Privacy Policy

Your financial records live on your device. You can use the whole app without an account. If you turn on cloud sync, your data is encrypted on your device before it is uploaded — we store unreadable ciphertext and cannot see your balances, transactions or notes.

Nothing, if you never sign in. Transactions, budgets, accounts, assets, debts, goals, categories, labels and notes are stored locally on your device.

If you sign in for cloud sync, we store your email address and an account identifier so your devices can find each other, together with your encrypted data.

If you use the AI Copilot, the question you type and a compact summary of the figures needed to answer it are sent to our server and on to our AI provider.

Sync is optional and off until you turn it on. Your data is encrypted on your device using a key derived from a recovery passphrase that only you know and that we never receive.

This means we hold ciphertext. We cannot read your data, and neither can anyone who obtained a copy of our database. It also means that if you lose your recovery passphrase we cannot recover your data — there is no back door for us to use on your behalf.

Sync is hosted on Supabase. Sign-in is handled by Google Sign-In; we receive your email address and a user identifier, never your password.

The Copilot is optional and only used when you open it and ask something. What is sent: your message, and a compact summary of the relevant figures — prepared on your device. What is not sent: your recovery passphrase, your encryption keys, your receipt photos, and your private notes.

Requests pass through our server, which adds nothing beyond the account identifier used to count your monthly allowance, then go to our AI provider. We instruct the provider not to retain or train on this content. We keep the date, the feature used and the size of each request in order to operate the allowance; we do not keep the content of your conversations. Conversation history shown in the app is stored on your device only.

The Copilot explains your own numbers. It is not a licensed financial adviser and its suggestions are not financial advice. It never changes your data on its own: anything it proposes is shown to you first and applied only when you confirm.

The free version shows ads from Google AdMob, which may use device and advertising identifiers. Subscribing removes all advertising.

Subscriptions are processed by Apple and Google. We never see or store your payment card details. We receive a purchase event from RevenueCat containing the product, its status and an identifier linking it to your account — that record is what unlocks Pro.

Only to make the app work: to sign you in, to store and deliver your encrypted data between your own devices, to answer what you ask the Copilot, to count your allowance fairly, and to confirm whether your subscription is active.

We share data only with the providers required for those features: Supabase (encrypted storage and sign-in), our AI provider (Copilot requests), RevenueCat (subscription status) and Google AdMob (ads in the free version). We do not sell your information, do not build advertising profiles from your financial records, and do not use your financial data to train AI models.

Use the entire core app without an account. Turn cloud sync on or off. Never open the Copilot. Export a full copy of your data at any time from Settings. Delete your account and its synced data from within the app, or by email — see deleting your account.

The app is not intended for anyone under 13, and we do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will remove it.

Questions about this policy: microappdigital@gmail.com. We may update this policy; changes are effective when posted here.