Privacy Policy

Last Updated: April 14, 2026

Finlytix ("we", "our", "the app") is a personal finance tracking app. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Information

When you sign in with Apple, we receive your Apple User ID, name (if provided), and email address (which may be an Apple relay address). This is stored securely in your device's Keychain and synced to our server to create your account.

Financial Data You Enter

Holdings, subscriptions, wealth snapshots, watchlist items, and price alerts are stored privately on your device. If you turn on iCloud sync, they're copied between your own Apple devices through Apple's encrypted iCloud. We never see this data on our servers.

Settings and Preferences

Your preferences (currency, display name, monthly income, notification settings) are synced across your devices via Apple's iCloud Key-Value Store.

Device and Usage Data

We collect device tokens for push notifications via OneSignal. Google AdMob may collect device identifiers and usage patterns for ad serving. We do not operate our own analytics or tracking systems.

2. How We Use Your Data

  • Account management: Your Apple User ID, name, and email are stored on our server to manage your profile and per-user settings.
  • Push notifications: Your Apple User ID and email are shared with OneSignal to deliver push notifications you have opted into.
  • Advertising: Google AdMob displays ads to free-tier users. AdMob may use device identifiers and usage data for ad personalization, subject to Google's privacy policy. Ad content is restricted to general audiences. Plus, Pro, and Finlytix V subscribers do not see ads.
  • Market data: We fetch live prices from reputable third-party market providers (including Yahoo Finance for international prices and open exchange-rate services for currencies, as required to be disclosed). No personal data is sent to these services.
  • iCloud sync: Your financial data (holdings, subscriptions) syncs through Apple's encrypted iCloud to your own Apple devices. This data is encrypted by Apple and we cannot access it.

3. Data We Do NOT Collect

  • Bank account numbers or login credentials
  • Payment card details (all purchases processed by Apple)
  • Biometric data (Face ID/Touch ID is processed locally by Apple's Secure Enclave)
  • Location data
  • Contacts, photos, or other device data
  • Browsing history

4. Third-Party Services

Finlytix uses trusted third-party services to provide core functionality:

  • Apple: Sign in with Apple for authentication, iCloud for syncing your data across devices (encrypted end-to-end), and the App Store for processing in-app subscriptions. All subscription payments, billing, and receipt validation are handled by Apple. Your use of Apple services is subject to Apple's Privacy Policy and Apple's Licensed Application EULA.
  • RevenueCat: We use RevenueCat to manage subscription entitlements and verify purchase receipts. RevenueCat receives your anonymous app user ID and purchase transaction data from Apple. No personal financial data is shared with RevenueCat. See RevenueCat's Privacy Policy.
  • Advertising: Free-tier users see ads provided by Google AdMob. Plus and Pro subscribers do not see ads. Ad content is restricted to general audiences.
  • Notifications: We use a push notification service to send you price alerts and updates when enabled.

Each service is governed by its own privacy policy. We only share the minimum data necessary for each service to function.

6. Data Security

  • Passwords and passcodes are hashed with SHA256 and salted before storage
  • Sensitive credentials are stored in Apple's Keychain with appropriate access controls
  • All network communication uses HTTPS encryption
  • Biometric sign-in (Face ID / Touch ID) is handled entirely by Apple
  • A privacy screen hides your financial data in the app switcher

7. Data Retention

  • Your account data is retained on our server until you delete your account
  • Local data is retained on your device until you delete the app or use the "Delete All Data" option in Settings
  • iCloud-synced data follows Apple's retention policies
  • Price history data on our server is automatically cleaned up after 90 days

8. Your Rights

  • Delete your account: Settings > Delete Account removes all server-side data and local data
  • Sign out: Removes your session without deleting data
  • Disable iCloud sync: Turn off iCloud in iOS Settings to keep all data local
  • Disable notifications: Revoke notification permissions in iOS Settings
  • Limit ad tracking: Enable "Limit Ad Tracking" in iOS Settings > Privacy > Advertising
  • Request data deletion: Contact us at the email below

9. Children's Privacy

Finlytix is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Continued use of the app after changes constitutes acceptance.

11. Contact

For privacy questions or data requests, contact:
admin@finlytix-app.com

ع