser sends a Global Privacy Control signal, ad measurement is off. To know which applies, we look at the country your connection comes from; we don't store it.
- See and download everything: Settings → Download my data gives you a file with your account details, your whole budget, your privacy choices and any usage statistics.
- Change it: edit your budget any time; change your email or password from the menu.
- Delete it: Settings → Delete account deletes your account and all its data right away, on every device.
Depending on where you live, you may have further rights (for example, to object or to complain to a data protection authority). Contact us and we'll help.
9Security
Connections to Adelante are encrypted (HTTPS), passwords are hashed, and each person's data is kept separate. You can add two-step sign-in (a code from an authenticator app on top of your password) and see, and sign out, every device your account is signed in on, both in the menu. If you turn on two-step sign-in we store the key your authenticator app uses, and your recovery codes only in scrambled form. No system is perfectly secure; if something goes wrong that affects your information, we'll tell you.
10Children
Adelante isn't meant for children under 13, and we don't knowingly collect their information.
11Changes
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.
12Contact
Adelante is made by SoloJade LLC. Questions: privacy@solojade.com.