Privacy policy

Updated September 8, 2026. Operator: Aleksandr Sergeevich Krenev, individual, Russia. Contact: a.krenev@gmail.com.

Account and web app

We store your username, display name, protected password and recovery-code hashes, and the accounts, transactions, debts, contacts, notes and plans you enter. These support account access, financial records and family sharing. The web app runs on a Selectel VPS in Moscow, Russia. Cloudflare provides DNS; web traffic goes directly to the VPS.

A necessary session cookie lasts up to 7 days. We use no advertising analytics or tracking. IP addresses are used for abuse and login-rate protection, with rate-limit windows from one minute to one hour. Passwords are never stored in plain text. Account and financial processing is necessary to provide the service under its terms; abuse prevention serves our legitimate interest in keeping it secure.

Access and retention

You and the people you invite can access the accounts you choose to share. Records remain until you delete your database in Settings; you can also download them there. Database deletion removes its server records and revokes sharing. Backup copies expire within 14 days. Copies already downloaded by other participants cannot be recalled.

You can correct, export and delete records in the account. Contact the operator about account deletion, access, processing restrictions or other privacy rights. We may ask you to verify account ownership. You may complain to your relevant data protection authority. Your mandatory rights under applicable law are preserved.

Existing iPhone app

Existing iPhone data is not yet connected to the new server. Installed builds use local storage and Apple CloudKit. A Cloudflare notification service processes sync events that may include financial records and receipts. Events expire after up to 30 days; device registrations may remain longer. ExchangeRate-API and CoinGecko receive currency codes for exchange-rate requests. Apple handles purchases; we do not receive card details.

Support

Support emails are handled through Gmail. Email and Apple services may process data outside Russia. We do not sell financial data. Operator access is limited to operating, securing and supporting the service.

Account creation on iPhone is verified with Apple App Attest. The server stores the app key identifier, public key and request hashes; passwords are stored as secure hashes. You can delete your online account in app settings: its data is deleted and access is revoked. Other owners’ shared history and necessary purchase records may remain under an anonymous identifier.