Terms of Service and Privacy Policy
Effective date: 7 October 2026
1. Acceptance of terms
By using Parnuan, you confirm that you have read, understood, and accepted these terms. If you do not agree with them, please do not use our service.
2. Definitions
"We" means Intentions Labs Co., Ltd. and its affiliates.
"You" means a user of Parnuan, including customers and visitors.
"Service" means the Parnuan application and all related services.
"Personal data" means information that can identify a person.
3. Description of the service
Parnuan is an expense tracking application that helps users manage personal, group, household, and business finances through easy-to-use features and personalized insights.
4. User accounts and authentication
Creating an account
Parnuan currently uses LINE as its main authentication provider. You need an active LINE account and must allow access to your basic profile information (display name, profile picture, user ID, and language setting). We may add more authentication providers in the future.
Account security
We do not store login credentials. Account security is handled by your authentication provider. You are responsible for keeping your authentication provider account secure.
Account management
- We can move your account to a different authentication provider account on request.
- You can delete your account yourself in the app settings.
- We reserve the right to suspend or terminate accounts that violate these terms.
Authentication provider security disclaimer
We are not responsible for security problems with your authentication provider account, platform vulnerabilities, or user negligence in keeping that account secure.
5. Data collection and processing
Data we collect
- Your LINE display name
- Data you enter (expenses, budgets, and more)
- App usage patterns and device information
- Location data (with your explicit consent)
Data we access but do not store
Your LINE profile picture, user ID, and language setting (through the LINE SDK and API)
Processing
All data is encrypted in transit (TLS 1.3) and at rest (AES-256), and stored on secure servers with access controls.
Data retention
- Personal data: the life of your account plus 30 days
- Financial data: 5 years (service continuity)
- Usage data: 5 years (service improvement)
- Location data: 3 years (regional features)
- Google connection data: deleted immediately when you delete your account (see section 7)
6. Data sharing and third-party services
Explicit consent required
We get your explicit consent before sharing personal data with third parties.
Third-party services
- Payment processors: process payments and refunds
- Analytics services: app performance tracking (anonymized data)
- Cloud services: data storage and processing (encrypted)
- Advertising partners: personalized ads (anonymized data, with your consent)
Legal requirements
We may disclose data when the law requires it.
7. Google user data (Gmail connection)
Connecting a Google account is optional. You start it yourself from Parnuan settings. The Gmail feature page explains how the feature works.
What we read
- Your Google account's email address, name, profile picture, and account ID, so you can see which account is connected
- Bank transaction alert emails in your Gmail, using read-only access. We only fetch emails from a list of supported bank sender addresses. We do not read other emails, and we never send, delete, or change any email.
Why we read it
To create expense records from your bank alerts automatically, so you don't have to type them. You can see, edit, and delete these records in Parnuan. We use Gmail data for no other purpose.
How we store it
- We store a Google OAuth refresh token in encrypted form. It is never shown to anyone and is used only to fetch bank alerts. Google access tokens expire after about one hour. We keep them only in temporary storage until they expire, never in our database.
- We do not keep raw email bodies.
- From each bank alert we keep the transaction created from it (amount, date, description, category). We may also keep the last digits of the bank account or card number shown in the alert, to match the transaction to your payment methods.
- For each email we fetch, we keep a processing record: the Gmail message ID, which bank sent it, the processing status (and the reason, if it was skipped or failed), the ID of the expense it created, whether we notified you in LINE, and timestamps. It does not contain any email content. The processing record stops the same email from creating a transaction twice.
Who we share it with
To categorize a transaction, we send the transaction description, amount, and date taken from the alert, not the whole email, to our AI providers. They may use it only to return a category and must not keep it after they respond. We send you a LINE message about the transactions we created, so LINE carries those transaction details to you. Our cloud hosting and database providers store the data on our behalf. These providers process the data only on our instructions. We do not sell Google user data and do not share it with anyone else, except when the law requires it.
Limited Use
Parnuan's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Read the Google API Services User Data Policy.
- We use Google user data only to provide and improve the Gmail feature you can see in Parnuan.
- We do not use Google user data to serve ads, including retargeting, personalized, or interest-based ads.
- We do not sell or transfer Google user data to advertising platforms, data brokers, or information resellers.
- We do not use Google user data to decide creditworthiness or for lending.
- We do not use Google user data, and do not allow our AI providers to use it, to develop, train, or improve any AI or machine learning model, including generalized or foundation models.
- Google Workspace APIs are not used to develop, improve, or train non-personalized AI and/or ML models. We do not retain user data obtained through Google Workspace APIs for that purpose.
- We transfer Google user data only (a) to provide the Gmail feature you turned on, with your consent; (b) for security, such as investigating abuse; (c) to comply with the law; or (d) as part of a merger, acquisition, or sale of assets, after getting your explicit prior consent.
- Our staff do not read your Google user data unless you have given documented consent to view specific data (for example, for support), it is needed for security or to comply with the law, or it has been aggregated and anonymized for internal operations.
- Section 6 (advertising partners) and section 10 (research, development, and advertising) do not apply to Google user data.
How to disconnect and delete it
Open Parnuan settings and disconnect the Google account. You can also remove Parnuan's access at myaccount.google.com/permissions. When you disconnect in Parnuan:
- We revoke Parnuan's access at Google.
- We delete the stored refresh token.
- We stop reading your email.
The Google account email address, name, profile picture, and account ID stay linked to your Parnuan account, along with processing records. Transactions already created stay until you delete them. When you delete your Parnuan account, we immediately delete all Google connection data and every transaction created from your email. To ask us to delete it sooner, email contact@parnuan.com.
8. Location data
Collection
Precise location (with your explicit consent) for regional features, nearby offers, and security verification.
Use
Stored securely, used only for these purposes, and shared with third parties only with your explicit consent.
Data retention
Follows the standard retention policy (see section 5).
9. Group chat features
We collect usage data only when Parnuan is mentioned or used in a group conversation:
- Chat messages that mention Parnuan features
- Basic group details when Parnuan features are used
- Usage patterns related to Parnuan functions
Data retention: follows the standard retention policy (see section 5).
10. Usage data for research, development, and advertising
Research and development
We use anonymized usage data to improve app features, develop new functions, and improve performance.
Advertising
With your consent, we use anonymized usage data for personalized ads and marketing optimization.
11. Payments and refunds
Payment terms
All payments are processed in Thai baht (THB) through secure third-party processors. Subscription fees are charged automatically.
Refund policy
- Standard subscriptions: no refunds unless the law requires one
- Special promotions and pre-sales: refund terms as stated in the promotion materials
- Processing time: 5-10 business days (when applicable)
Cancellation
You can cancel your subscription at any time. Cancellation takes effect at the end of the billing cycle.
12. User responsibilities
You agree to use the service in line with applicable laws, provide accurate information, not bypass security measures, and not use the service for unlawful purposes.
13. Service limitations
Service availability
We work to keep the service highly available but do not guarantee uninterrupted service. We announce maintenance windows in advance when possible.
14. Limitation of liability
Our liability is limited to the amount you paid for our service in the 12 months before any claim, up to a maximum of 5,000 baht. We are not liable for data loss, service interruptions, actions of third parties, or indirect damages.
15. Changes to these terms
We may update these terms from time to time. We will notify you of material changes through in-app notifications and our website.
Material changes include new data collection or processing, changes to data sharing practices, changes to user rights, or significant changes to service functionality. We will ask for your explicit consent before a material change takes effect.
Continuing to use the service after a change means you accept the new terms.
16. Contact information
For questions about these terms or our privacy practices:
Email: contact@parnuan.com
17. Data protection officer
Data controller
Intentions Labs Co., Ltd.
35/2 Chiang Mai-Lampang Road, Chang Phueak, Mueang Chiang Mai, Chiang Mai
Email: contact@parnuan.com
Data protection officer
Data Protection Team
35/2 Chiang Mai-Lampang Road, Chang Phueak, Mueang Chiang Mai, Chiang Mai
Email: contact@parnuan.com
For PDPA questions, data subject rights requests, or privacy concerns, please contact our data protection officer directly.
18. Governing law
These terms are governed by Thai law. Any dispute will be resolved in Thai courts.