Privacy Policy

Last Updated: October 18, 2026

At Friction Finance (operated by Friction Finance), we regard the privacy and security of your financial data as our highest priority. This Privacy Policy outlines exactly what information we collect, how we use it to provide you with financial insights, and the strict boundaries we place on sharing that information.

1. Information We Collect

We collect only the information necessary to provide you with a functional financial dashboard and budgeting tools.

A. Personal Account Information

Identity Data: First name, last name, and email address provided during registration.
Security Data: Passwords (which are strictly hashed using Argon2id encryption before storage) and login audit logs (IP address and timestamp).
Profile Data: Avatar images you choose to upload.

B. Financial Data

To provide our core service, you voluntarily input financial data, including:

Bank account names, types, and balances.
Transaction details (amounts, dates, payees, categories).
Budget limits and "Bucket" allocations.
Receipts/Documents: Files you upload as attachments to transactions. These are stored securely outside the public web directory.

2. How We Use Your Information

We do not use your data for advertising or profiling. Your data is used exclusively for:

Service Provision: Calculating your total balance, monthly spending trends, and budget progress.
Security: Verifying your identity during login and detecting suspicious account activity (e.g., failed login attempts).
Communication: Sending you critical system alerts, such as password reset links or verification emails.

Strict "No Sale" Policy: We will never sell, rent, trade, or lease your personal or financial data to third parties, advertisers, or data brokers.

We may disclose your information only in the following limited circumstances:

Legal Requirements: If required by law, subpoena, or valid court order enforced by Australian or relevant local jurisdictions.
Service Integrity: To investigate potential violations of our Terms of Service (e.g., fraud or cyber-attacks against our platform).

4. Data Security

We employ banking-grade security practices to protect your data:

Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS).
Encryption at Rest: Sensitive credentials are hashed. File uploads are renamed and stored in restricted directories.
Access Control: We utilize strict session management, CSRF protection tokens, and database isolation techniques.

Note: While we implement robust defense-in-depth strategies, no digital service is impenetrable. You are responsible for keeping your login credentials confidential.

5. Cookies and Tracking

We use Strictly Necessary Cookies to maintain your secure session while you are logged in. We do not use third-party tracking cookies or advertising pixels.

Session Cookie (MF_SESSION): Used to identify your logged-in state. It is encrypted and set to HttpOnly/Secure/Strict mode.

6. Data Retention and Deletion

We retain your financial data for as long as your account remains active. You have the right to:

Access: View all your data via the dashboard and settings.
Correction: Edit any transaction or profile detail at any time.
Deletion: You may request the full deletion of your account and all associated data by contacting support. Upon deletion, your data is permanently removed from our production databases.

7. Contact Us

If you have questions regarding this privacy policy or the security of your data, please contact our Data Privacy Officer at:

Email: enquiries@frictionfinance.com.au
Address: 55A McMahons Road, Kurrajong, NSW 2758

Privacy