The short version

Everything you enter stays in the app’s own storage on your phone. There is no account, no sign in, no sync and no backend. The app makes no network request of any kind: it does not ask for the internet permission, and it contains no analytics, no crash reporting and no advertising code.

What the app stores

What
Your accounts, transactions, categories, tags, people, budgets and recurring rules, and your settings
Where
Inside the app's private storage on your device, in a database that is encrypted at rest
Who can read it
You, on that phone. Nobody else, including me
For how long
Until you delete it, or uninstall the app

What leaves your device

Nothing, unless you choose it.

The app can write an encrypted backup file when you tap Export backup, and it can read one back when you tap Import backup. That file goes wherever you send it and is yours to look after. I never see it.

Permissions

Notifications
Local reminders about your own scheduled and recurring entries. They are created on your phone and never leave it
Run at startup
So those reminders survive a restart
Biometrics
To unlock the app, if you turn app lock on. The check happens on your device and no biometric data reaches the app
Vibration
The small haptic when something saves

Deleting your data

Delete records inside the app, or clear the app’s data in Android settings, or uninstall it. Any of those removes everything. There is no copy anywhere else to ask me about.

Children

The app is a personal finance tracker with no user content, no social features and no ads. It collects nothing from anyone, of any age.

Changes

If this policy changes, the date at the top changes with it.

Contact