Privacy Policy

1. The short version

• Your budget lives on your iPhone. Fince has no account to create, never connects to your bank, shows no ads, and contains no analytics, crash-reporting or advertising SDK.
• If you turn on iCloud sync, your data is copied to your own private iCloud. We have no copy and cannot read it.
• The only data that reaches us comes from the online AI features: the AI chat, and weekly insights when they cannot run on your iPhone. A summary of your finances then goes through our server to our AI provider, Anthropic, to answer you. Our server keeps none of that content. It only keeps short-lived usage counters tied to a random install ID.
• You can use every other feature of Fince without an internet connection.
• The fince.app website measures its audience with Google Analytics, only if you accept it (section 17).

The rest of this policy explains each point in detail.

2. Who we are

Fince is developed by Nice Express, based in Morocco, which is responsible for the processing described in this policy.

Contact for any privacy question or request: contact@fince.app.

3. Data that stays on your iPhone

Fince stores the following on your iPhone only, in the app's own storage, which iOS encrypts with your device passcode:

• Transactions you enter: amount, category, date, note, tags, account, and the original amount and currency when you record a transaction in another currency
• Receipt photos you attach, and the text Fince reads from them
• Accounts and their opening balances, transfers between accounts
• Budgets, categories, recurring payments, savings goals and debts
• Your settings: base currency, exchange rates you typed in, theme, lock, notifications, privacy mode, AI preferences
• The last weekly insights generated, so they can be shown again

How the features that handle this data work:

• Receipts. You take a photo with the camera or pick one with the system photo picker, which gives Fince only the photo you choose and no access to the rest of your library. The text on the receipt is read on your iPhone with Apple's Vision framework.
• Automatic backups. Once a day Fince saves a backup file in the app's storage and keeps the 7 most recent. Like the rest of the app's data, these files are included in your own iPhone backups (iCloud Backup or a computer), depending on your iOS settings.
• Widgets. Fince writes a small summary for its widgets (this month's totals, top categories, the next recurring payment) to storage that only Fince and its widgets can read. When privacy mode hides amounts in the app, the widgets hide them too.
• Siri and Shortcuts. When you add a transaction through Siri or Shortcuts, Fince reads the text on your iPhone. Speech recognition is handled by Apple under Apple's privacy policy.
• Notifications (budget alerts and payment reminders) are scheduled on your iPhone. Fince uses no push notification service.
• Face ID or passcode lock is handled by iOS. Fince only learns whether the check succeeded and never receives biometric data.
• On-device insights. On iPhones that support Apple Intelligence, weekly insights are generated on your iPhone by Apple's on-device model, and nothing leaves the device.

None of these features makes a network connection.

4. Optional iCloud sync

iCloud sync is off by default. When you turn it on, Fince uses Apple's CloudKit to copy your data, including receipt photos, to the private database of your own iCloud account, so your iPhones stay in sync.

• This data is stored by Apple under your agreement with Apple and Apple's privacy policy. It is encrypted in transit and on Apple's servers.
• We have no access to your iCloud data and keep no copy of it.
• Turning sync off stops new changes from syncing. What is already in iCloud stays there until you delete it in your iPhone's iCloud settings (Settings › your name › iCloud › Storage).
• If you use "Reset all data" while sync is on, the synced copies are deleted as well.

5. Files you export

In Settings you can export a backup file with "Export as JSON" (all your data, including receipt photos) or your transactions with "Export as CSV", and share the file through the iOS share sheet. What happens to a file after you share it is under your control, not ours.

6. AI features and the data they send

6.1 When data leaves your iPhone

Data is sent only in these two cases, and only when you act:

1. AI chat — each time you send a message.
2. Weekly insights generated online — when you ask for insights and they cannot be generated on your iPhone: on iPhones or iOS versions without Apple Intelligence, or if you turned off "Generate insights on this device" in Settings.

Before the first of these requests, Fince asks for your permission and names Anthropic, the AI provider. Without your permission, nothing is sent.

6.2 What is sent

With the AI chat:

• This month's income, expenses and balance
• Your 3 largest expense categories this month
• This month's budgets: category, limit and amount spent
• Recurring bills and income still due this month: date, category, amount and note
• Your 10 most recent transactions from the last 30 days: date, category, amount and note. You can leave notes out with "Include notes in AI chat" in Settings › AI.
• The messages of the current conversation
• Your language and region code (for example fr_MA), so the answer is in your language

With online weekly insights:

• Total income and expenses, spending per category and daily totals for the last 7 days
• Your language

Weekly insights never include notes or individual transactions.

Technical information sent with every AI request:

• A random install ID (see 6.4)
• The app's identifier
• Your IP address, as with any internet connection
• If you subscribe to Fince Premium, the original transaction ID of your subscription, so our server can check with Apple that it is active

We never send your name, email address, Apple Account, contacts, location, photos, or any data other than what is listed above.

6.3 Where it goes

Your request goes over an encrypted HTTPS connection to our server, a small program hosted by Cloudflare. The server checks your usage limits and forwards the content to Anthropic's Claude API, which writes the answer.

• Our server does not store your messages or your financial data. It passes them on and forgets them.
• Anthropic receives the content listed in 6.2, but not your IP address, install ID or subscription ID.
• The chat conversation is not saved on your iPhone either. It disappears when you close the app.

6.4 The install ID

The install ID is a random code created on your iPhone the first time you use an online AI feature, and kept in the iPhone's Keychain.

• It is not derived from your name, your Apple Account, your device's hardware or its advertising identifier.
• It is not synced to your other devices.
• Because iOS keeps Keychain items, it may remain on your iPhone after you delete the app.
• It is used only to apply the free-tier and rate limits, and to allow one subscription on up to 5 devices.

