Prisma Privacy Policy

Last update: July 9, 2026

This Privacy Policy explains how Prisma, a personal finance application available on Android, and coming soon to iOS and web, treats user information. Prisma is designed with privacy by default: your personal financial data is stored primarily on your device and is only synchronized, processed, or shared when you activate features that require it, such as online accounts, cloud sync, couple/family mode, premium features, payments, advertising, OCR, artificial intelligence, or technical support.

1. Data Controller

The data controller is:

Prisma / Ivan Peñalver
Contact email: contact@prismfinance.eu

You can contact us regarding any questions related to privacy, data protection, or deletion of information.

2. Data Processed by Prisma

Prisma may process different categories of information depending on the features you use.

2.1 User-entered Data

You can enter data such as:

Expenses, income, and financial transactions.
Amounts, dates, categories, tags, accounts, jobs, or income sources.
Budgets, goals, debts, net worth, subscriptions, or financial plans.
Notes, feelings, observations, or custom information associated with your records.
Templates, smart rules, alerts, configurations, and application preferences.

By default, this data is stored locally on your device. It is not transmitted to external servers unless you activate features that require it, such as online synchronization, cloud backup, user account, shared mode, export, support, or connected premium features.

2.2 Account Data

If you choose to create an account or log in, Prisma may process:

Email address.
User identifier.
Login method, such as Google Sign-In.
Account creation date.
Subscription status or premium access.
Technical data needed to maintain your session.

This data is necessary to allow online access, sync, data recovery, premium features, web usage, or access from multiple devices.

2.3 Personal Financial Data

Prisma may process financial data you enter into the application. Prisma does not access your bank accounts directly unless a specific feature that permits it is integrated in the future and you are expressly informed before activating it.

The financial information entered by the user is used to display statistics, charts, calendars, budgets, goals, alerts, reports, analysis, KPIs, and recommendations within the application.

Prisma is not a banking entity, financial advisor, investment manager, or financial intermediary.

2.4 OCR and Document Data

If you use OCR scanning features for receipts, invoices, or documents, Prisma may process:

Images or documents you select.
Text extracted from the document.
Amounts, dates, merchants, concepts, or detected categories.
The result of the analysis generated by the application.

Processing is performed solely to help you record or analyze your entries. You should always review results before saving them, as automatic recognition may contain errors.

2.5 Artificial Intelligence Data

Prisma may offer artificial intelligence features to generate insights, alerts, analysis, summaries, classifications, predictions, or financial suggestions.

These features may use the data you have entered in the application to generate personalized results. When an AI feature requires external processing, it will be indicated within the application or in the corresponding documentation.

Results generated by AI are informative and may be inaccurate, incomplete, or not adapted to your real situation. They do not constitute financial, tax, legal, or investment advice.

2.6 Technical and Usage Data

Prisma may process technical information necessary for operation, security, diagnostics, and service improvement, such as:

Device type.
Operating system.
Application version.
Language and approximate country.
Technical device or installation identifiers.
Aggregated or technical usage events.
Errors, crashes, or performance reports.
Information necessary to prevent abuse, fraud, or misuse.

Whenever possible, this data is processed in an aggregated or non-identifiable manner.

2.7 Information on Installed Applications

With prior user consent, Prisma may access limited information about applications installed on the device exclusively to improve features, personalization, or user experience.

Before accessing this information, the application will display a clear notice indicating what data is collected, how it is used, and for what purpose.

This information is not shared with third parties or used for advertising or analytical purposes.

3. Purposes of Processing

Prisma may process data for the following purposes:

To allow basic functioning of the application.
To record, organize, and visualize expenses, income, budgets, goals, debts, and net worth.
To generate statistics, charts, calendars, KPIs, alerts, and insights.
To enable OCR features, artificial intelligence, and financial analysis.
To create and maintain user accounts.
To synchronize data between devices when the user activates online features.
To enable the use of the web version or dashboard.
To manage subscriptions, payments, premium purchases, or access to paid features.
To display advertisements in the free version.
To manage advertising consent and privacy preferences.
To provide technical support.
To detect errors, improve performance, and prevent abuse.
To comply with legal, contractual, or security obligations.

