Privacy Policy
Last updated:
Privacy, explained plainly
Your financial planning information is personal. We have designed Spend Check and Holiday Check around browser-local planning rather than automatic upload of the figures you enter. However, using our websites and buying a product still involves ordinary network requests and, depending on the channel, order and customer-support information.
We want to explain those differences clearly.
Who Is Responsible for Your Personal Information?
Meansway is operated by Zahid Ullah, an individual trader based in Denmark.
For personal information processed by Meansway in connection with this website and Holiday Check, Zahid Ullah, trading as Meansway, is the data controller.
Our business establishment address and contact email are available on our Contact & Legal Information page.
Where Polar Software, Inc. processes personal information in its role as merchant of record, its processing is governed by its applicable privacy information.
The notice covers meansway.com, Spend Check at app.meansway.com and Holiday Check at holiday.meansway.com. Other organizations, including the seller handling your purchase, may be separate controllers for their own services.
Checkout and purchases
Where the checkout for an application is operated by Polar, Polar processes the information needed for that transaction as merchant of record, under Polar’s own privacy policy: https://polar.sh/legal/privacy-policy. Orders placed through Etsy instead fall under the relevant Etsy purchase process and policies.
Meansway may receive information necessary to deliver a product, provide support and address refund queries, such as order reference, purchaser contact information, product purchased and purchase status, depending on the seller’s actual integration and disclosure settings.
Information you enter in the apps
Holiday Check
According to the current implementation notes, Holiday Check saves seasonal planning information in the browser you use, such as gift lines and ideas, purchase information, card nicknames, funding plans, partner split and settings.
Your planning information does not automatically synchronize to another device. You can use the available export/import functions to move a plan yourself. The exported file is stored wherever you save it and should be treated as private because it may contain sensitive financial information.
Offline access is not guaranteed by this notice. Whether the app opens fully without a connection depends on the tested browser, cached resources and the version actually deployed.
Information Stored in Your Browser
Holiday Check stores certain information locally in your browser to support access, preserve your plans and help prevent accidental data loss.
This may include:
- Local access record: Your license key and the time it was last confirmed as active.
- Preserved plan copy: If a previously saved plan fails validation when Holiday Check opens, the application may retain an untouched copy locally so that the original information is not automatically discarded.
These records remain in your browser’s local storage.
Clearing the browser’s site data may remove locally stored information, including saved plans and preserved copies.
Holiday Check: Browser Storage and License Verification
Holiday Check stores your plans and settings in your browser. This information remains on your device and is not sent to Meansway or Polar as part of the license check.
To manage access to Holiday Check, your browser also stores your license key and the time it was last confirmed as active.
When you enter your license key for the first time, an internet connection is required to verify it.
After successful verification, Holiday Check can open without an internet connection, including from the Home Screen where supported by your browser and device.
While online, Holiday Check checks your license key again when the application starts or reconnects, at most once per day.
If a check cannot be completed, such as when your device is offline or the verification service is temporarily unavailable, Holiday Check continues to allow access under its offline-access rules.
If a completed check confirms that the key is no longer active, Holiday Check removes that key from the browser.
When the updated Holiday Check first opens, it also removes the access-code records used by earlier versions.
How License Verification Works
The application sends your license key to our verification endpoint at holiday.meansway.com/api/license.
This endpoint operates through Cloudflare and contacts Polar to check whether the key is valid for Holiday Check.
The verification process returns one of four results: active, not active, issued for another product, or unable to complete the check.
Our verification program does not retain a separate copy of your license key or intentionally write it to application logs.
Cloudflare processes technical request information to deliver and protect the verification service. This includes the use of IP-address-based request counting to help prevent excessive or abusive requests.
Polar records the number of license validations and the time of the latest validation. This information is available to us through our Polar account.
The license verification request does not include your saved plans or their contents.
Necessary Browser Storage
Holiday Check uses browser storage to remember your license key, record when it was last successfully checked and allow continued access when your device is offline.
