Privacy Policy

Ask Fin (Fintrivio) is a personal finance guidance product operated by Lendbulb Limited.

Lendbulb Limited is the data controller for personal data processed through Ask Fin. Company number: 12805018. Registered address: Office 08, The Foundry, 10 Dolphin Centre, Poole, Dorset, BH15 1SR. ICO registration number: ZB539645.

For all privacy enquiries, contact us at: help@askfin.co.uk

Account data

• Your name and email address
• Your UK region and subscription status
• Account creation date and login history

Financial data you enter

• Income, spending categories, debts, and savings figures entered into Ask Fin tools
• Budget and savings plan data
• Debt entries and repayment information
• Money Saved tracker entries (savings, cashback, and money wins you record)
• Tax information entered into the Tax Relief tool (income, pension contributions, number of children)
• Benefits-related information entered into the UK Benefits Checker (household type, income band, housing circumstances)

AI conversation data

• Messages you send to the Ask Fin AI companion
• Responses generated by Ask Fin

Device-stored data (not held by us)

Some Ask Fin tool data is stored only in your browser's localStorage and is not transmitted to our servers. This includes your saved budget, debt entries, mindset check-in history, and Money Saved tracker entries. This data stays on your device and is deleted if you clear your browser data or use the “Delete all saved data” option in Settings.

Usage data

• Pages visited and features used within the app
• Browser type, device type, and general location (country/region level)
• Session duration and interaction data

Payment data

Payment card details are processed directly by Stripe. We do not store your card number, CVV, or full payment details. We receive confirmation of payment status and a Stripe customer identifier.

Affiliate and campaign data

If you arrive at Ask Fin via an affiliate or marketing link, campaign parameters (such as utm_source, utm_medium, affiliate ID) may be stored temporarily in your browser session storage to attribute your sign-up correctly. This data is not retained beyond your session.

We process your personal data on the following lawful bases under UK GDPR:

• Contract performance: Processing your account data, subscription information, and tool usage data is necessary to provide the Ask Fin service you have subscribed to.
• Legitimate interests: We process usage and analytics data to improve the service, detect fraud, and maintain security. We have assessed that this does not override your rights and freedoms.
• Legal obligation: We may process data to comply with applicable law, including financial services regulation.
• Consent: Where we send you marketing communications, we will seek your consent. You can withdraw consent at any time.

• To provide and maintain the Ask Fin service
• To generate financial guidance and tool outputs based on information you enter
• To process your subscription payment through Stripe
• To send service communications (account confirmation, billing receipts, important notices)
• To improve the service based on anonymised usage patterns
• To detect and prevent fraud and security issues
• To comply with our legal obligations

We do not sell your personal data. We do not use your personal data for third-party advertising.

What is sent to Anthropic

When you send a message to Ask Fin, the text of your message (your question or prompt) is transmitted to Anthropic's API to generate a response. The message may contain financial information you have chosen to include in your question. Your name, email address, account details, and payment information are not sent to Anthropic.

How Anthropic handles your data

Anthropic processes your messages to generate responses. According to Anthropic's API terms (as at June 2026), Anthropic does not use API customer data to train its models by default. Anthropic may retain API inputs and outputs for up to 30 days for trust and safety review purposes, after which they are deleted. Anthropic's Privacy Policy is available at anthropic.com/legal/privacy.

International transfer

Anthropic is based in the United States. When you use the Ask Fin AI companion, your message data is transferred to and processed in the United States. This transfer takes place under Anthropic's standard contractual commitments as described in their terms and privacy policy. The United States does not have a UK adequacy decision, so this transfer relies on appropriate safeguards. By using the Ask Fin AI companion, you acknowledge this international transfer.

What this means in practice

If you are concerned about international data transfer, you can use Ask Fin's non-AI tools (budget planner, savings builder, debt tool, etc.) without using the Ask Fin AI companion. Your tool data entered via sliders and forms is processed on our own servers and is not sent to Anthropic.

Anthropic's terms may change

Anthropic's data handling practices are governed by their own terms and privacy policy, which may change without notice to us. We recommend reviewing Anthropic's privacy policy directly for the most current information.

Ask Fin uses the following third-party services to operate:

Each provider is subject to its own privacy policy and data processing terms. Where data is processed outside the UK, we rely on appropriate transfer mechanisms (standard contractual clauses or adequacy decisions where applicable).

• Account data: Retained while your account is active. Deleted within 90 days of account closure, subject to legal retention requirements.
• Financial data entered into tools: Retained while your account is active. You can delete this at any time via Settings → Data → Delete all saved tool data.
• Device-stored data (localStorage): Stored only on your device. Cleared when you use the delete function in Settings or clear your browser data.
• AI conversation history: Conversation records are stored in our database while your account is active. Anthropic retains API calls for up to 30 days per their terms.
• Payment records: Retained for 7 years in line with financial record-keeping requirements.
• Affiliate/campaign session data: Retained only for your browser session. Not stored beyond sign-up.

Ask Fin uses service providers based in the United States (Anthropic, Vercel, Stripe, and Supabase in some configurations). When your data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner
• Provider-level certifications and compliance frameworks (such as SOC 2)

The most significant international transfer risk relates to the Anthropic AI processing described in Section 5. See that section for more detail.

Under UK GDPR you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Request that we limit processing of your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at help@askfin.co.uk or use the Settings page in the app.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.

We use essential cookies only to keep you logged in. See our Cookie Policy for the full list.

In addition to cookies, Ask Fin uses your browser's localStorage to store tool data (budget, debts, money saved, mindset entries) on your device. This data does not leave your device and is not accessible to us. You can clear it via Settings or by clearing your browser data.

We take reasonable technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest in our database (Supabase)
• Row-level security policies to ensure users can only access their own data
• Secure authentication via Supabase Auth
• No storage of payment card details (handled by Stripe)

No system is completely secure. If you believe your account has been compromised, contact us immediately at help@askfin.co.uk.

We may update this policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice in the app. The date at the top of this page shows when it was last updated.

Continued use of Ask Fin after changes to this policy constitutes acceptance of the updated policy.

For any privacy questions, data subject requests, or concerns: