Your privacy is a fundamental pillar for Simdea (a trademark belonging to the legal entity Desmistificaláxia, Lda.). We respect your privacy and are strictly committed to protecting it.
For your convenience and absolute transparency, we provide this communication explaining our privacy practices and the options available regarding how your information is processed within our ecosystem.
This privacy statement applies to Simdea websites and all mobile applications and software products developed and managed by us. The use of Simdea’s Websites and mobile Apps implies your consent and acceptance of the clauses in this Privacy Policy.
1. What general information do we collect and how do we use it?
Our core principle for all our products is data minimization:
-
Websites and Contact: We request basic personally identifiable information only when you register a product, request a service, answer a survey, or correspond with us.
-
Mobile Applications (General): The data provided and processed by our general applications is intended exclusively for the operation of the App itself or for anonymous statistical processing to improve the user experience. As a general rule, our Apps only use the information in the moment and do not retain any personally identifiable information on external servers, unless explicitly stated otherwise within the application itself.
2. Specific Conditions: SimFin (Financial Management App)
Due to the sensitive nature of financial data, our SimFin application is governed by additional and strict privacy and security rules, based on an “Offline-First” architecture:
-
Local Storage and Encryption: All your financial data, transactions, and budgets entered into SimFin are stored exclusively on your device (smartphone or tablet). We use local databases with full encryption (e.g., AES-256 and SQLCipher) to ensure data is secure at rest. Simdea does not store, collect, or have access to your personal financial data.
-
Bank Synchronization (Open Banking): The optional connection to your bank accounts is made through secure and regulated APIs (in compliance with PSD2). Access is strictly read-only, facilitated through licensed Open Banking partners (such as Salt Edge). Simdea only manages the access tokens, which are encrypted locally.
-
Artificial Intelligence (Machine Learning): The automatic categorization of transactions in SimFin is performed by a Machine Learning model that runs entirely and locally on your device, without sending data to the cloud.
3. How do we protect your information?
The encryption keys for our sensitive products are protected by your device’s hardware-backed security features (such as Android Keystore or iOS Keychain). All necessary communications with external APIs are executed over secure HTTPS/TLS protocols.
Despite these rigorous measures, when you provide information on the Internet, there is always a risk that it could be intercepted. While we strive to protect your personal information, we cannot guarantee the absolute security of the information you transmit over the Internet.
4. Data Sharing and Third-Party Links
-
Selling Data: Simdea does not sell, rent, or transfer user data to third parties.
-
Third-Party Links: To improve the services offered in our products, we may include links to third-party Websites or services. Simdea is not responsible for the privacy practices of such Websites. We recommend that you read their respective privacy statements.
5. Changes to the Privacy Policy
In the future, we may choose to modify or update this policy, either due to changes in legislation or to cover new Internet developments or the launch of new applications. We reserve the right to make any such changes and request that you visit this page regularly.
6. Contact Us and User Rights
For any questions regarding this privacy policy, the privacy aspects of our products, or to request the deletion of any contact data we may hold, please contact: Simdea (Desmistificaláxia, Lda.) Email: geral@simdea.pt
7. Who administers the personal information?
Both our Websites and the general information collected are administered and controlled by Simdea (Desmistificaláxia, Lda.). Our web servers are currently located at OpenVServers.