Privacy Policy

Without an account

Every bookkeeping feature works without signing in. Your accounts, entries, budgets, attachments and photos stay on your iPhone and never reach our servers. Deleting the app deletes them; you can also clear everything at any time with Reset All Data.

What syncs after you sign in

Once you sign in, the following syncs to our servers so your other signed-in devices can see it:

• Bookkeeping data: accounts, entries (including names, notes and any location you choose to record), categories, budgets, schedules, statements, IOUs, holdings, projects, tags, savings goals and e-invoices.
• Attachments and photos: entry attachments, account photos and card images.
• Account data: display name, sign-in method and signed-in devices (device name, platform, sign-in and last-used times).
• A push token, so the server can tell this device to sync when another device makes a change. Notifications contain no financial data.

Where data is stored and how it is protected

• Our servers and database run in Google Cloud’s Taiwan region (asia-east1).
• All traffic is encrypted (HTTPS), including the connection to the database.
• Each account can only read and write its own data, enforced by database access rules.
• Our servers can read the content you sync. This is required for sync, shared accounts and AI connections, and we use it only for the features you ask for.
• The database is backed up daily, and backups are kept for 7 days.

Sign in with Apple

• We currently offer Sign in with Apple only. We identify you by the account identifier Apple creates for this app, and never see your Apple Account password.
• On your first sign-in Apple may share your name, which we use as your display name. If Apple shares a verified email, it is only shown on your account page; we don’t email you or use it to identify you.
• When you sign in, we obtain a token from Apple that we use only to ask Apple to revoke this app’s access when you delete your account.
• If you stop using Sign in with Apple for this app in iPhone Settings, Apple notifies us and we sign out devices that used it. Your account and data are not deleted.

Shared accounts

You can share an account with other people. Members can see that account’s balance, entries and statements, and who logged each entry (by display name). They cannot see your other accounts. When a member leaves, they can choose to keep a read-only copy.

AI connections

You can let an outside AI service, such as Claude or ChatGPT, read or edit your books. You create the connection, decide what it may do, and can revoke it at any time. Whatever the AI service reads is sent to its own servers and handled under its privacy policy. Deletions and changes above an amount limit are only applied after you approve them in the app.

On-device AI

Logging from a sentence, category suggestions, brand recognition and invoice line items are processed on your iPhone with Apple Intelligence and are never sent to our servers or anyone else’s. Voice logging uses iOS speech recognition; if your device can’t recognize speech offline, Apple processes the audio.

Features that contact other services

These features connect directly to outside services. The requests never include your amounts, balances or account, but the service will see your IP address:

• Exchange rates: an exchange-rate provider (open.er-api.com).
• Crypto prices: CoinGecko.
• Taiwan stock and precious-metal prices: only the symbols you hold, never quantities or amounts.
• Brand logos: the brand’s domain is sent to a logo provider. You can turn this off in Settings.
• Taiwan receipt lottery: only the public winning numbers are downloaded.
• Place names and maps: Apple Maps.

Anonymous brand corrections

When you correct the brand logo on an entry, the app anonymously sends that correction (the entry name and the old and new brand) to improve recognition. It never includes amounts, accounts, dates, locations or your account, and doesn’t require signing in. You can turn it off in Settings.

Backups

A backup is a file the app creates and you keep, optionally in your iCloud Drive. It never passes through our servers and is not encrypted, so store it somewhere you trust.

What we don’t do

• We don’t sell or rent your data.
• We don’t show ads, and the app contains no third-party analytics or tracking.
• We never ask for your online banking credentials.

Retention and deletion

• Data on your iPhone: kept until you delete it.
• Your account and data on our servers: kept until you delete your account in Settings › Account › Delete Account. Deletion can’t be undone, and copies in database backups are cleared within 7 days. Data on your phone is kept.
• Entries you logged in someone else’s shared account stay in that account, since they are part of the other members’ records, and are shown as logged by "Deleted member".
• Server access logs (IP address, request path and time) are kept for 30 days for operations and security.

Your rights

You can view, edit, export (CSV or backup file) and delete your data in the app, and stop syncing by signing out. For any other request about your personal data, email us.

Children

The app is not designed for children under 13, and we don’t knowingly collect their data.

Changes

If we make significant changes to this policy, we will announce them on this page and in the app.

Contact

support@nekojot.com