Privacy Policy

• To provide the service: displaying your dashboard, calculating runway, generating reports.
• To personalise your experience: using your base currency and country for automatic conversions and simulations.
• To power AI analysis: when you request an AI-generated insight, a non-identifiable summary of your financial data (totals and ratios only, never your name or email) is processed by our AI infrastructure to generate the response.
• To communicate with you: sending account confirmation emails, important product updates, or security notices. We do not send marketing emails without your explicit consent.
• To improve the product: aggregated, anonymised analytics help us understand which features are most useful.

Your data is stored in a secure, encrypted cloud database hosted in the United States. We use industry-standard infrastructure providers that maintain rigorous security certifications.

We enforce row-level access controls at the database level: your data is isolated so that no other user can access your records, and our application code requires a valid authenticated session to read or write any data.

All data in transit is encrypted via TLS 1.2+. Authentication sessions use short-lived tokens stored in secure, HTTP-only cookies scoped to app.pomave.com.

Despite our best efforts, no method of electronic storage is 100% secure. We will notify you promptly in the event of a breach that affects your data.

We use trusted third-party infrastructure providers to operate Pomave, including services for authentication, database hosting, AI inference, currency data, and web hosting. These providers process data only as necessary to deliver the service, under contractual obligations that protect your privacy.

When you use the AI analysis feature, a non-identifiable financial summary is sent to our AI provider solely to generate your insight. This data does not include your name, email, or any directly identifying information.

Currency conversion features use real-time exchange rate data from a third-party provider. No personal data is included in these requests.

We do not sell, rent, or share your personal data with advertisers or data brokers under any circumstances.

Pomave uses strictly necessary cookies only: specifically, a secure session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

Session cookies expire when you log out or after a period of inactivity.

You have the right to:

• Access: request a copy of all personal data we hold about you.
• Correction: update your name, email, or financial data at any time in Settings.
• Deletion: request permanent deletion of your account and all associated data. Send a request to privacy@pomave.com. We will process it within 30 days.
• Portability: export your transaction history and financial data from the Reports section at any time.
• Objection: opt out of any non-essential data processing by contacting us.

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the GDPR and UK GDPR, including the right to lodge a complaint with your local supervisory authority.

We retain your account data for as long as your account is active. If you delete your account, all personal data and financial records are permanently deleted from our systems within 30 days. Anonymised, aggregated statistics may be retained indefinitely.

Pomave is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will delete it immediately.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notice at least 14 days before the change takes effect.

Questions, requests, or concerns about this Privacy Policy? Contact us at: