Last updated: 26/09/2026

VIS.finance™ is committed to protecting the privacy of our users. Your data belongs to you. It is private by design: we do not sell it, we do not share it for advertising, nobody reads it in the ordinary course of running the service, and only you decide who to share it with. This page explains how we collect, use, store, and protect personal information, and what rights individuals have regarding their data. We comply with the New Zealand Privacy Act 2020 and with the other privacy laws that apply where our users live, as set out below.

1. What Information Is Collected

VIS.finance™ may collect personal information such as:

  • Full name and email address
  • Financial information relevant to the service
  • Account and transaction data from bank accounts you choose to connect
  • Communication records (emails, notes, and in-app messages)
  • How you found us: the campaign link and referring website you arrived from, recorded once at signup so we can measure our advertising
  • Any other information provided voluntarily

2. How Information Is Collected

Information is collected directly when you:

  • Register for or use this app
  • Communicate with us by email or secure in-app messaging
  • Provide documents or details relevant to the service
  • Choose to connect a bank account through our open banking provider (see section 6)

3. How Information Is Used

Personal information is used solely to:

  • Provide our financial tools and services appropriate to your goals and circumstances
  • Understand your financial position, objectives, and preferences
  • Develop and maintain suitable financial strategies
  • Comply with legal and regulatory obligations
  • Communicate regarding services provided
  • Keep the service secure and measure our advertising

It is your responsibility to ensure that all personal and financial information provided is accurate and kept up to date. VIS.finance™ does not share information except to deliver services with your authorisation or where required by law.

4. Who Can See Your Information

Your data is yours alone. VIS.finance™ does not read, sell, or share it, and no third-party or artificial-intelligence service ever receives it. It is protected by encryption, role-based access controls, and audit logging.

All analysis in the app is done automatically by software: it summarises your own numbers so you can see your position more clearly. Nobody reads your financial data in the ordinary course of running the service. A small number of authorised staff necessarily hold administrative access to the systems your data lives on, so the service can be operated, secured and supported; that access is restricted, protected by multi-factor authentication, and recorded in an audit log, and it is used only where needed to run the service, keep it secure, help you when you ask us to, or meet a legal obligation.

Beyond that, the only way anyone else sees your data is if you choose to share it. If you engage a VIS.finance™ adviser, you are sharing your information with your adviser so they can advise you – that is your decision, made by you in the app, and every adviser access is recorded in an audit log. Advisers are bound by the Privacy Act 2020 and professional confidentiality. Because VIS.finance™ is a licensed financial advice provider, the Financial Markets Authority, which licenses us, may inspect or obtain our advice records, including information about clients who engage an adviser, as part of its monitoring.

5. Outside Services You May Use With Your Account

Your data in the app is never sent to any third party. A few outside services interact with your account only at its edges, and none of them can see inside the app:

  • Payments – Stripe. When you pay for a plan, you enter your card with Stripe, the payment provider, directly, under Stripe’s own terms and privacy policy – the same payment provider used by major platforms worldwide. Your card details go to Stripe, not to us – and your app data never goes to Stripe.
  • Google Sign-In (optional). If you choose to log in with your Google account, Google only confirms who you are. Nothing in the app is visible to Google.
  • Bank connections (optional) – an authorised New Zealand open banking provider (currently Akahu). You authorise it directly, and data flows one way: into your dashboard in New Zealand. See section 6.
  • Account emails. We send verification links, password resets, and receipts to your email address. These emails never contain your financial information.
  • Website measurement. Our public website vis.finance (not the app) uses three analytics and advertising-measurement tools: Google Analytics, the Meta pixel, and Yandex Metrika, which includes session replay – a recording of how a visitor moves through the website’s pages, such as scrolling and clicks. They are described on the website itself, and they see nothing inside the app.

We never send your financial data, uploaded documents, or fact-find answers to any artificial-intelligence service or third-party analytics platform.

On This Website: Cookies and Advertising Measurement

The vis.finance website (not the app) uses three analytics and advertising-measurement tools: Google Analytics, which measures how visitors use the website; the Meta (Facebook) pixel, which measures how our advertising performs (for example, whether a visit came from an ad) and shares standard web-visit data with Meta Platforms; and Yandex Metrika, which measures website usage and includes session replay – a recording of how a visitor moves through the website’s pages, such as scrolling and clicks. Each provider processes that data outside New Zealand under its own privacy policy. You can limit these tools through your browser’s cookie settings, a content blocker, or your Meta ad preferences. None of them is present inside the VIS.finance™ app, and no financial information you enter in the app is ever shared with them.

