Privacy Policy

Your spending records

Purchases, amounts, dates, descriptions, chosen icons, kept choices, notes, money set aside, additions and withdrawals, your purpose and preferences are stored in a local database on your device.

The app does not require an account or connect to your bank. It does not upload your financial records to a server operated by Tom Robson. Recording purchases, viewing your history and making choices work offline.

Backups and restoring records

You can create a backup from Settings. It contains a snapshot of the app database, including financial records, notes, preferences and records marked as deleted. The file is readable JSON; the app does not encrypt it or add a password.

The app hands the file to your device’s share sheet. You choose where to save or send it, and that destination handles the file under its own privacy terms. Only share a backup with someone you trust. Restoring a backup replaces the records currently in the app with the contents of that file.

Your device’s own backup or transfer services may also include app data, depending on your device and settings. Those services are controlled by you and your platform provider, separately from the app’s backup feature.

Optional usage analytics

Usage analytics are off by default. You can choose whether to share them in Settings > Privacy > Share usage analytics, or through the invitation shown after using the app. Turning the setting off stops further collection on that installation.

When enabled, Google Analytics for Firebase receives an app-instance identifier and technical usage information such as app version, operating system, device model, language, sessions and approximate location derived from an IP address. This information can distinguish installations; it is not the same as anonymous data. Google explains its collection in the Firebase data collection guidance.

The app records feature-use events for completing setup, adding or using money set aside, opening purchase entry, recording a purchase or kept choice, and handing a backup to the share sheet. A completed choice includes only the outcome: spend or keep.

These product events do not contain your spending amounts, balance, currency, purpose, purchase descriptions, notes, transaction dates, chosen icons, backup contents or filenames, or database record IDs. We use analytics to understand and improve app features, not to advertise to you or sell your financial records.

Google processes analytics under its applicable terms, which may involve processing outside your country, including in the United States. Event-level and user-level retention depend on the Google Analytics property settings; aggregated reports may be retained separately. See Google’s data retention guidance and privacy policy.

Deleting your records

Deleting an individual entry removes it from the app’s active views and calculations, but it may remain marked as deleted in the local database and in backup files. To clear the app’s records and preferences, use Settings > Your data > Reset all app data. Reset also turns usage analytics off.

Reset does not delete files you have already saved or shared, copies held by device backup services, or analytics already received by Google. Delete those backup copies through the service where you saved them. Uninstalling the app removes local app data according to your platform’s behaviour; a device backup may retain a copy or restore it later.

The app has no account-based analytics deletion control. If you have a privacy request, use the support link below. Resetting the app or switching analytics off is not a request to delete previously collected analytics.

Crash reports

The app does not include Firebase Crashlytics or another remote crash-reporting service. Apple or Google may collect diagnostics under your device-level settings and their own privacy policies.

Support and this website

Opening Privacy or Support takes you to the Daft Potato website. Website analytics are separate from the app’s analytics preference. If you send a support request, the form asks for your email address and message, with an optional name. Netlify Forms processes the submission, and Tom Robson uses it to respond to your request. Do not include financial records or backup files unless they are needed to explain your issue.

See the website privacy notice for details of website analytics and support submissions.

Contact and changes

For privacy questions or requests, use the support form, also available through Settings > Support in the app. If this policy changes, we will update the effective date on this page.