The app does not ask for an account, email address or phone number.
Accounts, transactions, plans, debts, cards and documents stay only on this device. The ledger is an encrypted database; its key is in the device’s secure storage.
The app has no server. Your records are not sent anywhere; the app collects no analytics, advertising or crash reports.
On Android, the optional “Read receipt” button reads the photo on this device; the photo is not uploaded. The default method sends nothing. If you choose Google ML Kit in privacy preferences and use that button, ML Kit may send anonymous usage and performance metrics to Google.
On Android, an encrypted .icb backup is uploaded to Google Drive only when you press “Save to my Google Drive”. The app can only access files it created.
Backup and CSV files leave the device only when you pick a destination in the share sheet. CSV files are not encrypted.
Reminders are scheduled on this device. Amounts, accounts and descriptions can be hidden in notifications.
The home-screen summary widget is optional and off by default. If you turn it on, today’s and this period’s spending and the account total are kept on this device as a small unencrypted summary so the widget can show them; with the app lock on the amounts are hidden, and turning the widget off deletes the summary.
Uninstalling the app deletes the records on this device. Backup files you created stay under your control.
The app does not connect to a bank or make payments. You enter the records; estimates are based only on them.
The backup password is not stored and cannot be recovered. Keeping the backup file and its password safe is your responsibility.
The app does not provide investment or financial advice.
If a new feature such as cloud sync, a paid version or advertising is added, this information will be updated.