Legal
Privacy Policy
Last updated: September 3, 2026
FinzoLab ("FinzoLab", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we collect and process when you use the FinzoLab website and application, why we process it, how we protect it, and what rights you have under applicable data protection law, including the General Data Protection Regulation (GDPR).
1. Data Controller
FinzoLab is currently operated by an individual and is not currently operated through a registered company.
Data Controller: Mark Klemen
Contact email: support@finzolab.com
If the legal entity operating FinzoLab changes, this Privacy Policy will be updated accordingly.
2. Personal Data We Collect
The personal data we process depends on how you use FinzoLab.
2.1 Account Information
When you create or use a FinzoLab account, we may process:
- your email address;
- your name or username, if you provide one;
- authentication and account-related information.
2.2 Learning and Account Activity
To provide and personalize FinzoLab, we may process information about your activity within the application, including:
- onboarding responses;
- completed lessons;
- quiz results;
- XP and level information;
- streaks;
- achievements and badges;
- learning preferences;
- selected goals;
- other information necessary to provide your personalized learning experience.
2.3 Finzo AI
If you use Finzo AI, we process the messages and other information you provide to the AI feature in order to generate responses and provide the requested functionality.
You should not provide unnecessary sensitive personal information to Finzo AI.
AI-generated responses may be inaccurate or incomplete. Finzo AI is an educational tool and does not provide professional financial, investment, tax, legal, or other professional advice.
2.4 Technical and Security Information
We may process certain technical information necessary to operate and secure FinzoLab, such as:
- IP address;
- browser type;
- device type;
- operating system;
- technical logs;
- authentication and session information;
- information relating to security events or attempts to misuse the service.
2.5 Analytics Information
FinzoLab uses optional analytics services:
- Google Analytics 4; and
- Microsoft Clarity.
These services are not initialized before you provide consent for optional analytics.
If you allow analytics cookies and technologies, these services may process information about how you interact with FinzoLab, such as pages visited, interactions with the application, device and browser information, and other analytics information.
If you reject optional analytics, these analytics services are not initialized.
You can change your analytics preference at any time through the cookie settings available in FinzoLab.
3. How We Use Personal Data
We may process your personal data to:
- create and manage your account;
- authenticate you;
- provide FinzoLab and its features;
- save and display your learning progress;
- personalize your learning experience;
- provide Finzo AI functionality;
- maintain and improve FinzoLab;
- protect the security of the service;
- detect and prevent fraud, abuse, and unauthorized access;
- respond to support requests;
- understand how FinzoLab is used when you have consented to optional analytics;
- comply with applicable legal obligations.
We do not use personal data for purposes that are incompatible with the purposes described in this Privacy Policy without providing appropriate notice or obtaining consent where required.
4. Legal Bases for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Performance of a contract
We process information that is necessary to provide FinzoLab to you, including account information, authentication information, and learning progress.
Legitimate interests
We may process information where necessary for legitimate interests such as maintaining security, preventing abuse, troubleshooting technical problems, and improving the reliability of the service, provided that these interests do not override your rights and freedoms.
Consent
Where required, we process personal data based on your consent.
For example, optional analytics through Google Analytics 4 and Microsoft Clarity are activated only after you give consent.
You may withdraw consent at any time through FinzoLab's cookie settings.
Legal obligations
We may process personal data where necessary to comply with applicable legal obligations.
5. Service Providers and Third Parties
FinzoLab relies on certain third-party service providers to operate its website and application.
Depending on the functionality you use, these may include providers for:
- authentication and database infrastructure;
- website hosting and infrastructure;
- AI processing;
- analytics;
- security and technical services.
These providers may process personal data on our behalf or independently process certain information in accordance with their own privacy policies, depending on their role.
Supabase
FinzoLab may use Supabase for authentication, database, and related application infrastructure.
Information associated with your FinzoLab account and application activity may therefore be stored or processed through Supabase's infrastructure.
OpenAI
FinzoLab may use OpenAI services to provide AI-powered functionality such as Finzo AI.
When you use an AI feature, information necessary to generate the requested response may be sent to the relevant AI service provider.
Google Analytics 4
FinzoLab uses Google Analytics 4 for optional analytics.
Google Analytics 4 is activated only after you provide consent for analytics.
Microsoft Clarity
FinzoLab uses Microsoft Clarity for optional analytics and understanding how users interact with the application.
Microsoft Clarity is activated only after you provide consent for analytics.
The list of service providers may change as FinzoLab develops. This Privacy Policy will be updated where necessary.
6. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate measures required by applicable data protection law to provide an adequate level of protection, such as relying on an adequacy decision or appropriate contractual safeguards where applicable.
7. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Account and learning information may generally be retained while your account remains active.
If you delete your account, we will delete or anonymize personal data associated with your account within a reasonable period, unless we are required or permitted by law to retain certain information.
Technical and security information may be retained for a limited period appropriate to its purpose.
Analytics information is subject to the retention settings and applicable policies of the relevant analytics provider.
8. Your Data Protection Rights
Subject to applicable law and certain legal exceptions, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- receive certain personal data in a portable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a competent data protection authority.
To exercise your rights, contact us at:
support@finzolab.com
We may need to verify your identity before fulfilling certain requests.
9. Cookies and Similar Technologies
FinzoLab uses cookies and similar technologies that are necessary for the operation and security of the service.
We also use optional analytics technologies through Google Analytics 4 and Microsoft Clarity.
Optional analytics are disabled by default and are activated only after you provide the relevant consent.
For more information, see our Cookie Policy.
10. Data Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no online service can guarantee absolute security.
You are also responsible for keeping your account credentials secure and should notify us if you believe your account has been compromised.
11. Children's Privacy
FinzoLab is not intentionally designed to collect personal data from children who are unable to lawfully consent to the processing of their personal data under applicable law.
If you believe that a child has provided personal data to FinzoLab without appropriate authorization, please contact us.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to FinzoLab, our data processing practices, or applicable legal requirements.
When we make changes, we will update the "Last updated" date at the top of this page.
Where required by law, we will provide additional notice of material changes.
13. Contact
If you have questions about this Privacy Policy or how FinzoLab processes personal data, please contact:
Mark Klemen
support@finzolab.com
If you are located in Slovenia, you may also have the right to lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec).