Privacy Policy

Applies to the MeFin Android app (com.meshydra.mefin) and this server. Last updated 11 November 2026.

MeFin is operated by Mesh Ariyawansa, Sri Lanka.

The free app (standalone)

Everything you enter stays on your phone. The app has no account and sends nothing about you to us. To show prices it asks public market feeds (the Colombo Stock Exchange, Binance, Coinbase, CAL, Yahoo Finance, open.er-api.com, and Finnhub or Twelve Data if you add your own key) for the symbols you hold; those services see your phone's internet address and the symbol, as any website would. Exchange API keys you add are stored encrypted on the phone and are sent only to that exchange. Android's own device backup may include the app's data in your Google backup if you have that turned on.

MeFin Premium (connected)

If you sign in with Google and subscribe, this server stores:

• your Google account's name, email address, picture link and account id, to know who you are;
• the items you keep in the app (holdings, cash flows, daily net worth, salary history, settings), so they can follow you to another phone;
• your Google Play purchase token and its expiry date, to know your subscription is active;
• what you post in the Community (your chosen display name, posts, comments, likes, reports and blocks);
• short-lived technical logs (time, address, request) to keep the service running and stop abuse.

Exchange API keys, your app PIN and your data-source keys never leave your phone. Share symbols you look up are sent to this server, which asks a market data provider on your behalf.

We do not sell your data, show ads, or share it with anyone except Google (sign-in and payments) and the hosting provider that runs the server (HostHatch, Singapore). Data is encrypted in transit. Payments are handled by Google Play; we never see your card.

Your choices

• Switch to standalone at any time in Settings: the app stops contacting this server.
• Delete your cloud copy, or your whole account, in Settings > MeFin Premium, or see Delete account. Deletion is immediate and permanent; routine server backups are overwritten within 30 days.
• Save a backup file of everything in Settings > Backup and data.

Community

Posts are visible to every Community member under the display name you choose. Do not post personal or financial details you want kept private. You can report a post and block a member; we remove content and accounts that break the Terms.

Children

MeFin is not directed at children under 13 and Premium is for adults.

Changes

If this policy changes in a way that matters, the app will tell you.

Contact: the developer contact shown on Google Play