4. Legal Basis for Processing

Data processing is performed based on one or more of the following legal bases:

Performance of contract: to provide the service requested by the user.
Consent: for optional features such as personalized ads, access to information about installed apps, certain online features, or specific communications.
Legitimate interest: for security, abuse prevention, technical diagnostics, service improvement, and aggregated analysis.
Compliance with legal obligations: when it is necessary to retain or communicate information due to legal requirements.

You can withdraw your consent at any time from the application settings, from operating system options, or by contacting us.

5. Local Storage and Cloud Synchronization

Prisma is designed to operate with local storage. This means that much of the data entered by the user may remain solely on the device.

If you activate online features, synchronization, account, family/partner mode, web version, or cloud backup, your data may be stored in external services necessary to provide those features, such as Firebase or other technical providers.

Online synchronization is optional except in those platforms or features where it is technically necessary, such as the web dashboard.

6. Third-party Providers and Services

Prisma may use third-party services to operate certain features.

6.1 Google Firebase

Prisma may use Firebase for authentication, database, sync, remote configuration, technical analytics, notifications, hosting, crash reporting, or other features needed for the service.

Firebase may process technical data and, if you activate online features, data associated with your account and application usage.

6.2 Google AdMob and User Messaging Platform

The free version of Prisma may show advertisements through Google AdMob and integrate Google User Messaging Platform to manage ad consent in regions where required.

Depending on your choice:

If you accept personalized ads, Google and its partners may use identifiers and technical signals to personalize ads.
If you do not accept personalized ads, non-personalized ads will be shown when possible.
You can change your consent preferences from within the application when available or from system settings.

6.3 Ad Mediation Networks

Prisma may use advertising networks integrated through Google AdMob or ad mediation, such as AppLovin, Unity Ads, ironSource, or other compatible networks.

These platforms may receive technical information necessary to show ads, cap frequency, prevent fraud, and measure ad performance.

6.4 Payment Gateways

Prisma may use Google Play Billing, Apple In-App Purchases, Stripe, or other payment providers to manage purchases, subscriptions, or premium access.

Prisma does not directly store complete credit card details. Payments are handled by the respective providers.

6.5 Log In with Google

If you use Google Sign-In, Google may share basic data needed to identify your account with Prisma, such as email address and user identifier.

7. Advertising

Prisma may show ads in the free version of the application.

Advertising may be:

Personalized: based on interests, advertising identifiers, or other permitted signals.
Non-personalized: based on contextual or limited technical information.

The availability of personalized ads will depend on your consent, region, applicable law, and Google policies.

8. Shared Data

Prisma does not sell your personal data.

Prisma only shares data when necessary to:

Provide the requested service.
Use technical providers such as Firebase, AdMob, Google, Stripe, or equivalent services.
Manage payments or subscriptions.
Comply with legal obligations.
Protect the security of the service.
Provide technical support when requested by the user.

9. International Transfers

Some providers used by Prisma may process data outside the European Economic Area. In those cases, processing will be conducted in accordance with applicable legal guarantees, such as standard contractual clauses, data processing agreements, or other mechanisms recognized by current regulations.

10. Data Retention

Locally stored data remains on your device until you delete it from the application, clear app data, or uninstall Prisma.

Data associated with accounts, synchronization, payments, or online services will be retained as long as you maintain your account or as long as necessary to provide the service, comply with legal obligations, resolve issues, prevent fraud, or address requests.

You can request deletion of your data in accordance with the rights section and the specific data deletion page.

11. Security

Prisma implements reasonable technical and organizational security measures to protect information against loss, unauthorized access, alteration, or improper disclosure.

However, no system is completely secure. The user must protect their device, keep the operating system updated, use secure lock mechanisms, and avoid sharing credentials.

12. User Rights

According to applicable regulations, you may exercise the following rights:

Access to your data.
Rectification of inaccurate data.
Erasure (deletion) of data.
Restriction of processing.
Objection to processing.
Data portability.
Withdrawal of consent.
Lodge a complaint with a supervisory authority.

To exercise your rights, contact: contact@prismfinance.eu

You can also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with regulations.

13. Children's Privacy

Prisma is not specifically directed at minors. If you are a minor, you must only use the application with authorization from your parents, tutors, or legal representatives when required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or functional changes. When changes are relevant, they will be communicated through the application, website, or appropriate channel.

Continued use of Prisma after changes are posted implies acceptance of the updated version, unless applicable law requires specific consent.

15. Contact

For any questions regarding this Privacy Policy or data processing, you can contact us at: contact@prismfinance.eu