Privacy Policy

Effective date: October 16, 2026 (app version 1.2)

This Privacy Policy describes how the Apunta app (the “App”), operated by JHON MORENO (“we”), handles and protects your information.

In short: your expenses are encrypted on your iPhone before they leave it (end-to-end encryption). We store that encrypted information to back it up and sync it, but we cannot read it. We do not sell your data or track you.

1. Your account

To use the App you sign in with Sign in with Apple or Google. The account exists to back up your notebook in the cloud, restore it if you change or lose your iPhone and, with Apunta Pro, sync it across your devices.

• From Apple or Google we only keep an opaque account identifier. We do not store your name or email address.
• We create an internal user ID and per-device sign-in sessions (device type, app version and usage dates). Session tokens are stored hashed.
• If you use Sign in with Apple, we store the token Apple gives us in encrypted form, only so we can revoke it when you delete your account.

2. Your financial data: end-to-end encrypted

• Expenses, income, categories, budgets, accounts, payment methods and other records are stored on your device. When they are backed up or synced, they are encrypted on your iPhone with a key only you control (AES-GCM) before being sent.
• Receipt photos are stored on your device. With Apunta Pro they are included in the backup, also end-to-end encrypted.
• Our server only receives encrypted data and technical metadata (size, date and number of records or files). We cannot read your expenses.
• Your encryption key is stored protected in your account. You can optionally create a recovery code in Settings.

3. Data processed only on your device

• Location: if you turn on location reminders, the App detects visits to stores on your iPhone to remind you to log an expense. Location is not sent to our servers. Apple Maps is used to look up the place name.
• Voice and photos: dictation, receipt scanning and photos are processed on your device with iOS features.
• Ask Apunta and the monthly analysis are calculated on your iPhone (Apple Intelligence when available).
• Preferences (language, currency, appearance, reminders) and the interpretation of what you type with the on-device parser.

4. Cloud AI interpretation (optional)

If the on-device parser can’t understand what you typed and you allow it, the text you just typed (for example, “coffee 6, uber 12”) is sent to DeepSeek through our Cloudflare Workers proxy to interpret it. Your history, account and device data are not sent, and the proxy does not store the text. You can withdraw this permission at any time in Settings; without it, everything is interpreted on your iPhone.

5. Subscriptions

Apunta Pro purchases are processed by Apple. To enable Pro on your account and devices, we store the subscription status Apple reports to us (product, status, expiration date and original transaction ID). We do not receive your payment details.

6. Ads

People without Apunta Pro see banner ads from Google AdMob. We request non-personalized ads, and the App does not ask for permission to track you or use Apple’s advertising identifier (IDFA). Google may collect device data, approximate location, ad interactions and diagnostics according to its policy. In the European Economic Area, the United Kingdom and Switzerland we ask for your consent with Google’s form, and you can change it in Settings › Legal.

7. Service providers

• Apple: sign-in, purchases and maps.
• Google: Google sign-in and ads (AdMob).
• Cloudflare: network and protection for our server and AI proxy.
• Hosting provider where we host our database and the encrypted backups.
• DeepSeek: only if you allow cloud AI interpretation.

We do not sell or share your data for advertising. Our server does not keep IP addresses in its logs.

8. Retention

• On the free plan we keep your latest backup; with Apunta Pro, the last 30.
• If your Pro subscription ends, sync data is deleted from the server after 180 days (your backup is kept).
• When you delete your account, your data is erased after a 7-day grace period (immediately if the account is empty), and server backups are purged within 35 days.

9. Your rights and how to delete your account

• Delete your account and all your data in the App: Settings › Account & backup › Delete account. If you used Sign in with Apple, we revoke the access with Apple.
• Export your data as CSV, Excel or PDF from Settings.
• Withdraw the cloud AI permission, turn off location reminders and change your ad consent in Settings.
• Request access, correction or deletion by emailing us.

10. Children’s privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children.

11. Security

We use end-to-end encryption for your financial data, HTTPS connections and encrypted storage of credentials. You can also protect the App with Face ID or your passcode.

12. Changes to this policy

We may update this policy. We will let you know about important changes by updating the effective date and, when appropriate, in the App.

13. Contact

If you have questions about this policy or your data, email us at:

jhonm.moreno@gmail.com

Last updated: October 16, 2026.