Privacy notice

What this service handles

If you create an online Not Your Phone account, this service processes your verified email address, a random account identifier, passkey public-key credential records and their counters, and hashed session tokens. Passkey private keys remain with your credential provider. The service does not receive your Android screen-lock PIN, device-only app password, schedules, or lock history.

Why it is used

Email is used to verify account ownership and confirm a deletion request. Passkey records are used to verify sign-in. Short-lived access tokens and rotating refresh tokens maintain a session; only token hashes are stored. Hashed, time-limited rate-limit entries help reduce abuse.

Separate from FinanceFD website accounts

Not Your Phone uses its own account database and the relying-party domain notyourphone.financefd.com. It does not sign you into FinanceFD’s website or reuse FinanceFD website passkeys, cookies, account sessions, favorites, or profile data.

Service providers and retention

Cloud hosting and the Resend email-delivery service process the data needed to operate the account service. Verification challenges and expired registration proofs are removed after their short validity period and cleanup window. A session expires no later than 30 days after sign-in. Account and passkey records remain until the account is deleted, subject to limited backup or security-log retention required to operate and protect the service.

Your choices

Account creation is optional; the app’s local Guest mode remains separate. You can request account deletion at any time using the public deletion page. Deleting a Not Your Phone account does not cancel a Google Play subscription; manage billing separately in Google Play.

For privacy or account-deletion questions, contact jamahlmackey@mackeypt.com.