6. Bank Account Connections

The optional live bank connection is provided by an authorised third-party New Zealand open banking provider, currently Akahu. When you choose to connect a bank account:

  • You authorise the connection directly with the provider, under the provider’s own terms and privacy policy (for Akahu: akahu.nz/end-user-terms and akahu.nz/privacy-notice)
  • Your bank login credentials are entered with the provider or your bank only. VIS.finance™ never receives, sees, or stores your bank username or password
  • We receive only the account and transaction data you authorise, over an encrypted connection, and store it encrypted in New Zealand
  • You can revoke a bank connection at any time from within the app. Revoking stops new data flowing; account and transaction data already imported stays in your dashboard under your control, and is deleted when your account is deleted or on request (see section 12)

The provider may change; any replacement will also be a New Zealand open banking provider, and this policy will be updated.

7. Where Your Data Lives

Your financial data lives on our secure, encrypted servers in New Zealand. Every night we make an encrypted backup copy, readable only with keys we hold, and keep it on a server we control in Germany, where it is deleted on the same short schedule as the backup copy kept in New Zealand; no hosting provider can read either copy. Only you control your data – you decide what goes in, who sees it (section 4), and when it is deleted (section 12). The outside services listed in section 5 (card payments with Stripe, the optional Google sign-in, and delivery of account emails through our mail provider, whose servers are in the European Union) operate internationally and receive only the minimum described there – never your financial data – and are protected by privacy safeguards comparable to the New Zealand Privacy Act 2020 (Information Privacy Principles 11 and 12).

8. Storage and Security

User data entered in this app is stored on secure, encrypted servers in New Zealand, and sensitive fields and uploaded documents are additionally encrypted at rest. Backup copies are encrypted before they leave our New Zealand servers and can be read only with keys we hold (see section 7). Access is protected by password, multi-factor authentication, and role-based controls.

9. Your Rights

Wherever you live, you have the right to:

  • Access personal information held by VIS.finance™
  • Request correction of any inaccurate or outdated information
  • Request deletion of your information or your account (see section 12)

To exercise these rights, contact us at vis.finance/contact. If you are not satisfied with our response, you can complain to the New Zealand Office of the Privacy Commissioner (www.privacy.org.nz, phone 0800 803 909, or PO Box 10 094, Wellington 6140) or, if you live elsewhere, to the data-protection authority in your own country (see section 10).

10. If You Are in the EU, UK, or Another Country with Data-Protection Law

Where the EU General Data Protection Regulation, the UK GDPR, or a similar law (such as Brazil’s LGPD) applies to you, Vital Ideal Solutions Limited (trading as VIS.finance™) is the controller of your personal information, and the legal bases we rely on are: performance of our contract with you (providing the app and its tools); your consent (the optional bank connection and the optional Google sign-in); compliance with our legal obligations (record-keeping required of a licensed financial advice provider, and tax and audit rules); and our legitimate interests (keeping the service secure, preventing abuse, and measuring our advertising), balanced against your rights.

In addition to the rights in section 9, you have the right to receive a copy of your data in a portable format, to ask us to restrict processing, to object to processing based on legitimate interests, and to withdraw consent at any time where processing is based on consent – withdrawing consent does not affect processing that happened before you withdrew it.

Your data is hosted in New Zealand. The European Commission has formally decided that New Zealand provides an adequate level of data protection, and the United Kingdom recognises New Zealand adequacy as well, so your data may lawfully be held here. You also have the right to lodge a complaint with the supervisory authority in the country where you live.

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) applies to you. Requests and complaints about your personal information go to vis.finance/contact, which is our channel for that purpose, and Vital Ideal Solutions Limited relies on the LGPD’s simplified regime for small-scale processing agents.

11. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we delete it.

12. Retention and Deletion of Data

You may request deletion of your personal information or your account at any time by contacting vis.finance/contact, or by following the steps on our account deletion page, which also explains how to delete your account yourself from inside the app. If you have not received regulated financial advice from us, deletion means your data is permanently removed from our servers. Where you have received regulated financial advice, New Zealand law requires us to retain the advice records for at least seven years; those records are securely deleted or anonymised once the legal retention period ends, and everything outside them is deleted straight away.

13. Updates to This Policy

This page may be updated as the service evolves. If a change is material, we will tell you by email or in the app before it takes effect. The most recent version will always be available in the app.

14. Contact

The person responsible for personal information at VIS.finance™ is the Director of Vital Ideal Solutions Limited, reachable at vis.finance/contact. To ask about this policy or your personal information, contact us there.