Privacy Policy
Ahorradito is a personal and shared finance application. This policy explains what we collect, why, and what you can do about it. It applies to the Ahorradito web application and to this website.
Who is responsible
Ahorradito is the data controller for the personal data described here. To exercise any of the rights below, or to ask a question about this policy, use the details on the contact page.
What we collect
Account data. Your name, email address, and a hashed password. We never store your password in a form we can read.
Financial data you enter. The financial spaces you create, the transactions you record, the categories and budgets you define, and any notes you attach to them. This information is entered by you — Ahorradito does not connect to your bank and does not import your bank statements.
Sharing data. When you share a financial space, we store who has access to it and with what role, along with the invitations you send and receive.
Technical data. Standard server logs containing IP address, timestamp, and requested URL, kept for security and troubleshooting.
Why we process it
We process account and financial data to provide the service you signed up for — that is, to perform our contract with you. We process technical data on the basis of our legitimate interest in keeping the service secure and working correctly.
We do not sell your data, we do not share it with advertisers, and we do not use it to build advertising profiles.
Who can see your data
People you explicitly share a financial space with can see the contents of that space, according to the role you gave them. You can change or revoke that access at any time from the space's member settings.
We use service providers for hosting and email delivery. They process data only on our instructions and only to the extent needed to run the service.
How long we keep it
We keep your account and financial data for as long as your account exists. If you delete your account, we delete the associated personal data. Server logs are retained for a limited period and then discarded.
Your rights
Under the GDPR and Spanish data protection law you can request access to your data, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. You can also withdraw consent where processing is based on consent, and lodge a complaint with the Spanish data protection authority (AEPD).
To exercise any of these rights, get in touch through the contact page.
Security
How we protect the service is described on the security page.
Changes to this policy
If this policy changes materially we will update the date at the top of this page and, where the change affects you significantly, notify you in the application.