This storage is necessary for the access and offline functionality of the application. It is not used for advertising or analytics.
You can remove this information by clearing Holiday Check’s browser site data. Doing so may also remove your saved plans and require you to enter and verify your license key again.
Spend Check
Spend Check stores the figures and dates you enter, bills, buffers, basket and parked spends, settings, and a local fingerprint of the access code in your browser’s storage, according to the current design. Its PDF-delivered access code is checked locally. A code carried after a # in a URL fragment is not included in an ordinary HTTP request for that URL, but customers should not share links that contain access credentials.
Browser and device limitations
Browser-local data is not the same as an off-device backup. Someone who can access the same browser profile may also be able to see locally stored records. Clearing site data, using a different browser profile or losing the device may make those records unavailable. Files exported from the apps are not automatically encrypted by the app.
Access Codes and License Keys
Holiday Check uses an individual license key issued through Polar for each purchase. There is currently no numerical device limit.
Spend Check uses an access code supplied with the purchase documentation. The browser stores a fingerprint of that access code to support local access recognition.
Spend Check may use a different licensing system in the future, but no such change is currently promised. Any future system may involve different information and verification processes, which would be explained in an updated Privacy Policy before introduction.
Website and Application Hosting
Our website and applications are hosted through Cloudflare, Inc.
When you access our website or an application, Cloudflare processes technical information needed to deliver and protect the service. This may include your IP address, the requested page or file, the date and time of the request, and information about your browser or device.
Cloudflare processes relevant information on our behalf under the applicable data-processing arrangements. It may also process certain information for its own purposes as described in its privacy documentation.
We use this processing to make our services available, maintain their reliability and protect them against misuse. Where applicable, our legal basis is our legitimate interest under Article 6(1)(f) GDPR in operating and securing our services.
We have not enabled Cloudflare Web Analytics or configured separate request-log exports or storage.
Technical records held by Cloudflare are retained according to its applicable service arrangements, operational requirements and retention policies.
Cloudflare is based in the United States. Where relevant, transfers of personal information are subject to the applicable safeguards described in our section on international data transfers.
In our tests, the public website and applications did not set cookies. Certain Cloudflare security features may use strictly necessary cookies when activated. We do not use cookies for advertising or website analytics.
If the Resource Library search feature launches later, we will update this notice to explain any additional data flows before its release.
When you contact us
If you email [email protected], we receive your email address, message and any details you choose to share. We use this information to answer your question, provide product support or address an order issue.
Please do not send access codes, passwords, full card details, account balances or complete personal financial plans in ordinary email.
Email service provider: Namecheap, Inc., Phoenix, Arizona, United States
Support Email and Accounting Record Retention
When you contact us, we use the information you provide to respond to your request and, where necessary, resolve questions concerning our products or your purchase.
We normally delete routine support correspondence within six months after the last substantive communication, unless it is needed for an ongoing matter or another lawful purpose.
Where correspondence forms part of accounting documentation that we are legally required to retain, we keep the relevant records for five years from the end of the financial year concerned, in accordance with applicable Danish bookkeeping requirements.
Correspondence relating to an unresolved dispute, legal claim or other matter requiring longer retention may be kept for the period reasonably necessary for that purpose.
Support emails are handled through our email service provider, Namecheap.
