Privacy Policy
Effective 26 October 2026
1. Who We Are
FinFlows is a personal finance app made by an independent developer, Ahsan MT ("we", "us", "the developer"). This Privacy Policy explains what the app does with your information. By using FinFlows you accept this policy; if you do not, please do not use the app.
2. At a Glance
FinFlows has no account to sign up for, no server of its own, no advertising, no analytics and no tracking. Everything you enter stays on your device and in your own iCloud account. We, the developer, cannot see, access, recover or delete your data.
3. Information You Enter
FinFlows stores what you put into it: transactions (amount, date, description, category, currency), wallets and their balances, transfers, bills and EMIs, budgets, recurring rules, the names of people you record transactions with, and anything you attach to an entry: receipt photos, voice notes and files. If you pick a name from Contacts, only that name is copied into the app; no other contact details are read or stored.
4. Bank SMS and Screenshots
If you set up Bank SMS Auto-Logging, the Shortcuts automation you create passes the text of matching messages to FinFlows. The message is read on your device; the amount, payee, bank name, the last digits of the account and the message text itself are saved with the entry so you can check it later. Messages that look financial but could not be read are kept in an on-device list for you to review. When you import a payment screenshot, its text is recognised on your device by Apple's Vision framework and the image itself is not kept. None of this is ever sent to us or to anyone else.
5. Where Your Data Lives
Your data is stored on your device, in a container shared with the FinFlows widgets and Apple Watch app. When you are signed in to iCloud, it is synchronised to the private database of your own iCloud account so your devices stay up to date, and iCloud backups you make are saved to your own iCloud Drive. That storage belongs to your Apple ID and is handled by Apple under Apple's privacy policy; it is not readable by us.
6. Shared Wallets
If you share a wallet, that wallet and every entry and transfer in it are stored in a shared area of your iCloud account and become visible to, and editable by, everyone you invite. Each person on the share can add, change and delete entries, and their devices keep their own copies. You decide who to invite and can stop sharing at any time; people who have already seen or copied the shared information may still have it. Invitations and sharing are provided by Apple's iCloud.
7. Apple Watch, Widgets, Siri and Spotlight
Balances, recent entries and upcoming bills can appear in widgets, on the Lock Screen (Live Activities), on your Apple Watch, in Spotlight search and in Siri responses. These are features of your own devices, processed by iOS and watchOS; FinFlows does not send this information anywhere else. Anyone who can see your unlocked device or watch may be able to see it.
8. Connections to the Internet
Apart from Apple's own services (iCloud and the App Store), FinFlows makes one kind of request: when you record an amount in a foreign currency, it downloads published exchange rates from the Frankfurter service (api.frankfurter.app), sending only your home currency code. As with any internet request, that service can see your device's IP address. No amounts, descriptions, names or identifiers are sent.
9. Permissions
Camera and Photos let you attach receipts and import screenshots. Microphone lets you record voice notes. Contacts lets you pick a name. Face ID or Touch ID locks the app. Notifications deliver reminders you turn on. Each permission is asked for only when you first use the feature, and you can withdraw any of them in iOS Settings at any time.
10. Subscriptions and Payments
FinFlows Pro is sold and processed entirely by Apple through the App Store. We never receive your payment details. Apple tells the app only whether your subscription is active.
11. No Selling or Sharing
We do not sell, rent or share your information with anyone, and the app contains no advertising, analytics or tracking code.
12. Security
You can protect FinFlows with Face ID, Touch ID or your passcode, and your data is protected by your device's and Apple's iCloud security. No method of storage is completely secure, and keeping your device, passcode and Apple ID safe is your responsibility. We are not responsible for access to your data through your device, your Apple ID, or people you share a wallet with.
13. Children
FinFlows is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect information from children.
14. Keeping and Deleting Data
Your data stays until you delete it. Deleting an entry removes it straight away; its attachments are removed a few seconds later, once the chance to undo has passed and nothing else uses them, and copies in your iCloud account are removed within about 30 days. Deleting the app removes everything on that device; data in your iCloud account and your iCloud backups remain until you delete them in the app or in iCloud settings. Entries in a shared wallet may remain on other participants' devices.
15. Your Rights
Because your data is held only by you and Apple, you can view, export (CSV or PDF), correct or delete it at any time without asking us. We hold no copy of your data, so we have nothing to provide, correct or erase on request.
16. International Use
FinFlows has no central server, so we never transfer your data between countries. Storage and sync are provided by Apple's iCloud, in the locations Apple uses for your account.
17. Changes to This Policy
We may update this policy as the app changes. The current version is always in the app and on our website, with its effective date. Continuing to use FinFlows after an update means you accept the updated policy.
18. Contact
Questions about privacy can be sent to mail@haaa.in.