LYNGrip
Privacy statement
Last updated: 11 November 2026
Who we are
LYNGrip is an app for keeping track of your personal finances. LYNGrip is responsible for processing your personal data as described in this statement. Questions? Email privacy@lyngrip.nl.
What data we process
Account data: your name, email address and your password (only as an irreversible hash). If you sign in with Google, we receive your name, email address and profile picture. Financial data you enter yourself, such as transactions, fixed expenses, savings goals, accounts and investments. Technical data per login session: IP address and browser type, to secure your account. If you take out a subscription, we store the PayPal subscription ID, your plan, its status and when payments were made. We never see or store your PayPal login, bank account or card.
Why we process it
We only use your data to make the app work: your account, your overviews and sending necessary emails (confirming your email address, resetting your password). The legal basis is performing our agreement with you (Art. 6(1)(b) GDPR). We also use login data and IP addresses to prevent abuse (legitimate interest, Art. 6(1)(f) GDPR). We sell nothing, show no ads and do not track you.
Who we share data with
Only with processors needed to deliver the service, under a data processing agreement: our hosting provider (servers in the EU) and Brevo (sending email, EU). If you sign in with Google, we exchange data with Google for that purpose. For prices we only request ticker symbols from external price services; no personal data is sent. Payments are handled by PayPal (Europe) S.à r.l. et Cie, S.C.A.; for this we give PayPal your email address and chosen plan. PayPal is responsible for the payment itself under its own privacy statement and keeps payment records for the legally required periods.
Push notifications
With Pro you can turn on reminders per device. We then store the address your browser creates for notifications and the browser type. The content of a notification is encrypted in transit; your browser's push service (Google, Apple, Mozilla or Microsoft) only sees that there is a notification, not what it says. By default, notifications don't mention amounts. If you turn notifications off or delete your account, we delete the address immediately.
How long we keep data
As long as your account exists. When you delete your account, we immediately erase all your data from the database. Encrypted backups are automatically overwritten after at most 30 days. Login sessions expire after 30 days without use.
Cookies
We only use one functional cookie to keep you signed in (up to 30 days, extended while you use the app). Your light or dark theme preference is stored in your own browser. We use no analytics or tracking cookies, so no cookie banner is needed.
Security
All connections are encrypted (HTTPS). Passwords are only stored hashed. You only ever see your own data, and administrators cannot view your financial data either.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. In Settings you can download all your data and delete your account with all its data yourself. For other requests, email privacy@lyngrip.nl; we respond within one month. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If we change this statement, we update the date at the top. For important changes we will let you know by email.