Privacy Policy

Data Controller and Regional Legal Compliance

The data controller responsible for your personal information is Dmitry Alekseenko, an independent software developer operating in Poland. You can contact the data controller directly at hello.appdesk@gmail.com. We process personal data in compliance with the EU General Data Protection Regulation (GDPR).

Depending on your location, specific regional privacy rights apply to you. If you are a resident of the European Economic Area (EEA), please see "GDPR Rights (EEA Residents)" below. If you are a resident of the United States (including California), please see "US State Privacy Rights & CCPA Notice" below.

The Core Principle: Privacy-First by Design

The App is built as a secure, personal financial tool. We do not link to, access, or view your real bank accounts, credit cards, or financial institutions. The only financial data we process is what you manually and voluntarily type into the App yourself.

The Site is informational and does not connect to the App's data in any way. Nothing you enter into the App is visible to, or accessible from, the Site.

1. What We Collect

In the App

• Authentication data. When you start using the App, you are completely anonymous. If you choose to link your account (e.g., "Sign in with Apple" or "Google Sign-In") to access your data from more than one device, those services authenticate your identity and may share basic account info with us strictly to connect your data across devices.
• Financial data. We securely store the transactions and categories you manually enter, via Google Cloud Firestore, so your data isn't lost if you change devices.
• Reminders. The reminders you turn on are scheduled by your own device, not sent from a server, so no push notification tokens are collected. You can disable them at any time in your device settings.
• Anonymous usage data. We may collect anonymous data such as app crashes, to help us fix and improve the App.

On the Site

• Anonymous, cookieless analytics. The Site uses Cloudflare Web Analytics. It does not use cookies, does not track individuals across sites, and does not build a profile of any visitor. Reports are sent to our own domain, not to a third-party server. This is the only data collection that happens on the Site itself.
• No forms, no accounts. The Site does not ask visitors to submit any personal information — there are no sign-up forms, contact forms, or newsletter fields. The one exception is the /join page, which simply displays an invite code for Family Sharing; it does not collect or transmit any information from the visitor.

2. How We Use It

• Financial data you enter in the App is used solely to power the App's features (tracking, categories, savings goals, Loan Navigator) for you.
• Authentication data is used solely to let you access the same App data from more than one device, if you choose to link an account.
• Anonymous crash and usage data is used solely to identify and fix bugs and improve the App.
• Anonymous Site analytics (page views, general visitor counts) are used solely to understand how many people visit the Site and which pages they read — never to identify an individual visitor.

We do not sell your data. We do not use your financial data for advertising.

3. Third-Party Services

The App uses the following third-party services, each with its own privacy policy:

• Google Cloud Firestore (data storage)
• Google Analytics for Firebase
• Firebase Crashlytics
• RevenueCat (subscription management)

In-app purchases are processed securely by the Apple App Store. We do not process or store your credit card information.

The Site uses:

• Cloudflare Web Analytics — cookieless, does not identify individual visitors.

4. Your Rights

You are in full control of your financial data in the App. You can delete your account and all associated financial data directly within the App, via the settings menu, at any time.

GDPR Rights (EEA Residents)

If you are located in the European Economic Area, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at hello.appdesk@gmail.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

International data transfers: Your financial data is stored on servers located in the United States via Google Cloud Firestore. If you are located in the European Economic Area (EEA), this means your personal information is transferred outside the EEA. This transfer is carried out in reliance on both the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) approved by the European Commission, as permitted under Articles 44–46 of the GDPR, and incorporated into Google's Cloud Data Processing Addendum (cloud.google.com/terms/data-processing-addendum).

US State Privacy Rights & CCPA/CPRA Notice

This section applies solely to residents of the State of California and other US states with applicable comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas). Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), you are entitled to specific disclosures regarding how we handle your personal information.

1. Categories of Personal Information Collected and Disclosed

In the preceding 12 months, depending on how you interact with the App and the Site, we may have collected (and may disclose to our service providers for business purposes) the following categories of personal information:

• Identifiers: Email address, unique personal identifier, online identifier, or IP address (collected if you create an account, contact support, or via basic analytics).
• Financial Information: Income and expense logs, transaction entries, or budget limits that you manually input into the App.
• Commercial Information: Records of products or services purchased within the App (e.g., in-app purchases or subscription history).
• Internet or Other Electronic Network Activity Information: App usage data, crash logs, interactions with App features, and device information (collected automatically via analytics or crash-reporting tools).

2. Sources of Personal Information

We collect the personal information listed above from two primary sources: (a) directly from you when you provide it to us, and (b) automatically through your device and third-party tools (such as analytics and crash-reporting providers) when you navigate and use the App.

3. Purposes for Collecting Personal Information

We use your personal information for the following business and commercial purposes:

• To provide, maintain, and improve the core financial tracking features of the App.
• To process your transactions and manage your account.
• To respond to your customer support requests and communications.
• To detect, prevent, and address technical errors, security incidents, or fraudulent activities.

4. Sale or Sharing of Personal Information

We do not "sell" and have not sold your personal information, nor do we "share" or have we shared your personal information for cross-context behavioral advertising within the meaning of the CCPA. We do not knowingly sell or share the personal information of consumers under 16 years of age.

5. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA:

• Right to Know / Access: The right to request that we disclose what personal information we collect, use, disclose, and sell/share about you.
• Right to Delete: The right to request the deletion of your personal information collected or maintained by us, subject to certain legal exceptions (such as the need to complete a transaction or comply with a legal obligation).
• Right to Correct: The right to request the correction of inaccurate personal information that we maintain about you.
• Right to Non-Discrimination: We will not discriminate against you (e.g., by denying services or charging different prices) for exercising any of your CCPA rights.

6. How to Exercise Your Rights

To exercise your rights to know, delete, or correct your information, please submit a verifiable request to us by emailing hello.appdesk@gmail.com.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. We will verify your request by asking you to provide information that matches the records we have in our system (such as verifying your registered email address).

5. Children's Privacy

The App and the Site are not directed at children, and we do not knowingly collect personal information from children.

• United States: We do not knowingly collect personal information from children under the age of 13, as defined by the US Children's Online Privacy Protection Act (COPPA).
• European Union / EEA: We do not knowingly collect personal information from children under the age of 16 (or the relevant minimum age in your EU jurisdiction, which may be 13, 14, or 15) without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello.appdesk@gmail.com. If we become aware that we have collected personal information from a child without verified parental consent, we will take immediate steps to delete that information from our servers.

6. Data Retention and Deletion

• App data: retained for as long as you use the App. You can delete your account and all associated financial data at any time via the App's settings menu. Once requested, your profile, full transaction history, and associated tokens are instantly and permanently deleted.
• Site analytics: Cloudflare Web Analytics does not store data that identifies you individually, so there is no personal data to retain or delete in connection with your visit to the Site.

7. Governing Law and Jurisdiction

This Privacy Policy, and your use of the App and the Site, shall be governed by and construed in accordance with the laws of Poland, without regard to its conflict of law principles.

• For EU residents: You also benefit from any mandatory consumer protection provisions of the law of the country in which you reside. Disputes may be brought before the competent courts of Poland or the courts of your country of habitual residence.
• For US residents: To the extent permitted by applicable law, any disputes arising out of this Privacy Policy shall be resolved exclusively in the competent courts of Poland. (If the Terms of Service include a mandatory arbitration clause for US users, that clause supersedes this provision.)

Contact Us

If you have any questions about this Privacy Policy, please contact us at hello.appdesk@gmail.com.