Mobile App Privacy Policy

The short version

• Your financial data stays on your device. Everything you enter — income, savings, debts, expenses, properties, dependents, and calculation results — is stored locally on your phone.
• We operate no server that stores or reads your financial data. We have no backend that can see your money. We literally cannot access what you enter.
• We do not connect to your bank. There is no account aggregation (no Plaid, Flinks, or similar). All data is entered manually by you — by design, for privacy.
• Optional cloud sync goes to your own account. If you turn on sync, your data is stored in your own iCloud (iOS) or your own Google Drive (Android) — not ours.
• Ads appear only on the free tier, served by Google AdMob, and require your consent. A one-time purchase removes them permanently.
• No financial figures are ever sent to analytics or advertising services.

Information stored on your device

The App stores the following locally (using SwiftData on iOS and an encrypted-at-rest SQLite/Room database on Android):

• Financial profile: age, birth year, province/region, filing status, risk tolerance, retirement age, marginal tax rate, and housing status.
• Income streams: name, type, amount, frequency, and whether the income is taxable.
• Savings accounts: account type (e.g. RRSP, TFSA, FHSA, RESP, RDSP, non-registered, chequing, savings), balances, contributions, and expected returns.
• Debts: type, balance, interest rate, payment, and credit limit.
• Rental / property details: value, mortgage, rental income, and expenses.
• Expenses: category, amount, frequency, and whether the expense is essential.
• Dependents: a nickname, birth year, and education-savings goals.
• Contribution room and related figures, and — for the Couples tier — how each item is owned (personal, joint, or split) between you and a partner.

We do not collect, transmit, or have access to any of this financial information. It is processed on your device to power the App’s calculations and views.

Optional cloud sync (your own account)

Cloud sync is optional and off by default. The App is fully usable offline without ever enabling it. If you enable sync (a feature of the paid Pro tier):

• On iOS, your data syncs to your own private iCloud account using Apple’s CloudKit — stored in your iCloud, governed by Apple’s terms, not ours.
• On Android, your data syncs to a hidden, app-private folder in your own Google Drive (the Drive “app data” folder) — stored in your Google account, governed by Google’s terms, not ours.
• Couples / partner sync (a separate paid feature) lets you share household data with a partner through your platform’s native sharing (Apple CloudKit sharing or a Google Drive file you grant access to). Data stays within the two users’ own cloud accounts.

In all cases, data in transit is protected with HTTPS/TLS, we operate no server in this flow, and you can turn sync off and delete the synced data directly from your own iCloud or Google Drive account.

Advertising (free tier only)

The free tier shows ads served by Google AdMob. Paid tiers (Pro and Couples) are ad-free, and ads are removed permanently once you make a qualifying purchase.

• Ad formats: a small banner, occasional full-screen ads on natural transitions, and an optional “rewarded” ad (e.g. to unlock an additional export). Ads never block access to core calculations.
• Advertising identifier: to show ads, AdMob may use your device’s advertising identifier and related data.
• Your consent: on iOS we use Apple’s App Tracking Transparency (ATT) framework — decline and you still see ads, but non-personalized ones. On Android we use Google’s User Messaging Platform (UMP) consent form (including for users in the EEA/UK).
• Measurement: on iOS, Apple’s SKAdNetwork may be used for privacy-preserving ad attribution.
• No financial data in ads: the information you enter is never shared with AdMob or used for ad targeting.

Analytics

If analytics are used, they are limited and non-financial. We may use privacy-respecting analytics (such as Google Firebase Analytics) and remote configuration (Firebase Remote Config) to understand general, anonymous usage patterns and to manage feature flags and pricing experiments. No money values, balances, or any financial figures you enter are ever included in analytics or sent off your device.

Purchases

TrackMoola offers one-time purchases (there are no subscriptions) to unlock paid tiers and remove ads. On iOS, purchases are processed by Apple (StoreKit); on Android, by Google (Google Play Billing). Payments and billing details are handled entirely by Apple or Google — we do not receive or store your payment card details. We receive only the entitlement information needed to unlock and restore the features you have purchased.

Device permissions and notifications

The App requests only the minimum permissions it needs:

• Internet access — for optional cloud sync (to your own account), ads on the free tier, and fetching remote configuration. There is no TrackMoola backend.
• Advertising ID (Android) — for ads on the free tier, as described above.
• Notifications — for local notifications, such as letting you know a sync finished or an export is ready. We do not send marketing push notifications.

The App does not request access to your location, contacts, camera, microphone, photos, or device storage for browsing files.

Third-party services

When you use certain features, data is handled by the following third parties under their own privacy policies:

• Apple (iCloud sync, App Store purchases) — apple.com/legal/privacy
• Google (Google Drive sync, AdMob advertising, Firebase analytics/remote config, Google Play purchases) — policies.google.com/privacy

International data transfers

If you enable cloud sync or see ads, the relevant data may be processed by Apple or Google on servers located in countries other than your own. Those transfers are governed by Apple’s and Google’s respective privacy frameworks and safeguards.

Data retention and deletion

• On-device data: kept on your device until you delete it. You can delete it from within the App, or by uninstalling the App.
• Cloud-synced data: stored in your own iCloud or Google Drive account and under your control — delete it from that account at any time, or turn off sync within the App.
• We hold no copy of your financial data, so there is nothing for us to retain or delete on a server.

Your privacy rights

Depending on where you live, you may have rights under laws such as Canada’s PIPEDA, the EU/UK GDPR, or the California Consumer Privacy Act (CCPA/CPRA), including the right to access, correct, or delete personal data and to withdraw consent. Because the App stores your financial data on your own device and in your own cloud account, you can exercise most of these rights directly — by viewing, editing, or deleting your data in the App or your iCloud/Google account, and by managing ad consent and your advertising identifier in your device settings.

Children’s privacy

TrackMoola is intended for adults (a general personal-finance audience) and is not directed to children. We do not knowingly collect personal information from children.

Security

Your data is stored using your platform’s standard protections, including encryption at rest where supported, and is transmitted over encrypted connections (HTTPS/TLS) during optional cloud sync. No method of storage or transmission is 100% secure, but because we operate no server that holds your financial data, the primary safeguards are your device’s and your cloud provider’s protections.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and post the new version here. Significant changes may also be communicated within the App.

Contact us

Questions or requests about this policy or your data? Contact Amogh Tech Ltd at support@amoghsa.com.