AYFI Privacy Policy

Last updated: 17 October 2026 · Version: 2.2

This policy explains what personal data AYFI processes when you use the web app (app.ayfi.pro), the Telegram Mini App and bot, and the ayfi.pro website: why we use it, who we share it with, how long we keep it and what rights you have.

1. Controller

The controller of your personal data is AYFI. For any question about your personal data, write to us at hola@ayfi.pro.

AYFI is an information tool for organising your tax data and producing indicative calculations. It does not replace a tax adviser or a gestor (a Spanish tax and administrative agent), it does not assess your individual situation and it does not file returns on your behalf: you, or someone you choose, file them in the Sede electrónica (the online office) of the Agencia Tributaria, the Spanish tax authority. AYFI does not ask for your digital certificate, your Cl@ve login or a power of representation, and it sends nothing to the Agencia Tributaria.

2. What data we process

We only process the data you give us or that is generated when you use the service. Many fields are optional: if you leave them empty, the related calculation is made without them or not made at all.

2.1. Account and sign-in

• Your email address and password, if you sign up by email. The password itself is not stored: we keep only its cryptographic hash (Argon2).
• If you sign in with Telegram: your numeric Telegram ID, the name shown on your Telegram profile and the language of your Telegram app. We do not store your Telegram username or your phone number.
• Your name, and the language and theme (light or dark) of the app.
• Your notification preferences (tax deadlines; by Telegram, by email or both).
• Whether you accepted the opening notice that AYFI is an information tool, with the date and the version of the text.
• Your consent to receive AYFI news and offers by email: when you gave it, on which screen and, if you withdrew it, when.
• Session data: the identifiers of your open sessions, stored as cryptographic hashes.

2.2. Tax profile

• Your NIF or NIE (Spanish tax identification number), encrypted in the database.
• Whether you are self-employed or an employee, your autonomous community, your income assessment regime, your IAE heading and section (the Spanish register of business activities), the date your activity began and whether you had any activity in the previous twelve months.
• Details of your home for the share of household costs: total floor area, the area used for your activity and whether you own or rent it; whether you apply the IVA (Spanish VAT) pro-rata rule and whether you are under the special regime for workers posted to Spain (the "Ley Beckham").
• Data used to work out which tax forms apply to you: the days you spend in Spain, where your family lives, whether you have another tax residence, whether you hold assets abroad worth more than €50,000, why you need proof of income, and how many people are in your family.
• The yearly data you enter to estimate your Renta (Spanish annual income tax return), for example your age on 31 December.

2.3. Family

If you add them, for each family member: name, date of birth, relationship, degree of disability, whether they attend nursery, whether they live with you, whether they reside in Spain, their annual income, whether they file their own return and, where relevant, the date from which the mother meets the conditions for the maternity deduction. This data is used only to calculate family allowances and deductions. Before entering another person's data, make sure you are entitled to do so.

2.4. Expenses and income

• Expenses: date, amount, IVA, withholdings, category, deductible percentages, payment method, currency and exchange rate, country, supplier (name and NIF) and any description you write.
• Income: date, amount, IVA rate, IRPF (income tax) withholding, client, the client's NIF or VAT number, country, whether the client is a business, type of transaction, invoice series and number.
• The change history of each expense (what changed and when), so that the record book is reliable.

2.5. Documents

• The photos of receipts and invoices and the PDFs you upload, through the app or by sending them to the Telegram bot. Photos are re-encoded on upload, which removes their metadata (EXIF), including the phone's location.
• The data read from each document and the data you confirm.
• The filing receipts from the Agencia Tributaria that you choose to keep in AYFI.
• When you upload an invoice you issued as a PDF to fill in an income entry, we read its text to suggest the fields; the file is not kept.

2.6. Bank statements

If you import a statement (CSV, text or Excel), we keep the file name and the transactions it contains (date, amount and description), together with what you ticked when reviewing them. AYFI does not connect to your bank.

2.7. Calculations and filings

• Quarterly and annual calculations, with a copy of the data and of the version of the rules they were made with.
• The record of what you filed in the Sede: form, period, date, receipt number, Código Seguro de Verificación (secure verification code), payment method (direct debit, NRC, acknowledgement of debt or no payment), the boxes you filed where they differ from AYFI's, and your box-by-box check.

2.8. Payments

Plan, period, amount, currency and status of each payment. If you pay by card, the customer ID Stripe gives us; if you pay with Telegram Stars, the ID of the charge in Telegram. AYFI never sees or stores your card details.

2.9. Messages

What you send us through "Something's not right" (type of report, message and screen), the team's internal notes on that report, and the notices we send you (deadlines, end of a paid period).

What you write to us in the support chat on ayfi.pro and in the app: your messages and any files you attach, the contact details you type in yourself (name, email) and, if you are signed in, your account identifier, plan and app language, so that we know who is writing. The team's replies are kept with the conversation.

