BANKIE · LEGAL
Privacy Policy
Version 2026-10-29.1 · Last updated 29 October 2026
Bankie SG · Singapore · hcubeleo@gmail.com
1. Public-page measurement
Public pages record aggregate page loads, signup-link clicks and available template downloads using fixed page routes, content categories and event counts. A search-engine referrer is classified in the browser without retaining its URL. Session storage remembers only organic or other acquisition during the tab session; signup passes this category to measure aggregate signup and first-item outcomes. No anonymous visitor ID, IP address or raw referrer is stored in these analytics. Page loads are not unique visitors.
2. First-party usage analytics
Bankie records signed-in usage to understand adoption and improve the service: sign-ins and sign-ups, active days, page views, stock search/refresh and record actions, policy OCR outcomes, and completed protection reviews. Analytics stores fixed event names, daily counts, event timestamps and pseudonymous account/session hashes for up to 400 days. Onboarding events may include only the current step, item type, time since signup in minutes, category count and whether real records existed; these measure activation and return rates. It does not store IP addresses, search text, stock symbols, portfolio amounts, household answers, documents or recognised text. Authorised administrators can see aggregate reports; no third-party analytics service or advertising cookies are used. The same account is counted once across devices for active-user metrics. Tracking starts when this feature is introduced; earlier usage is not reconstructed.
3. Optional policy document extraction
Policy document reading uses PDF.js and Tesseract.js on your device. The original PDF or image and recognised text are not uploaded to Bankie or an OCR provider. Bankie serves the OCR code, language data and PDF support files, so your browser downloads these assets from Bankie. Draft fields remain in your tab until you choose to save reviewed policy fields to your account. English documents are supported; scans may take longer and OCR or field matching may be incorrect or incomplete. This feature does not verify contractual benefits or provide advice. Optional AI protection reviews are a separate service with their own consent.
4. Personal data and non-advisory disclaimer
You provide personally identifiable information (PII) and other records at your own risk. Share only what is necessary and never enter passwords for other services, identity document numbers or payment card details. Bankie provides information and tools for personal tracking and education only. Its information, services, market data and protection reviews do not constitute financial, investment, insurance, tax, legal or other professional advice, and do not create an adviser–client relationship. Verify information independently before acting. This notice does not limit Bankie SG’s data-protection obligations or any rights that cannot be excluded by law.
5. Who is responsible
This policy explains how Bankie handles personal data. Bankie SG, operating from Singapore, is responsible for Bankie. For privacy questions, access, correction, consent withdrawal or account deletion requests, email hcubeleo@gmail.com with the subject “Bankie privacy”. Do not include your password. We will acknowledge your request and explain the verification and next steps.
6. Daily asset value history
To show recorded daily changes, Bankie stores up to 32 snapshots of recorded cash balances. New snapshots do not track policies; legacy policy snapshots may remain under the existing retention policy. Cash snapshots are stored per account, each dated in Singapore time. These are financial portfolio records, not usage analytics. They persist on the server for cross-device comparisons until replaced by newer snapshots or removed through an account deletion request. Bankie does not connect to banks or insurers to verify those values.
7. What we collect
We collect your email, optional name, a salted password hash, and your policy acceptance versions and time. We store stock holdings, costs, shares and reference prices; insurance policies and riders; cash balances and notes; and completed protection reviews you choose to save. Review profiles can include age, gender, income, household circumstances, expenses, debts and coverage preferences. Hosting and security systems may process IP addresses, request metadata and error logs. Do not submit identity documents, bank passwords or unnecessary sensitive information.
8. Why we use it
We use these records to create and authenticate your account, save and retrieve your portfolio across devices, calculate summaries and reviews, retrieve market information, prevent abuse, resolve problems and meet legal obligations. Signup records your agreement to the Terms and your acknowledgement and consent to the processing described here for these service purposes. Optional AI processing requires a separate action and consent; signup consent does not authorise it.
9. Providers and disclosures
Render hosts the application and stored records. Finnhub and Yahoo Finance receive search text, market symbols and request metadata for market lookups; Bankie does not send your portfolio quantities, account email or password to these market providers. If you explicitly request an AI review, selected household profile and coverage amounts are sent to OpenAI for analysis and web research. Bankie requests store:false, which does not mean the provider retains no operational or security data. Providers may process information outside your country under their own processing arrangements. We may disclose information when required by law or to protect the service and users. Bankie does not sell your personal data or use it for advertising.
10. Cookies and browser storage
A necessary HttpOnly session cookie supports sign-in for up to seven days, with automatic sign-out after 30 minutes of inactivity. Clicks, typing, scrolling and touch interactions in Bankie renew the inactivity window; background market updates and polling do not. Signing out or restarting the server also ends the session. The app uses browser storage for legacy portfolio records and import preferences; these copies can remain after sign-out. Current changes are held in the tab while being saved to your account. Clear site data on a shared device after saving and signing out. Bankie does not currently include advertising cookies or third-party analytics trackers.
11. Security and retention
Passwords are stored as salted hashes, not plaintext; production sessions use secure cookies and HTTPS. Financial records are stored on the server and are not end-to-end encrypted. No system is completely secure. Account records remain while you use the service until removed or an account deletion request is processed, subject to necessary security, dispute and legal retention. Hosting backups or logs may retain residual copies according to provider retention cycles. We do not promise immediate erasure from all backups.
12. Your choices and requests
You can view and correct portfolio records in the app and remove individual entries. Settings includes a password-confirmed account deletion flow that removes your account records and invalidates all sessions. Old browser copies must be cleared separately. For access, correction, deletion, consent withdrawal or privacy concerns, email hcubeleo@gmail.com. Identity verification may be needed. Withdrawing processing required to maintain an account may mean we cannot continue the service. Deleting records in the app does not remove old browser copies; clear these separately. You may also raise concerns with your local data protection authority.
13. Updates
This policy is versioned and dated. We will publish material updates here and provide additional notice or seek consent where required. Bankie is intended for adults aged 18 and over.