Last updated: 20 October 2026
FinPal is run by Nathan Baxter, a sole trader trading as FinPal in Northern Ireland, UK ("FinPal", "we", "us"). We are the data controller for the personal data in this policy. Contact us about anything here at nathanbaxteruk@gmail.com.
Personal data we process through our website (finpalai.app) and the FinPal app, including when you connect a bank or use FinPal AI.
If you only join our waitlist: your email address, to tell you when your invite is ready. Legal basis: consent.
If you create an account, we also process:
You need to give us your account details to use FinPal; everything else is up to you. Please don't share sensitive information, such as health details, about yourself or anyone else with FinPal AI.
FinPal has read-only access to accounts you connect, through authorised open banking providers. We can see your information to give you insights, but we can't move, hold or pay out your money.
FinPal uses AI to generate answers and insights from your data. They're generated automatically, may be wrong, and aren't financial, tax or legal advice. FinPal AI can suggest changes, but nothing changes until you approve it. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. We share only what's needed with our AI provider (currently OpenAI), and your data isn't used to train its models.
We use trusted providers who process data for us under contract:
We don't sell your personal data. We share it only to run FinPal, when the law requires it, or with your consent.
Your financial data is stored in the UK and European Economic Area. Some providers, including our sign-in provider, process data in other countries, including the United States. When that happens we rely on approved safeguards, such as the UK International Data Transfer Agreement or an adequacy decision. Email us for details.
We only use cookies that are needed to keep you signed in. We don't use advertising or analytics cookies.
We keep your data while your account is open. When you delete your account, we delete your data, apart from anything we must keep for legal or security reasons for a limited time. Waitlist emails are kept until you're invited or ask us to remove you. Connected-account access ends when you disconnect it or close your account.
Under UK data protection law you can access, correct or delete your data, restrict or object to how we use it, withdraw consent, and ask for a copy to take elsewhere. Email us to use any of these, or delete your account in the app. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
FinPal is for people aged 18 and over.
We use encryption, access controls and secure sign-in to protect your data. No system is perfectly secure, but we'll tell you and the regulator about any breach as the law requires.
We'll post updates here and change the date above. For changes that matter to you, we'll tell you by email or in the app.
← Back to FinPal