2.10. Technical data

• The server records each request with the IP address, the date and the address requested.
• Some actions are kept in an audit log with the date and IP address: giving or withdrawing marketing consent, adding an email address, unlinking Telegram, closing all your sessions, recording a filing and asking for your account to be deleted.
• To limit abuse, we count requests per IP address, per account and per email address over a short window (one hour at most).

3. Health data

Some data may reveal information about health: a family member's degree of disability, expenses you place in categories such as health or disability, and pharmacy receipts. We only process this data if you enter it, and only for the calculation that needs it. If a receipt is from a pharmacy, AYFI does not keep the product lines and does not categorise it automatically. To read a photo or PDF you upload, AYFI sends the image to the reading service named in section 5, which keeps nothing. Pharmacy receipts go too, because whether a receipt is a pharmacy's is only known once it has been read. You can delete this data at any time.

4. Why we use your data and on what legal basis

AYFI does not make automated decisions that have legal effects on you: the calculations are indicative and nothing is filed unless you file it. We do not use your data for advertising and we do not build marketing profiles.

5. Who we share your data with

We do not sell your data or pass it on for marketing purposes. Only the following providers are involved, each for its own task:

Telegram and Stripe also process data on their own account, as controllers, under their own privacy policies. The web app loads a file from Telegram (telegram.org) that the Mini App needs, so Telegram receives your IP address and your browser's technical data when you open it.

None of them uses your documents to train models.

Within AYFI, only authorised staff can access account data, through a panel protected by a server access password and by each team member's personal account, with a password and a second factor. We will also disclose data to authorities or courts where the law requires us to.

6. Transfers outside the European Economic Area

• Namecheap (United States) and Stripe (processing in the United States): the transfer relies on the European Commission's standard contractual clauses included in each provider's data processing terms and, for Stripe, also on the EU-US Data Privacy Framework.
• Telegram: when you use the bot or the Mini App, your data passes through Telegram's servers under Telegram's terms. The new-account cards the team receives also pass through Telegram.
• OpenRouter (United States): the transfer relies on the European Commission's adequacy decisions and on standard contractual clauses, as OpenRouter's privacy policy sets out.

7. How long we keep your data

8. Your rights

You have the right to access your data, have it corrected or erased, restrict or object to its processing, take it with you (portability), and withdraw any consent you have given at any time, without affecting processing carried out before.

You can exercise many of these rights yourself in the app:

• Download my data: a ZIP file with everything AYFI holds about you in JSON and CSV, plus the photos we still keep. For security, your NIF is not included; if you need it, ask us.
• Delete my account: the account stops working immediately and is deleted entirely after 30 days. If you have a card subscription, it is cancelled so that you are not charged again.
• Correct your data by editing it in the app.
• Communications: marketing consent and notices are switched on and off in Settings; each notice email also contains a link to stop receiving them.

For anything else, write to hola@ayfi.pro from your account's email address or giving your Telegram ID. If we have reasonable doubts about your identity, we may ask for further information. The GDPR gives us one month to reply, which may be extended by two further months in complex cases.

If you believe we have not handled your data properly, you can complain to the Agencia Española de Protección de Datos (the Spanish data protection authority; www.aepd.es; C/ Jorge Juan, 6, 28001 Madrid).

9. Security

• All connections are encrypted (HTTPS with HSTS).
• AYFI runs on a dedicated server used only for AYFI, with a firewall and administrative access by key only.
• NIFs and the team's second-factor secrets are stored encrypted in the database; passwords only as Argon2 hashes.
• The application logs remove email addresses and NIFs before they are written.
• Photos are re-encoded on upload, which removes their metadata and location.
• Download links for your data and for the report expire after 10 minutes.

No system is infallible. If a security breach occurs that puts you at risk, we will act as the GDPR requires, including notifying the authority and, where appropriate, you.

10. Cookies and storage on your device

AYFI uses only what is strictly necessary for the service to work, which does not require consent (Article 22.2 LSSI-CE, the Spanish e-commerce act):

We do not use advertising, tracking or analytics cookies. The support chat loads only when you open it, on ayfi.pro or in the app: until then nothing of it reaches your browser. Once open, it sets the cookies above and keeps the conversation in the browser storage of the chat window itself, because without them the conversation would be lost on the next page. The website sets no other cookies, and in the Telegram Mini App the only cookies are the chat's.

11. Children

AYFI is intended for people aged 18 or over. We do not knowingly collect data from children as users. If you know that a child has created an account, write to us at hola@ayfi.pro and we will delete it. Data about children that a user adds as family members is processed only for that user's calculation.

12. Changes to this policy

When the way we process your data changes, we will update this policy with a new date and version. If the change is significant, we will tell you by email or in the app before it applies.