finance Gan Finance AI
verified_user Privacy policy

Your privacy matters.

Your financial data is deeply personal. Gan Finance AI explains what we collect, why we use it, and how you stay in control under Singapore's Personal Data Protection Act (PDPA).

Read Our Full Privacy Commitment arrow_forward Last updated: 1 January 2025
lock

The short version

Gan Finance AI uses the information needed to analyse your finances and make recommendations. We never sell your personal financial data.

AES-256 Encryption at rest
Read-only Account access
Your choice Consent controls

Clear by design

What we collect and why

You should be able to see the reason behind every data request. Open a topic for the details.

manage_search

Purpose comes first

We limit collection to personal financial data that helps our AI analyse cash flow, savings, debt, and goals. Recommendations are built for your account, not for resale.

Your control

Consent can be changed in the consent dashboard at any time.

Personal identifiers badge

We may collect your name, email address, location in Singapore, and account preferences to create and secure your profile, communicate with you, and tailor the analysis to your stated goals.

Financial account data account_balance

When you give consent, connected accounts provide read-only transaction, balance, income, and liability information. We use it to identify spending patterns and estimate monthly cash flow. We cannot move money from connected accounts.

Device and usage information devices

We collect limited device, browser, log, and security information to keep the service safe, diagnose faults, and understand which recommendations are useful. We do not use this information to make credit decisions.

What we do not collect visibility_off

We do not ask for banking passwords, payment card PINs, or security answers. We do not intentionally collect sensitive personal categories that are unrelated to personal finance analysis.

Protection and choice

Your rights and our safeguards

Singapore's PDPA gives you meaningful control over your personal data. We make those requests practical.

tune

You can ask us to

  • check_circleAccess the personal data we hold and information about its use.
  • check_circleCorrect inaccurate or incomplete profile and financial information.
  • check_circleWithdraw consent for a specific connection or purpose.
  • check_circleRequest deletion when we no longer need the data for a stated purpose.
  • check_circleAsk about portability where a structured transfer is required by applicable law.
shield_lock

How we protect it

  • lockData is encrypted in transit and at rest using AES-256.
  • securityAccess is restricted by role, logged, and reviewed by authorised staff.
  • fact_checkThird-party security audits and penetration testing are scheduled regularly.
  • scheduleWe retain information only for as long as the stated purpose, legal duties, or dispute handling requires.
  • notification_importantWe assess suspected breaches quickly and notify affected parties and regulators when PDPA requires it.
info

Technical terms have a specific meaning here. "Encryption" protects readable information by converting it into protected data. "Read-only" means a connected account can be viewed for analysis, without instructions to transfer or spend money.

Need a clear answer?

Questions? Contact our Data Protection Officer

Send privacy, access, correction, deletion, or consent requests to our Data Protection Officer. Please include enough detail for us to identify your account safely.

support_agent
mail [email protected] phone_in_talk +65 8988 5055

We review this privacy policy as our service, technology, and legal obligations change. The latest version will always appear on this page.