Privacy Policy

The short version

Worthline collects nothing. There are no accounts, no servers we run, no third parties, no in-app analytics, no advertising, and no telemetry. Your financial data is stored only on your device, in a database encrypted with a key derived from your passphrase. (The one exception is aggregate, anonymous statistics the app stores may share with us — see “App-store analytics” below.)

We — the developer — never receive, see, or have any way to access your data. There is nothing on our end to leak, sell, or hand over, because nothing ever reaches us.

What is stored, and where

Everything you enter lives in a single encrypted database file on your device, plus its encrypted receipt files and encrypted backups. The encryption key is wrapped by your passphrase and never leaves the device in usable form. Losing the passphrase means losing access to the data — by design, there is no recovery and no back door.

Biometric unlock (Face ID, Touch ID, or fingerprint), when you enable it, stores a copy of the key in your device’s secure hardware. That copy never leaves the device and never travels in a backup or transfer.

Backups and transfers you choose

If you turn on your device’s system backup (iCloud / Finder on Apple devices, or Google backup on Android), the app’s encrypted database rides along in those backups as ciphertext. Once it is in iCloud or Google, it is governed by Apple’s or Google’s privacy policies, not this one, and it stays there until you delete it from that account. You control this with a switch in Settings, and it is your choice; the app never sends anything on its own.

A transfer file you export to move your data to another device is also encrypted and only ever goes where you send it. Your passphrase is never inside it.

No tracking, no network

The app makes no network requests to us or to any third party in the course of normal use. It does not contain advertising or analytics SDKs. It does not build a profile of you.

App-store analytics (aggregate and anonymous)

Apple and Google may share aggregate, anonymous statistics about the app with us — for example how many people installed it, roughly how many use it, and crash or performance rates. This is gathered and anonymized by Apple or Google at the platform level, only from users who opt into sharing diagnostics with them; Worthline itself contains no analytics code. We receive only aggregate numbers and cannot link any of it to you or to any individual.

You can turn this off on your device: on iPhone, Settings → Privacy & Security → Analytics & Improvements → “Share With App Developers”; on Android, in your device’s usage & diagnostics setting.

Children

Worthline is a general-purpose planning tool and is not directed at children. Because it collects no data at all, it collects no data from anyone, including children.

Contact

Questions about privacy: hello@worthline.app. Because we hold no data about you, there is no account to close and no personal data for us to delete or export on request — it is already only on your device, under your control.