This notice explains which personal data is processed when using Goblin Finance and for what purposes that processing takes place.
A. Möller
Berliner Ring 40
24392 Süderbrarup
Goblin Finance processes account details, entries for income, expenses, recurring items, language and currency preferences, and technical usage data in order to provide the application, manage accounts, and display budget insights.
When signing in via email and password or via third parties such as Google and GitHub, the data required for authentication is processed. This may include name, email address, profile image, and provider-specific identifiers.
Financial data, profile data, and preferences are stored in a PostgreSQL database. Server logs, security logs, and session data may also be processed where required for operation, troubleshooting, and protection against misuse.
Processing takes place for performance of the user relationship under Art. 6(1)(b) GDPR, for compliance with legal obligations under Art. 6(1)(c) GDPR, and on the basis of legitimate interests under Art. 6(1)(f) GDPR, especially for IT security, abuse prevention, and stable operation of the application.
Personal data is stored only as long as necessary for the stated purposes or as required by law. Account-related data is generally retained until the user account is deleted unless longer legal retention obligations apply.
Subject to the legal requirements, data subjects have the right to access, rectification, erasure, restriction of processing, data portability, and objection to certain processing. There is also a right to lodge a complaint with a competent supervisory authority.
The application can be installed as a Progressive Web App and may store locally cached content for offline pages or technical acceleration. These local storage operations serve functionality only and contain only the technical data required for use.