Privacy policy

Last updated 22 October 2026.

Finledger does not collect your data. There is no Finledger account, no Finledger server, and no analytics. Your transactions, budgets, goals and notes are stored on your own device, and nothing about them is sent to us, because there is nowhere for it to be sent.

What stays on your device

Everything you enter or import: accounts, transactions, categories, rules, budgets, goals, recurring charges, the change history, and anything you tell the analyst. It lives in a database file inside the app's own storage on your phone or computer.

You can export it all as CSV at any time from Settings > Your data > Export data, and you can delete all of it from Settings > Your data > Delete everything.

When something does leave your device

Four things, and you control each one.

iCloud sync, if you turn it on. Your data syncs through your own iCloud account, between your own devices. It is encrypted on your device before it is sent, with a key held in your device's keychain. Apple stores the encrypted records; Apple's privacy policy covers that storage. We cannot read your data and neither can Apple. If you lose every device and your recovery key, nobody can recover it.

Downloading an AI model. The on-device analyst needs a model file, which is downloaded from huggingface.co when you ask for it. That request tells Hugging Face which file you are downloading and your IP address, like any other download. It contains nothing about your money.

A cloud AI endpoint, if you set one up. By default the analyst runs entirely on your device and nothing you ask it leaves. If you choose to point it at a cloud service instead, the screen before you confirm says exactly what would be sent, and you decide the scope. That service's own policy then applies to what you send it. This is off unless you turn it on.

Checking for updates, in direct downloads only. The copies you download from this site (Windows, Mac, Linux and Android) look about once a day for a newer version by fetching one small public file from github.com. That request carries no account, no device or app identifier and nothing about your money. GitHub sees your IP address and the time, like any other web request. If a newer version exists, Finledger downloads it only when you tap Update. You can turn the daily check off in Settings > About finledger, and you can still check by hand there. The App Store version for iPhone and iPad never checks: Apple handles its updates.

What we never do

We do not sell your data, share it, profile you, show ads, or use your financial information to train any model. No third-party analytics or crash-reporting SDK is built into the app.

Children

Finledger is not directed at children under 13, and we do not knowingly collect anything from anyone, of any age.

Changes to this policy

If this policy changes, the new version appears here with a new date. Because the app holds no account, we have no way to email you about it.

Contact

Questions about privacy: contact@aaroncollins.info