Privacy Notice

fjordFIRE is a financial planning and visualization application. fjordFIRE is the data controller responsible for processing your personal data.

If you have any questions about this Privacy Notice or how your data is handled, contact us at [email protected].

We only collect personal data that is necessary to provide the service. This may include:

Account information

• Email address (used for authentication and account access)
• Photo (optional, if you choose to personalise your account)

Financial data (provided by you)

• Account balances
• Income and expenses
• Assets and liabilities
• Financial goals and projections

Technical and usage data

• IP address
• Device and browser information (user agent)
• Session and audit logs

AI interaction data

• Inputs and conversations with in-app AI features
• AI-generated outputs

Please do not include sensitive personal data beyond what is necessary to use the service.

We process personal data to provide the service, including financial overviews, FI projections, and insights, and to ensure the security and reliability of the platform. We do not use your personal data for advertising purposes.

We process personal data under the following legal bases:

• Contractual necessity: to provide the fjordFIRE service you have requested
• Legitimate interests: security, fraud prevention, and service integrity (e.g. logging IP addresses and system activity)

fjordFIRE may provide AI-assisted insights based on the information you provide. AI-generated outputs are for informational purposes only, may be inaccurate or incomplete, and do not constitute financial advice.

AI interaction data may be stored for a limited period (typically up to 30 days) to support service quality and reliability. We do not use your data to train third-party AI models unless explicitly stated.

• Account and financial data: retained until you delete your account
• Security and audit logs: up to 90 days
• AI interaction data: up to 30 days
• Backups: up to 90 days

Your data is primarily stored within the European Economic Area (EEA). We implement appropriate technical and organizational measures including encryption in transit (TLS), encryption at rest, access controls and monitoring, and secure infrastructure. Access to production data is restricted to authorized personnel only.

We do not sell or share your personal data for advertising purposes. We use trusted third-party service providers ("subprocessors") to operate the service, such as hosting, email delivery, and AI services. These providers process data on our behalf and are subject to appropriate contractual safeguards.

A current list of subprocessors is available upon request.

While fjordFIRE primarily stores data within the EEA, some service providers may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or participation in the EU–U.S. Data Privacy Framework where applicable.

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion, request a copy of your data (data portability), or object to or restrict certain processing.

The fjordFIRE app also lets you delete your data, delete your account, and export all data directly. To exercise any right, contact us at [email protected]. We will respond within applicable legal timeframes.

fjordFIRE is designed with privacy in mind. We only collect data necessary to provide the service, limit how long data is stored, apply strong security controls, and restrict access to authorized personnel.

In the event of a data breach affecting personal data, we will notify relevant authorities and affected users in accordance with applicable laws.

For users in the United States: we do not sell or share personal data for advertising purposes. We collect and use data only as described in this notice. You may request access to or deletion of your data as described above.

If you participate in community channels (e.g. Discord, Facebook, LinkedIn), any information you share there is processed by third-party providers and is subject to their privacy policies. Please do not share sensitive personal data in those channels.

We may update this Privacy Notice from time to time. The most current version will always be available within the application or on our website.