Purposes and legal bases
| Information | Who or where | Purpose and legal basis | Retention |
|---|---|---|---|
| Checkout, payment, billing and tax information | Polar and its relevant payment providers | Checkout, payment, fraud prevention and legal compliance under Polar’s applicable privacy terms | Polar’s applicable retention rules |
| Order information made available to Meansway | Polar seller dashboard; Meansway as recipient | Product rights and purchase support where contractually necessary; legal obligation for accounting records | Required accounting records: normally five years after financial year-end; other order details according to their actual purpose |
| Support messages | Meansway, using Namecheap Private Email | Customer support, contract performance where applicable, and legitimate interests | Normally six months after resolved correspondence; longer for justified purposes |
| Website request information | Cloudflare | Website delivery, reliability and security; relevant contractual necessity or legitimate interests | Cloudflare’s applicable retention arrangements |
| Holiday Check license key and last successful verification time | Customer’s browser | Store the access credential and support offline use; contractual necessity where applicable, Article 6(1)(b) | Until removed by the application, the user or browser-data deletion |
| License-key verification request | Meansway verification endpoint on Cloudflare; Polar validation service | Confirm the customer’s entitlement to use Holiday Check; Article 6(1)(b) for Meansway where necessary | No separate key storage by the Meansway program; relevant Cloudflare operational processing subject to its own retention arrangements |
| License validation count and last validation time | Polar; visible in Meansway’s Polar account | License administration and validation history | According to the applicable Polar arrangements |
| IP-based security request counts | Cloudflare | Prevent excessive requests and protect the verification endpoint; proposed Article 6(1)(f), subject to a legitimate-interest assessment | Cloudflare’s applicable counter/operational retention |
| Saved plans, settings, access record and preserved failed-validation copies | Customer’s browser | Local product operation and preservation of data | Until removed through application/browser controls or browser-data deletion, subject to actual implementation |
Information Held by Our Service Providers and in Your Browser
Polar handles payment and checkout information in its role as merchant of record and processes that information under its applicable privacy terms. Certain order information may also be made available to Meansway for product administration, customer assistance and legal recordkeeping.
The exact information available to Meansway depends on the services and features enabled in our Polar account.
Spend Check and Holiday Check also use browser-local storage for plans, settings and certain access information. This includes the local access record described above and, where applicable, an untouched preserved copy of a plan that fails validation.
This locally stored information is not automatically sent to Meansway. Further details are provided in the Browser Storage section of this policy.
Service Providers and International Data Transfers
We use selected service providers to operate our website, deliver our digital products, process purchases and respond to customer inquiries.
Some of these providers are established outside the European Union and European Economic Area.
Cloudflare, Inc. — United States
Cloudflare hosts our website and applications and provides related delivery and security services. Where it processes personal information on our behalf, the applicable data-processing arrangements govern that processing.
International transfers are subject to the safeguards applicable to the relevant Cloudflare services. These may include an applicable adequacy decision or Standard Contractual Clauses, depending on the circumstances.
Namecheap, Inc. — United States
Namecheap provides our support email service.
Its published Data Processing Addendum contains provisions concerning international transfers, including Standard Contractual Clauses where applicable.
Polar Software, Inc. — United States
Polar acts as merchant of record for applicable purchases of Meansway digital products. It processes checkout and payment-related information under its applicable terms and privacy arrangements.
Polar also issues the license key for each Holiday Check purchase and responds to license-validation requests.
Polar may also perform other processing activities under separate contractual arrangements, depending on the services provided.
Where personal information is transferred outside the EU or EEA, we assess the applicable transfer requirements and safeguards.
You may contact us at [email protected] for further information about the processing of your personal information and the safeguards applicable to international transfers.
Your privacy rights
Where the GDPR applies, you may have rights to request access to, correction or deletion of your personal data; to request restriction or portability in applicable circumstances; and to object to certain processing. Where processing relies on consent, you may withdraw it. Some rights depend on the legal basis and circumstances, and we may need enough information to identify the relevant records securely.
Email [email protected] to make a request. You can also lodge a complaint with your supervisory authority. In Denmark, that is Datatilsynet.
We cannot directly retrieve browser-local financial records that have never been sent to Meansway. You can manage those records and local backups through your own browser and the app’s available controls.
Children
Meansway’s financial planning products are intended for adults aged 18 and over. We do not knowingly offer these tools to children. If you believe a child has submitted personal information through a Meansway support channel, please contact us so the matter can be reviewed.
Changes and questions
If our actual practices change materially, we will update this policy and provide any notices required by applicable law.
For questions, email [email protected].