We never receive your financial data.

SampattiTrack is a local-first personal finance app. Your ledger lives on your device. We have no accounts, no login, no advertising and no analytics, and we never receive your accounts, transactions, balances or other personal finance data.

Accounts
Login
Advertising
Analytics

What stays on your device

Your accounts, transactions, budgets, goals, holdings, tags, recurring rules, receipts you scan, imported files, preferences and every figure the app calculates (net worth, cash flow, returns, anomaly alerts) are stored on your device. All analysis is performed on your device. SampattiTrack does not upload this information to servers operated by the developer, because there are none that receive it.

iCloud sync (optional, through your Apple account)

If you are signed in to iCloud, SampattiTrack syncs your ledger between your own devices using CloudKit in your private iCloud database. The content of each record is stored in CloudKit's end-to-end encrypted fields, and record names are one-way hashes rather than your account names. This data is held by Apple under your Apple account and Apple's privacy policy; the developer cannot read it or access it. Market prices are not synced. You can turn off iCloud for the app in iOS Settings → [your name] → iCloud.

Public reference data

The app connects to the internet only to fetch public market prices, such as stock, mutual fund and metal prices, and to search for them. These requests contain only what is needed to answer them, such as the name or ticker you search for. They never include your accounts, transactions, balances, holdings or name. Fetched prices are cached on your device, and your ledger works fully offline without them.

Optional AI features

SampattiTrack can suggest categories and accounts for a transaction, receipt or pasted bank message. You choose the engine in Settings:

Apple Intelligence (on device):

the text is processed on your device by Apple's on-device model and does not leave it.

Your own provider (bring your own key):

if you enter an API key and, optionally, a base URL, the text of the item being analysed (such as a bank message or receipt text) and the names of your accounts are sent directly from your device to the provider you configured (OpenAI by default, or any compatible service, including a model on your own network). It is handled under that provider's own privacy policy. It does not pass through any server of ours. This is off until you add a key or a local server.

Your API key is stored in the iOS Keychain. It is stored as an iCloud Keychain item, so Apple may sync it to your other devices; it is never sent to us.

Receipts and photos

If you scan a receipt, the app uses the camera through Apple's document scanner, or an image you pick from your photo library, and reads the text with Apple's on-device Vision framework. Images are processed on your device. The app does not access your whole photo library; it only receives the images you select.

Face ID and App Lock

If you turn on App Lock, the app asks iOS to authenticate you with Face ID, Touch ID or your passcode. SampattiTrack never receives or stores your biometric data.

Notifications, background refresh, Siri and Spotlight

Notifications (bill reminders, budget and anomaly alerts) are scheduled locally on your device. We do not use a push-notification server to send them.
Background refresh lets iOS occasionally wake the app to refresh prices.
Siri, Shortcuts and Spotlight: the app exposes shortcuts such as checking net worth or logging an expense, and may index account and transaction names for Spotlight search on your device. Siri requests are handled by Apple under Apple's own privacy policy. If you pass a message to a Shortcut, it is processed as described under "Optional AI features".

Backups and exports

You can export your ledger as a JSON file or CSV and restore from a backup. These files are created on your device and go wherever you choose to save or share them (for example Files, AirDrop or Mail). Once you share a file, it is outside this app's control.

Security

Your ledger is protected by your device's encryption and passcode, and optionally by App Lock. Network requests use HTTPS. The only plain-HTTP connection the app allows is to a server on your local network that you configure yourself (for example a local AI model). No method of storage or transmission is perfectly secure.

Tracking and advertising

SampattiTrack contains no advertising, no analytics or crash-reporting SDKs and no third-party tracking. We do not sell or share personal data, and the app does not track you across other companies' apps or websites.

Retention and deleting your data

Your data stays on your device until you delete it. Deleting the app removes the local ledger and its Keychain items. If iCloud sync was on, a copy remains in your private iCloud database; remove it in iOS Settings → [your name] → iCloud → Manage Account Storage → SampattiTrack → Delete Data. Because we do not hold your ledger, we cannot retrieve or delete it for you.

Not financial advice

SampattiTrack is a record-keeping and planning tool. It does not provide investment, tax, legal or financial advice.

Children’s privacy

SampattiTrack is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy when the app's data practices change. The effective date above shows when it was last revised.

Contact

For privacy questions, contact [email protected].