Privacy Notice

Last updated: November 1, 2026

This Privacy Notice explains how GenFIRE collects, uses, discloses, retains, and protects personal data for the current app. GenFIRE is currently provided in English.

Controller And Contact

GenFIRE is operated as an individual project based in Malaysia. The operator's personal name and residential address are not published in the app. For privacy requests, contact genfire.my@gmail.com.

Information Collected

• Calculator and plan data: assets, liabilities, income, expenses, savings, assumptions, selected currency, FIRE targets, preferred FIRE year, projection results, saved plan names, and related planning inputs. This information can be financially sensitive, so only enter what you are comfortable storing.
• Local browser data: plans, preferences, session state, visitor identifiers, and other settings stored in your browser so the app can remember your inputs and settings.
• Account and profile data: email address, authentication identifiers, account creation date, display name or avatar initials, login provider, session information, and saved plan records if you create an account or use Google login.
• Feedback and rating data: topic, message, optional star rating, optional reply email, user identifier if logged in, page URL, timestamps, and delivery status if feedback is emailed to the operator.
• Donation and payment data: Stripe checkout identifiers, amount, currency, payment status, customer email if provided to Stripe, and receipt or webhook records. Full card details are handled by Stripe, not GenFIRE.
• Technical, analytics, and visitor data: browser, device, approximate region, page views, visitor count, calculator starts and refreshes, signups, logins, feedback submissions, donation clicks, performance information, error logs, and security events.

Calculator Inputs And Results

The homepage's quick target example runs in your browser. GenFIRE does not save those example inputs, copy them into your financial plan, or include their amounts in analytics events. Clicking a homepage planning button may record a calculator_start event with a fixed button-location label, not the values you entered.

Calculator totals, weighted returns and projections are derived from the planning inputs and settings you provide. These settings include projection inclusion choices, interest and return assumptions, repayment schedules, and the selected start month and year. A display-only label describes how a result is shown; it does not mean that the underlying plan data is public or excluded from the local storage and optional saved-plan syncing described in this notice.

Grey sample values and general help-popup examples are explanatory text, not information obtained from your accounts or other users. Dynamic explanations may include amounts calculated from your current inputs. Changing an inclusion checkbox changes the projection classification, not whether that item remains in the plan. Resetting current inputs does not itself delete separately saved account plans; use the available deletion controls or contact us for assistance.

How Information Is Used

Data is used to operate the calculator, remember local inputs, authenticate users, sync saved plans across devices, store and retrieve wellbeing entries at your request, process optional donations, respond to feedback and ratings, count visitors, understand app usage, maintain an internal admin dashboard, secure the service, troubleshoot errors, improve user experience, and comply with legal, tax, accounting, and record-keeping obligations.

Optional Wellbeing Entries

The free Wellbeing tools focus on depression and low mood, with a general check-in and optional reflection practices. Saved entries contain your account identifier, entry date, focus and practice identifiers, optional mood, energy and tension ratings, journal text, planned steps, reflections, and save timestamps. Focus and practice identifiers describe an exercise, not a diagnosis or health assessment. Entries may contain sensitive health information; include only what you choose to store.

The example answers shown below questions are fictional prompts to help you reflect. They are not personalised assessments, are not taken from other users' entries, and are not automatically inserted into your writing or saved as your answers.

Unsaved entries stay in the current page's memory. GenFIRE does not save them in browser storage or carry them through a login redirect; leaving, reloading, or logging out clears them. There is no automatic journal saving. To save a new entry or changes to an existing entry, you must log in, select the storage-agreement checkbox, and submit the save request. If you do not agree, you may still use the tools without saving. Saved entries and the version of that agreement are processed through Vercel and stored by Supabase so you can revisit, edit, and delete them across devices.

Access controls restrict saved entries to the owning account in the app. They are excluded from public pages, shared results, financial plans, and the app's admin dashboard. The Wellbeing page does not load analytics scripts or send journal entries to an AI provider. Normal hosting, authentication, and security logs may still be generated. Entries are not monitored, and entering a request for help does not alert the operator or emergency services.

Saved storage is not end-to-end encrypted. The website owner and service providers with authorised infrastructure access may technically access stored data to operate and secure the service. Account privacy does not mean that only you hold the decryption keys. Entries remain until you delete them or delete your account; deletion removes them from the active database, while provider backups may retain copies for their configured retention period. You can withdraw your choice to store wellbeing data by deleting your saved entries and stopping further saves, or contact genfire.my@gmail.com for help. Keep your device and login secure, especially on shared devices.

Legal Basis And Consent

Depending on your location, processing may be based on consent, contract performance, legitimate interests, or legal obligations. For Malaysia, this notice is intended to support the Personal Data Protection Act framework, including notice and choice, disclosure, security, retention, data integrity, and access principles. This notice does not replace any consent required by applicable law. Visiting the site or creating an account does not by itself authorise storing wellbeing entries; that requires your separate, explicit storage agreement.

Sharing And Processors

GenFIRE may use service providers for hosting, database, authentication, payment processing, email delivery, analytics, OAuth login, performance measurement, security, and support. Current or planned providers may include Vercel, Supabase, Stripe, Resend, Google OAuth, Google Analytics, and Vercel Speed Insights. Private calculator inputs are not sold. Saved plans and wellbeing entries are not sent to AI providers. Feedback you submit is visible to the operator and may be processed by the email provider; account, payment and technical information is handled by the services described in this notice.

International Transfers

Service providers may process data in Malaysia or in other countries. GenFIRE relies on the contractual, security, and data-transfer safeguards offered by those service providers where available.

Retention

Local data remains in your browser until you clear it or reset the app. Saved account plans are kept while your account is active or until you delete them, subject to backups, security, dispute, and legal needs. Feedback and support records may be kept for up to 24 months unless a longer period is needed. Donation and payment records may be retained for accounting, tax, audit, dispute, and legal purposes, commonly up to 7 years where applicable. Analytics and performance records are retained according to provider settings and business needs.

Security

Reasonable safeguards are used, including HTTPS, server-side secret handling, Supabase row-level security, access controls, and limited production access. No online service can guarantee absolute security.

Your Choices And Rights

You can use the calculator and unsaved wellbeing tools without an account, clear local browser data, choose whether to create an account, delete saved plans where the app allows, revisit or delete saved wellbeing entries, and contact the operator to request access, correction, deletion, withdrawal of consent, or other rights available under applicable law. Some requests may be limited where data must be kept for security, legal, accounting, or dispute reasons.

Cookies, Analytics, And Advertising

The app uses browser storage for preferences, saved local plans, authentication, and visitor measurement. Google Analytics, Vercel Speed Insights, and similar tools may use cookies or comparable technologies depending on provider settings. GenFIRE currently does not run Google AdSense or affiliate tracking. If advertising or affiliate tracking is enabled later, GenFIRE will update this notice and add consent controls where required. The Wellbeing journal page is excluded from analytics scripts; other public pages, including Resources and these legal pages, may still use the tools described here. Journal text is not included in the app's analytics events.

Children

GenFIRE is intended for users aged 18 and above and should not knowingly collect children's personal data.

Contact

For privacy requests, contact genfire.my@gmail.com. We aim to review privacy messages within 14 business days where practical.