danut@florian~%less ~/logit/privacy.md

Spending — Privacy Policy

Spending has no account system, developer-operated servers, analytics, advertising, or tracking. Your financial data stays on your devices and in iCloud. If you use Household Sharing, expense details are also made available through Apple CloudKit to the one person you explicitly invite.

Last updated August 13, 2026

Who this covers

This policy covers the Spending app for iPhone, iPad, Mac, and Apple Watch, published by Danut Florian ("we", "us"). It also applies to the app's widgets, share extension, Siri actions, and Household Sharing feature.

The short version

  • We do not collect, receive, or store your financial data on developer servers.
  • There is no Spending account, sign-up, or login.
  • The app contains no analytics SDK, advertising SDK, or third-party tracker.
  • Your data is stored on your devices and may sync through your Apple Account's iCloud.
  • Household expenses are shared only through a private iCloud invitation you choose to use.

What Spending stores, and where

Expenses, budgets, categories, recurring items, people, and settings are stored in the app's database on your device. When iCloud is available for Spending, Apple CloudKit may mirror that data in a private container tied to your Apple Account so it remains in sync across your devices. Apple provides this storage; we cannot read, export, recover, or otherwise access it.

Spending does not provide an in-app iCloud on/off switch. iCloud availability is controlled by your Apple Account and the system iCloud settings on each device.

Household Sharing

Household Sharing is optional. When you invite someone with iCloud, Spending creates a private CloudKit share for that relationship. The invitation can be accepted by one Apple Account and is not an anyone-with-the-link or public share.

  • The invited person shares their eligible expenses with the inviter while they remain connected.
  • The inviter's own expenses are not shared back by default. The inviter must separately turn on “Share my expenses” for that person.
  • Shared expense records can include the amount, currency, date, category, note, merchant, source, creation date, recurring-item identifier, and the person who spent it.
  • Budgets, receipt images, custom categories, and locally added people are not shared.

Shared records pass only through Apple's CloudKit infrastructure and the invited person's iCloud access. We do not receive or have access to those records. Disconnecting stops new sharing and asks CloudKit to revoke or leave the private share; previously imported local history may remain until you delete it.

Receipts, screenshots, photos, and the camera

If you photograph a receipt, share an image, or select a screenshot such as an Apple Wallet payment list, Spending reads the image on your device to suggest details including merchant, total, date, and category. It does not connect directly to Apple Wallet, Apple Card, Apple Cash, Apple Savings, bank accounts, or FinanceKit, and it does not continuously import transactions.

On supported devices, image understanding may use Apple's on-device models; otherwise the app uses built-in text recognition. No receipt-processing request is sent to us. Results are shown for confirmation before saving, and an image is retained only when you choose to attach it to an expense. Receipt images are not included in Household Sharing.

Siri and Shortcuts

Spending exposes actions to Siri and the Shortcuts app so you can log and query spending by voice. What you say to Siri is handled by Apple under Apple's privacy policy; Spending receives only the resulting values, such as an amount and category, and stores them like any other expense.

Purchases

Spending Pro is available through auto-renewing subscriptions and a one-time lifetime purchase sold by Apple through the App Store. Apple handles payment and Family Sharing. We never see your payment method, billing address, or card details. The app checks entitlement status through StoreKit.

What we do not do

  • We do not operate a server that receives your financial data.
  • We do not collect crash reports, usage analytics, advertising identifiers, or profiles.
  • We do not show advertising or share information with advertising networks or data brokers.
  • We do not use your financial data for marketing or cross-app personalization.

Your control over your data

  • Export your ledger as CSV or JSON from Spending's settings.
  • Delete individual expenses or erase all app data from settings.
  • Manage iCloud availability in the system settings for your Apple Account and device.
  • Manage or disconnect each private Household Sharing relationship in Spending.
  • Deleting the app removes local data; iCloud data can be managed from your Apple Account settings.

Because we do not hold a copy of your financial data, we cannot provide, correct, or delete that data on your behalf. Those actions are available directly in the app, iCloud, and the Household Sharing controls available to the participants.

Children

Spending is not directed at children under 13 and does not knowingly collect personal information from anyone. The app requires no personal information to use.

Changes to this policy

If this policy changes, the updated version will be posted here with a new date. Material changes affecting how the app handles data will also be noted in the app's release notes.

Contact

Questions about privacy in Spending: [email protected].

~/logit/privacy.mdq home