6.5 Your choices

• Turn off "Share data with Anthropic" in Settings › AI to withdraw your permission. Fince then asks again before sending anything.
• Turn off "Include notes in AI chat" in Settings › AI.
• Keep "Generate insights on this device" on, so insights stay on your iPhone when it supports it.
• Do not use the AI chat. Everything else in Fince works without it.

7. What our server keeps, and for how long

Our server keeps only the counters and technical records below. They expire automatically, are used only for the purpose stated, and are never combined with other data, sold or shared.

8. Purchases

Fince Premium is sold through Apple's App Store. Apple processes the payment, and we never see your payment details. To confirm that a subscription is active, our server sends its original transaction ID to Apple's App Store Server API (see sections 6 and 7).

9. What we do not do

• No account, sign-in or email address
• No connection to banks, cards or any financial institution
• No analytics, crash reporting or advertising SDKs
• No advertising, no advertising identifier (IDFA), no tracking across other apps or websites
• No sale or sharing of your data
• No access to your location, contacts or calendar

10. Service providers

We use these providers only to run the online AI features:

• Cloudflare, Inc. hosts our server and the counters listed in section 7 — https://www.cloudflare.com/privacypolicy/
• Anthropic PBC provides the AI model — https://www.anthropic.com/legal/privacy. Under Anthropic's commercial terms, data sent through its API is not used to train its models. Anthropic keeps it for a limited period that it sets, currently up to 30 days, and longer only when a request is flagged under its usage policy.

We also rely on Apple for App Store purchases and, if you turn them on, iCloud and Apple Intelligence. For those, your own agreement with Apple applies — https://www.apple.com/legal/privacy/

For the fince.app website only, and only if you accept: Google Ireland Limited (Google Analytics) — https://policies.google.com/privacy

For the fince.app website and our mailbox: Hostinger, which hosts them — https://www.hostinger.com/legal/privacy-policy

11. Legal bases (EEA, UK and similar laws)

• Answering your AI requests: the processing is necessary to provide the feature you ask for (performance of a contract).
• Rate limits, abuse prevention and subscription checks: our legitimate interest in keeping the service available and preventing abuse.
• Website audience measurement: your consent, which you can withdraw at any time (section 17).
• The data on your iPhone and in your iCloud is not processed by us.
• Answering messages sent through the contact form: our legitimate interest in replying to you (section 17).

12. International transfers

Cloudflare operates servers worldwide, and Anthropic processes requests in the United States. When you use the online AI features, your request may therefore be processed outside your country. We rely on the safeguards in these providers' data processing terms, such as the European Commission's Standard Contractual Clauses.

If you accept audience measurement on the website, Google may process that data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework.

13. Your rights

• Access and export: all your data is visible in the app. You can export it as a backup or a CSV file.
• Deletion: "Reset all data" in Settings deletes your data on the iPhone, and in iCloud when sync is on. Deleting the app deletes its data on the iPhone. To delete the iCloud copy, use your iPhone's iCloud settings (section 4).
• AI data: our server keeps no content, and its counters expire within 32 days. Because they are tied to a random install ID, we usually cannot link them to you. You can still write to us.
• Objection and withdrawal: stop using the online AI features at any time.

Depending on where you live (for example under the GDPR, UK GDPR, CCPA or Moroccan law 09-08), you may have further rights, including the right to lodge a complaint with your data protection authority. To exercise any right, contact us at contact@fince.app.

14. Security

• Requests to our server use HTTPS, and the server stores no content.
• On your iPhone, iOS encrypts the app's data with your device passcode. You can also require Face ID or your passcode to open Fince, and hide amounts with privacy mode.

15. Children

Fince is not directed to children under 13, or under 16 where that is the applicable age. We do not knowingly collect information from children. If you believe a child has provided data through the AI features, contact us so we can address it.

16. Changes to this policy

We may update this policy. When we make significant changes, we will update the date at the top and tell you in the app.

17. The fince.app website

The fince.app website has no account and no advertising. We measure its audience with Google Analytics, only if you agree:

• On your first visit, a banner asks for your choice. Until you accept, nothing from Google loads and no Google cookie is set.
• If you accept, Google Analytics records the pages you view, how you arrived (for example from a search engine), your type of device, browser and language, and an approximate location derived from your IP address, which Google does not store. It sets the _ga and _ga_… cookies, which last up to 13 months.
• Google signals and ad personalization are turned off. Google keeps the detailed data for 2 months; we only look at totals.
• You can change your choice at any time with "Cookie settings" at the bottom of every page. Declining deletes these cookies.

This measurement is provided by Google Ireland Limited and Google LLC — https://policies.google.com/privacy. Its legal basis is your consent.

The contact form

If you write to us through the contact form, we receive your name, your email address, the topic you choose and your message, as an email in our mailbox at contact@fince.app. We use them only to answer you and, if you suggest something, to improve Fince. We delete these messages 12 months after our last exchange, unless the law requires us to keep them longer.

• The contact page sets one technical cookie (PHPSESSID), needed for its security checks. It holds no information about you, is not used to measure the audience, and is deleted when you close your browser.
• To block spam, the server allows at most 3 messages an hour from the same IP address. It keeps only a fingerprint of that address (a salted hash), never the address itself, and deletes it after one hour.
• The website and our mailbox are hosted by Hostinger — https://www.hostinger.com/legal/privacy-policy

Its legal basis is our legitimate interest in answering the people who write to us.

18. Contact

Email: contact@fince.app
Developer: Nice Express
Country: Morocco