Privacy Policy

Selena Finance is an AI-powered personal finance application that helps people track income and expenses, understand their spending, and get AI-assisted answers about their finances.

Selena processes the information needed to operate the service, along with the information you choose to provide. We do not collect information that is unnecessary for the features you use.

Selena is designed to collect only what it needs to provide the service. We do not intentionally request or require:

• Physical addresses
• Phone numbers
• Government identification numbers
• Social media profiles
• Other personal information unrelated to the service

If you choose to type this kind of information into a note, transaction, or chat message, it is processed as part of that content. Selena does not ask for it, and we do not use it for any purpose beyond providing the service.

We process information only for legitimate, clearly defined purposes:

• Creating and authenticating your account
• Providing Selena's financial tracking functionality
• Recording and displaying your transactions
• Calculating account balances and financial summaries
• Providing Selena Chat and AI-assisted financial insights
• Maintaining application security
• Preventing abuse and unauthorized access
• Maintaining and improving the reliability of the service
• Complying with applicable legal obligations

We do not use your information for advertising, behavioral advertising, or to sell your data, and we do not use it for purposes unrelated to the service described in this Privacy Policy.

Under Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations, personal information may only be processed when there is a lawful basis to do so. Depending on the activity, Selena relies on the following bases:

• Performance of a contract / provision of a requested service. We process account and financial information to deliver the service you requested — creating your account and providing the financial tracking and AI features you use.
• Consent. Where processing relies on consent — for example, when you choose to share information for a specific purpose — we rely on your consent, which you may withdraw at any time.
• Compliance with legal obligations. We may process information where required by applicable law or where we are subject to a legal obligation.
• Legitimate interests. Where applicable, we may rely on our legitimate interests — such as maintaining the security and reliability of the service — provided these interests are balanced against your rights and are not overridden by them.

We do not rely on consent for every processing activity. Much of the processing needed to provide the service is carried out to fulfill the service you asked for.

Selena Chat is an AI feature. When you ask Selena a question, your question, the selected date range, and the relevant transaction data are processed by our AI service provider to generate a response. This happens in real time: we send only the information needed to answer your question, and we do not save your conversations to your account.

Selena relies on a small number of third-party service providers to operate the service. We share only the information necessary for each provider to do its job:

We cannot speak for how these providers handle data on their own systems. For the most current information, please refer to their privacy policies:

• Supabase Privacy Policy
• Groq Privacy Policy
• Vercel Privacy Notice

Selena does not sell your personal information, and we do not rent or trade it. We do not share it for advertising or marketing purposes.

We may disclose information only in the limited circumstances described here:

• Service providers. Information may be processed by service providers acting on our behalf when necessary to provide the service, as described in the AI and Third-Party Processing section above. These providers are instructed to process information only for the purposes we describe.
• Administrative access. Authorized Selena administrators may technically access information stored in production, including financial information, when necessary for legitimate operational, security, troubleshooting, support, abuse-prevention, or legal purposes. Selena does not routinely review users' personal financial activity.
• Legal requirements. We may disclose information where required by applicable law, legal process, or government request, or where we believe in good faith that disclosure is necessary to protect Selena, its users, or the public from fraud, abuse, security threats, or other unlawful activity.

Your financial data belongs to you. We do not use it for purposes unrelated to providing the service.

We retain information only for as long as reasonably necessary to provide the service, fulfill the purposes described in this Privacy Policy, maintain legitimate business records, resolve disputes, enforce our agreements, or comply with applicable legal obligations.

When you delete your account, we delete the information associated with it — including your profile, transactions, transfers, categories, and accounts — and your sign-in identity is removed through our authentication provider. You can delete your account at any time from the Settings page.

If specific retention periods are established in the future, we will describe them here.

We apply reasonable technical and organizational safeguards appropriate to the sensitivity of the information we process:

• Encryption in transit. All traffic to Selena is served over HTTPS/TLS.
• Secure authentication. Sign-in is handled by Supabase Auth, including password hashing and session management.
• Database access controls. User-owned data is protected by Row Level Security (RLS) policies, so ordinary application users can only access their own records and cannot access another user's records. RLS does not prevent authorized administrators or service providers with privileged technical access from accessing production data for legitimate operational purposes.
• Server-side handling of sensitive credentials. Sensitive credentials, such as the AI API key, are kept in server-side environment variables and never exposed to the browser.
• Access controls. Production and administrative access is restricted to authorized persons and legitimate operational purposes.

No internet-based service can guarantee absolute security. While we work to protect your information, we cannot guarantee that unauthorized access will never occur. We encourage you to use a strong, unique password for your account.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal information:

• Right to be informed. To know whether personal information is being processed and how it will be used.
• Right to access. To obtain a copy of the personal information Selena holds about you.
• Right to correct. To request correction of inaccurate or incomplete information.
• Right to object. To object to processing, including processing based on legitimate interests or for direct marketing.
• Right to erasure or blocking. To request erasure or blocking of personal information, where applicable under the law.
• Right to data portability. To request a copy of your data in a structured, commonly used, machine-readable format, where applicable.
• Right to file a complaint. To file a complaint with the National Privacy Commission.
• Right to damages. To claim damages, where applicable, in accordance with law.

To exercise any of these rights, please contact us at [PRIVACY CONTACT EMAIL] with the subject line “Privacy Request”. Requests may be subject to reasonable steps to verify your identity and to lawful limitations. We will respond within the timeframe required by applicable law.

Selena is designed to comply with applicable Philippine privacy requirements, including:

• Republic Act No. 10173 — the Data Privacy Act of 2012
• The Implementing Rules and Regulations of Republic Act No. 10173
• Applicable issuances and guidelines of the National Privacy Commission (NPC)

In processing personal information, Selena follows the fundamental principles of the Data Privacy Act:

• Transparency. We explain clearly what we process, why, and how.
• Legitimate purpose. We process information only for purposes that are lawful and consistent with the service we provide.
• Proportionality. We process only the information necessary for the intended purpose, and no more.

Selena has not been certified, approved, or endorsed by the National Privacy Commission. This Privacy Policy is a plain-language explanation of our practices, intended to be concise, accessible, and understandable.

Selena uses only a small number of functional technologies:

• Authentication cookies. To keep you signed in, our authentication provider sets session cookies. These are strictly necessary for the service to function.
• Local storage for your theme preference. Your light or dark theme choice is stored in your browser's local storage so your preference is remembered between visits.

We do not use cookies or similar technologies for advertising, cross-site tracking, or analytics, and the application does not run third-party tracking or analytics scripts.

Selena operates with the help of infrastructure and service providers that may process information outside the Philippines. For example, the providers described in this Privacy Policy may use data centers or processing locations in other countries. We do not claim that all information is stored in the Philippines.

When personal information is transferred outside the Philippines, we take steps to apply safeguards consistent with applicable requirements of the Data Privacy Act and its Implementing Rules and Regulations, including the security and access measures described in this Privacy Policy.

We may update this Privacy Policy from time to time when our practices, services, or legal requirements change. When we do, we will update the “Last updated” date at the top of this page. Where changes are material, we will take reasonable steps to bring them to your attention, such as a notice within the application.

We encourage you to review this page periodically to stay informed about how we process your information.

Last updated: August 24, 2026

Questions about privacy or requests concerning your personal information?

For more information about your privacy rights, you may visit the website of the Philippine National Privacy Commission at privacy.gov.ph.