Privacy policy

Last updated: October 11, 2026

This is a translation for convenience. The Spanish version is the one that legally applies.

This policy explains what personal data fik processes, why, who it shares it with, how long it keeps it and how you exercise your rights, under Chilean Laws 19.628 and 21.719 on personal data protection.

1. Data controller

fik is an early-stage project with no incorporated company, run by Simón Sáez as an individual, RUT 20.640.480-9, domiciled in La Florida, Santiago, Chile.

Contact for anything about your personal data: contacto@mifik.cl.

If a company is incorporated later, this policy will be updated with its legal name and tax ID.

2. What data we process

• Identity and contact: name, email address, RUT and date of birth; and, if you fill them in, phone, address and country.
• Financial data: the accounts you register, balances, income and expense movements, categories, cards (only the last 4 digits, never the full number), debts, instalment purchases, fixed expenses, savings goals and credit card statements.
• Session security: IP address, device and browser type, and the approximate country you sign in from.
• Emails: whether you opened the emails we send you (see section 4).

We process sensitive data. Under article 2(g) of Law 21.719, a person’s socioeconomic situation is sensitive personal data, and that is exactly what you record in fik. That is why we ask for your express consent, separate from everything else, to process your financial data.

Minors: when you sign up we ask for your date of birth. If you are under 18, signing up requires the authorization of your mother, father or guardian (name, RUT and relationship), which we keep as a separate consent. The guardian’s RUT is stored only as an irreversible encrypted code, never in plain text. This authorization is declarative: we do not verify identity documents.

3. What we use it for, and on what basis

We do not send advertising or use your data for anything other than the purposes in this table.

4. Who we share your data with

To work, fik uses providers that process your data on our behalf: they may only use it to provide their service to us, never for their own purposes. All of them are outside Chile, so using fik means your data is transferred abroad:

• Safeguards: in its data processing agreement, each provider commits to process your data only on our instructions, keep security measures, bind its subcontractors to the same obligations, tell us without delay about any breach and delete the data when the service ends.
• Open tracking: our emails carry an invisible image that tells Resend when they are opened. We do not track which links you click: the links to confirm your email or recover your password go straight to mifik.cl.
• IPinfo licenses its data under CC BY-SA 4.0, which requires showing the attribution: it is in Profile → Security.
• We do not sell your data or share it for advertising. We use no analytics or marketing tools.

5. How long we keep it

We keep your data while your account is active. When you delete your account (Profile → Data and privacy → Delete account), you choose what happens to it:

• Delete everything (the default): your data is deleted immediately: your identity, accounts, movements, debts, savings, consents and everything else.
• Keep an anonymized history (if you choose it): we immediately delete everything that identifies you (name, email, RUT, phone, address, date of birth, second factor), but we do not delete your financial records: they stay stored with no data that identifies you. Bear in mind that a detailed financial history, even without a name, could be linked back to a person through its patterns; if that worries you, delete everything.

Either way, your sessions, passkeys, recovery codes and email addresses are deleted immediately, and we keep only a record that you asked for the deletion: the date and your RUT turned into an irreversible encrypted code (never the RUT in plain text), as proof that we honoured your request.

Also:

• Backups: the database keeps automatic backups of the last 24 hours, so deleted data also leaves the backups within that time.
• Sessions: closed sessions are deleted after 3 days, and the country linked to each IP is forgotten after 60 days, even while your account is active.
• Providers: each provider (section 4) deletes what it processed for us under its own agreement. For example, the log of sent emails stays at Resend for its own retention period.

6. Your rights

You can ask for access, rectification, erasure, objection, portability and blocking of your data, and withdraw your consent at any time.

• In the app:
  • correct your personal details (Profile → Personal information);
  • download a copy of your financial data as an Excel spreadsheet that you can also import again (Import → fik template → Download template → With my current data). It includes your accounts, cards, statements, movements, transfers, debts, instalment purchases, fixed expenses, goals and contributions, with their payments;
  • delete your account (section 5).
• By email, to contacto@mifik.cl: any other request, including a copy of what the spreadsheet leaves out (your profile details, sessions and consents).

We answer within 30 calendar days, which may be extended once by another 30. Rectification, erasure and objection are always free, and access is free at least once per quarter.

7. Automated decisions

We do not make automated decisions that produce legal or similarly significant effects on you. fik does not score your credit or approve or reject anything about your financial situation: it only organizes and shows the information you enter.

8. Where the data comes from

You provide all the data yourself by using the app. We do not obtain data about you from other sources, except the approximate country, which is derived from the IP you connect from.

9. Security

• Passwords are stored with an irreversible hash (bcrypt); we never see them.
• You can turn on a second factor (a code from an authenticator app) and passkeys.
• Each session can be closed from Profile → Security, with immediate effect.
• Every connection is encrypted (HTTPS, TLS 1.2 or higher), and the database and disks are encrypted.
• The database only accepts connections from our server and from authorized administration machines, with least-privilege users.
• Each user’s data is isolated: nobody else can see it through the app.

10. Changes to this policy

We may update this policy. We will always publish the current version on this page, with its date, and if a change affects how we use your data we will tell you by email.

11. Complaints

If you are not satisfied with how we handle your data, write to us first at contacto@mifik.cl. You can also complain to Chile’s Personal Data Protection Agency (Agencia de Protección de Datos Personales).