Timón privacy policy
Last updated: 4 October 2026
In short
- Your financial plan never leaves your device. Income, costs, assets, scenarios and the bank statements you import are stored and processed only in your browser. We don't receive them, we can't see them and we can't recover them.
- There are no user accounts and no database holding your numbers. All you need to use Timón is a licence key.
- We don't use cookies, analytics or advertising.
- Payments are handled by Lemon Squeezy. We only process your purchase details (name, email, country) and your licence key.
Who is responsible
| Controller | [Name or company name] |
| NRT (Andorran tax number) | [NRT] |
| Address | [Full address, Andorra] |
| Privacy contact | hello@timon.financial |
| Website | timon.financial |
We process data in line with Andorra's Qualified Law 29/2021 of 28 October on personal data protection and, where it applies to customers in the European Union or the United Kingdom, with Regulation (EU) 2016/679 (GDPR) and the UK GDPR.
What data we process and why
| Data | Where it comes from | Why | Legal basis | How long |
|---|---|---|---|---|
| Name, email, country, any billing details you give, plan, amounts, dates and subscription status | From Lemon Squeezy, when you buy | To manage your subscription, send your key, handle support and meet tax and accounting duties | Performance of the contract and legal obligation | While the subscription is active and, after that, as long as tax and commercial law requires |
| Licence key, activation ID, a generic device name (for example "Timón · macOS") and the request's IP address | From the app, when you activate the key and every 7 days | To check that the subscription is active | Performance of the contract | Our server doesn't store the key: it only passes it on to Lemon Squeezy. The hosting provider keeps technical logs for a short period |
| Symbols of the assets you track at a live price (for example BTC or AAPL) and the request's IP address | From the app, if you add crypto, shares or gold with a live price, every few minutes while you use it | To give you the current price | Performance of the contract | Our server doesn't store them. It never receives how much you hold or what it's worth. The hosting provider keeps technical logs for a short period |
| Name, email and the content of messages you send us | From you, when you write to support | To reply and solve your query | Performance of the contract and legitimate interest in helping you | Until the query is resolved, plus 12 months |
| IP address, browser and time of access | Hosting technical logs | To serve the website and protect it from abuse | Legitimate interest in keeping the service secure | A short period, depending on the provider's settings |
We don't make automated decisions about you or build profiles.
Data that stays on your device
Everything you enter in Timón is saved in your browser's storage (localStorage and IndexedDB) on the device you use. That includes:
- your plan: income, costs, allocation, scenarios, accounts, debts, goals and projects;
- your businesses and properties, with their income, costs and tax;
- how much crypto, shares or gold you hold and what it's worth;
- earlier versions of your plan, which the app saves automatically so you can restore them;
- the bank statements you import, which are read in your browser and never sent anywhere.
If you turn on automatic backup, the app writes your plan to a file on your computer that you choose. Backups you download are your own files: you decide where to keep them and who to share them with.
You can delete all of this data at any time from Settings → Delete all my data, or by clearing the site's data in your browser. Because we have no copy, if you clear your browser or lose your device without a backup, we can't recover your plan.
Cookies and local storage
Timón doesn't use cookies. Your browser's local storage is used only so the app works (saving your plan, your key and your preferences), so it doesn't need your consent. There are no analytics tools, tracking pixels or adverts. The app doesn't load third-party resources: the fonts and the Excel reader are served from our own domain, and live prices go through our own server.
Who it's shared with
| Recipient | What they do | More information |
|---|---|---|
| Lemon Squeezy, LLC (USA) | Sells the subscription on our behalf as reseller (merchant of record): takes payment, issues invoices, handles sales tax, and issues and checks licence keys. It processes purchase data on our behalf and, for its own legal duties as seller, as a controller | Lemon Squeezy privacy policy |
| Vercel Inc. (USA) | Hosts the website and the function that checks the key | Vercel data processing addendum |
| CoinGecko, Twelve Data and the European Central Bank (via Frankfurter) | Provide crypto, stock and metal prices and exchange rates to euros. Our server asks them for the price of a symbol; they never get your IP, how much you hold or any data about you | CoinGecko · Twelve Data |
| [Email provider, e.g. IONOS] | Support email provider | Their privacy policy |
| Public authorities | Only when the law requires it | — |
We don't sell your data or share it for advertising.
International transfers
Lemon Squeezy and Vercel are in the United States. Transfers are made with the safeguards the law provides, such as the standard contractual clauses approved by the European Commission that are included in their data processing agreements. Andorra has an adequacy decision from the European Commission, so data from customers in the European Union keeps an equivalent level of protection here.
Your rights
You can ask us at any time for:
- access to the data we hold about you;
- correction of anything inaccurate;
- deletion, when it's no longer needed;
- objection to, or restriction of, any processing;
- portability, meaning a copy in a commonly used format.
Email hello@timon.financial from the address you bought with and tell us which right you want to use. We'll reply within one month. Remember that we don't have your financial plan: it lives only on your device and you control it.
If you think we haven't handled your request properly, you can complain to the Andorran Data Protection Agency (www.apda.ad) or, if you live in the European Union or the United Kingdom, to the data protection authority in your country.
Security
- The website and the key check only work over an encrypted connection (HTTPS).
- We don't keep your numbers on any server, so they can't leak from us.
- The app can be installed and works offline.
- We recommend protecting your device with a passcode and keeping your backups somewhere safe.
Children
Timón is a paid service for people aged 18 and over. We don't knowingly process children's data.
Changes to this policy
If we change this policy, we'll publish the new version on this page with its date. If the change is significant, we'll email everyone with an active subscription.
Contact
For any privacy question: hello@timon.financial.