Privacy Policy

Last updated: 27 September 2026

Short version

Spending Tracker does not collect, receive or store any of your information. There is no account, no server, and no analytics. Nothing you record reaches the developer, because there is nowhere for it to go.

Everything you enter stays on your device, with one exception you control: if you pair with another phone in your household, the entries in the categories you mark as shared are sent to that phone. That exchange is directly between the two devices over your own network — see Sharing with another device.

What the app stores, and where

Every expense, category and recurring rule you create is written to a database inside the app's own storage on your device. Nothing is uploaded.

The developer has no ability to read your data. There is no server holding a copy, no login linking you to a record, and no mechanism by which your entries could reach the developer or any third party.

What the app does not do

It does not create an account or ask for an email address.
It does not include analytics, telemetry or crash reporting.
It does not include advertising or any third-party advertising SDK.
It does not connect to your bank or any financial institution.
It does not request your contacts, photos, location or microphone.
It does not track you across other apps or websites.

Network access

The app never contacts a server on the internet, and every feature except household sharing works with no network at all — airplane mode is the quickest way to confirm it. There is no functionality that uploads your data.

Household sharing uses your local network to reach the other phone directly. It contacts no internet host and no service of ours, and it does nothing at all until you pair two devices.

You can pair the app with one or more phones in your household. Pairing requires a six-digit code shown on one phone and typed on the other, so it cannot happen without someone holding both.

Once paired, entries in the categories you mark as shared are exchanged between those phones. Only those categories are sent. Everything else — every other category, your recurring rules, your currency and your app-lock setting — stays on your device.

The exchange travels directly between the two devices over the local network and is encrypted in transit. It does not pass through the developer, any server, or any third-party service, because none is involved.

What this means in practice is worth stating plainly: a person you share with can see, edit and delete the entries in the shared categories, and keeps their copy of them. Turning sharing off stops anything further being sent; it does not remove what has already reached their phone, and there is no server through which it could be recalled.

Backups you create

You can export your data to a file. That file is created at your request and placed wherever you choose to save it — for example iCloud Drive, another cloud provider, or the Files app.

Once you save or share that file, it is governed by whatever service you put it in, not by this app. If you choose to encrypt the export with a passphrase, the file is encrypted with AES-256-GCM before it leaves the app, and the passphrase is never stored or transmitted. If you lose that passphrase, the backup cannot be recovered by anyone, including the developer.

Your database may also be included in your device's own backup (for example iCloud Backup), under Apple's terms and your device settings.

Device authentication

If you enable the app lock, authentication is performed by iOS using Face ID, Touch ID or your device passcode. The app receives only a success or failure result. Biometric data never leaves the device's secure hardware and is not accessible to the app.

Children

The app is suitable for all ages, collects no data, and contains no advertising or external links to third-party content.

Deleting your data

Deleting the app removes its database from your device. This is permanent — export a backup first if you want to keep your history.

Two kinds of copy can outlive it, both created at your request: any backup file you exported, and, if you used household sharing, the shared entries already held on the phone you shared with. Deleting the app here does not reach either of them.

Changes

This policy describes the app as it is on the date above, and it is the current version that governs.

Two commitments are structural rather than editorial, and are not expected to change: there is no account, and nothing you record is transmitted to the developer or to any server. The app has none to send it to. Household sharing does not qualify that: it sends only what you marked shared, only to a device you paired, and only between the two phones.

Other statements on this page describe present behaviour and could change in a later version — the absence of advertising being the most likely. If any future version collects data or introduces advertising, this policy will be updated before that version is released, and the App Store privacy information will be updated to match it.

Contact

Questions about this policy: spendingtracker@lawkauntangled.com