Privacy Policy

Effective date: 5 August 2026 · Applies to: Earnings for iOS, version 1.1.6 and later
Developer contact: stytzu@gmail.com

The short version Earnings collects no data. Everything you enter stays on your iPhone, in the app's own local database. There is no cloud, no sync, no account, no analytics, and no tracking — the developer operates no server and never receives, stores, or sees anything you do in the app. The app's only network activity is downloading public statistics (exchange rates, crypto prices, inflation and income figures) from official public sources, and those requests carry no personal data and no identifiers. Deleting the app deletes everything.

1.Data we collect

None. The app has no sign-up, no account, and no server. Nothing you enter — income sources, amounts, schedules, time off, expenses, invoices, goals, your name, or any setting — is ever transmitted to the developer or to anyone else.

2.Where your data lives

Everything is stored only on your device:

  • A local database (Apple's SwiftData/Core Data storage) inside the app's private container, shared solely with the app's own Home Screen widget on the same device.
  • Invoice files you attach to expenses are saved on your device in a folder you can see yourself in the iOS Files app (On My iPhone → Earnings → Invoices).

Your data is included in your normal iPhone backup (iCloud Backup or computer backup) under your Apple settings and your control — the app itself never syncs, uploads, or mirrors anything. Moving to a new iPhone via Apple's own backup/transfer carries your data with it; that is the only way data ever moves between devices, and it happens entirely through Apple's device backup, not through this app or its developer.

Deleting the app permanently deletes all of its data. There is no copy anywhere else.

3.What leaves the phone: nothing of yours

The app never uploads anything. Its only network use is fetching public, non-personal statistics over HTTPS from these sources:

SourceWhat is fetchedWhat the request contains
National Bank of Romania (curs.bnr.ro)Official daily exchange-rate tableNothing user-specific — a fixed public URL
Coinbase (api.coinbase.com)Public Bitcoin/Ethereum spot pricesNothing user-specific — fixed public URLs
OECD open data (sdmx.oecd.org)Monthly inflation statisticsOnly the ISO country code of the region you picked in Settings
World Bank open data (api.worldbank.org)Monthly/annual inflation and public income statisticsOnly the ISO country code of the region you picked in Settings
IMF DataMapper open data (www.imf.org)Inflation figures (fallback)Nothing user-specific — a fixed public URL; your country is selected on the device after download

These requests include no identifiers of any kind: no account, no device ID, no advertising ID, no cookies (the app uses a non-persisting network session that stores nothing on disk), and none of your financial data. A country code chosen in Settings is the only user-influenced parameter, and it is a regional setting, not personal information. Downloaded figures are cached on the device so the app keeps working offline.

4.No cloud, no sync, no third parties

  • No cloud storage or synchronization of any kind — not iCloud sync, not the developer's servers (none exist), not anyone else's.
  • No third-party SDKs: no analytics, no crash-reporting services, no advertising frameworks. The app is built solely on Apple's system frameworks.
  • No tracking: the app does not track you across apps or websites, declares no tracking domains, and never shows Apple's App Tracking Transparency prompt because there is nothing to ask about.
  • No selling or sharing of data — there is no data to sell or share.

5.Face ID / Touch ID (optional app lock)

If you turn on the app lock, unlocking uses Apple's own on-device authentication (Face ID, Touch ID, or your device passcode). The app never sees or stores biometric data — iOS performs the check and tells the app only whether it succeeded. This is why the app asks for the Face ID permission, described in the system prompt as: "Face ID unlocks the app so only you can see your tracked total."

6.Notifications (optional, local only)

Milestone and report notifications are scheduled locally on your device — nothing is sent through remote push servers, and notification content is written to never include amounts, so nothing sensitive appears on your Lock Screen. You can decline or revoke notification permission at any time in iOS Settings; the app works fully without it.

7.Your rights and control

Because all data is on your device and the developer holds nothing:

  • Access: everything you have entered is visible in the app itself.
  • Export / portability: your invoice files are directly accessible in the Files app, and your complete data travels in your own iPhone backup.
  • Correction: edit anything in the app at any time.
  • Erasure: delete any item in the app, or delete the app to erase everything permanently. No request to the developer is needed — and none is possible, since the developer has no copy of anything.

This on-device-only design means the developer processes no personal data within the meaning of the GDPR, the UK GDPR, or the CCPA/CPRA. If you believe any of this policy does not match the app's behavior, contact the developer at the address above.

8.Children

The app is a personal finance tool and is not directed at children. It collects no data from anyone, of any age.

9.Security

  • All network connections use HTTPS with Apple's App Transport Security (no exceptions).
  • Invoice files are written with iOS full file protection (unreadable while the device is locked).
  • The app offers an app-switcher privacy blur, a hide-amounts control, and the optional Face ID/Touch ID/passcode lock — all local features, all under your control.

10.Changes to this policy

If a future version of the app ever changes any of the above — in particular, if any feature would ever transmit user data — this policy will be updated first, with the effective date above, and the App Store privacy details will be updated to match.

Appendix

App Review / App Store Connect requirements summary

For the reviewer and for filling App Store Connect. Every statement below is verified against the shipped code (version 1.1.7, build 1).

App Privacy (nutrition label)

Data Not Collected — all categories. No data is collected, linked to the user, or used for tracking. Tracking: No; no ATT prompt required; NSPrivacyTracking = false, tracking domains: none.

Privacy manifests

PrivacyInfo.xcprivacy is embedded in both the app and the widget extension. Collected data types: empty. Accessed API types requiring reasons: none (the app uses no user defaults, no file-timestamp APIs, no system-boot-time APIs, no disk-space APIs, no active-keyboard APIs).

Network

Exactly five public HTTPS endpoint families, GET-only, fetching public statistics: curs.bnr.ro, api.coinbase.com, sdmx.oecd.org, api.worldbank.org, www.imf.org. Requests carry no user identifiers; the single user-influenced parameter is the ISO country code of a user-chosen statistics region. Ephemeral URL session (no cookie or cache persistence). ATS fully enabled, no exceptions, no certificate-validation changes.

Data storage

On-device only (SwiftData store in the App Group container group.com.stytzu.earnings, shared exclusively with the app's own widget on-device; invoice attachments in the app's Documents, user-visible via Files). No iCloud entitlements, no CloudKit, no key-value store, no server component. Uninstalling removes all data.

Permissions / purpose strings

NSFaceIDUsageDescription — "Face ID unlocks the app so only you can see your tracked total." (optional app-lock feature; authentication is performed by the OS). Local notifications — requested contextually, optional, bodies contain no financial amounts. No other permission is requested: no location, camera, microphone, contacts, photos, health, or motion access.

Entitlements

App Groups only (app ↔ its own widget, on-device data sharing). No push notification entitlement (all notifications are local), no background modes.

Export compliance

ITSAppUsesNonExemptEncryption = false — the app uses only the operating system's standard TLS; no proprietary or non-exempt encryption.

Accounts / sign-in

None, so the Sign in with Apple requirement does not apply. No purchases or subscriptions; no third-party payments; no user-generated content shared with anyone.

Content notes for review

All money figures shown are the user's own entered data or arithmetic derived from it on-device; market/statistics figures are labeled with their source and reference period (e.g. "US Jun 2026 · OECD"); educational money tips are general information, and the app states in-app that nothing in it is financial, investment, or tax advice.