Privacy policy — Finlatte

1. Who may use this software

Finlatte is private internal software. It is ONLY to be operated by Tech Creative Ltd. It is not offered to the public and must not be used by any other organisation or individual without written authorisation from Tech Creative Ltd.

2. What this software does

Finlatte is a macOS desktop application that helps Tech Creative Ltd manage business finance records (such as bank transactions, invoices, and receipts) and prepare UK VAT (Making Tax Digital) submissions to HM Revenue & Customs (HMRC) via HMRC APIs.

3. Personal data we process

Depending on how the app is used, Finlatte may process:

• Business and tax identifiers (for example VAT registration number)
• Bank transaction details imported from statements or Monzo (merchant names, amounts, dates, descriptions)
• Invoice and receipt information (customer or supplier names, emails, document amounts)
• Technical identifiers used for HMRC fraud-prevention headers (for example a device ID stored on the Mac)
• OAuth access and refresh tokens for HMRC and, if connected, Monzo

4. Why we process it

Data is processed so Tech Creative Ltd can keep accounting records and meet legal obligations to file VAT returns (UK GDPR Article 6(1)(c) — legal obligation — and/or Article 6(1)(f) — legitimate interests in operating the business).

5. Where data is stored

• Locally on the Mac in the sandboxed Application Support area for Finlatte (for example SwiftData / JSON files)
• HMRC and Monzo access tokens in the macOS Keychain
• API client credentials in local configuration on the Mac (not committed to public source control for live use)

Finlatte does not operate a multi-tenant cloud service. There is no shared server holding other customers' data.

6. Sharing with third parties

• HMRC — when connecting and submitting VAT returns / fetching obligations, relevant tax data and mandatory fraud-prevention headers are sent over HTTPS
• Monzo — only if connected; transaction sync uses Monzo's APIs over HTTPS

We do not sell personal data. We do not use this data for advertising.

7. Security

• API traffic uses HTTPS (TLS)
• Access tokens are stored in the Keychain
• The app runs in the macOS App Sandbox
• Local files are protected by the Mac user account and, when enabled, FileVault disk encryption

8. Retention

Records are kept on the Mac for as long as Tech Creative Ltd needs them for accounting and tax compliance, or until deleted in the app / by removing the application data.

9. Your rights

Because Finlatte is operated only by Tech Creative Ltd on Tech Creative Ltd's own Mac(s), data subject rights under UK GDPR are exercised through Tech Creative Ltd's normal internal processes.

10. Contact

Privacy questions: [email protected]