Privacy Policy

TechTech, run by Charles Tseng in Taiwan, is the controller of the information described here. You can reach us at support@accounted.finance.

This policy applies to the Accounted iOS app and to the website accounted.finance. Some parts of this policy describe features that we may add in the future; those are written with 'may' so you can tell them apart from what the app does today.

Everything you enter into Accounted, including accounts, balances, amounts, history, groups, names and colors, is stored on your iPhone. If you're signed in to iCloud, Apple also keeps it in your own iCloud account, so it appears on your other devices signed in to the same Apple Account. In the current version, we run no server that stores it, and we cannot see it in either place.

The current version has no Accounted account and no login; the app only creates a random identifier on your device, described in section 4. If that changes, we will tell you first. If you're not signed in to iCloud, or turn iCloud off for Accounted, your data stays on this iPhone only. Deleting an account in the app deletes it on every device, while the app's backups of your balance sheet keep it until they're replaced or you delete them. Deleting the app removes the data from that iPhone, while the copy in iCloud stays until you delete it in your iPhone's iCloud storage settings. Apple's iCloud terms and privacy policy apply to what iCloud stores.

Your settings, such as hiding amounts and your display currency, are kept only on each device and are not synced.

Accounted can look up prices and exchange rates for the holdings you link.

• Prices, search and exchange rates: these go through our price server. The app sends only the symbols you hold (or the text you typed into search), and for the days you didn't open the app, the day to fill from. It never sends quantities, amounts, account names, the random identifier described in section 4, or anything else that identifies you.

• If our price server can't be reached: your iPhone may download whole public files directly from Taiwan's official public data sources and from the European Central Bank. These files cover entire markets, so the request does not reveal what you hold. Like any website, these organizations can see an ordinary HTTPS request, including your IP address.

Our price server keeps a list of which symbols have been asked for, along with each day's public price for them, so it can serve prices to everyone and give your past prices back when you move to a new iPhone. That list has no IP address, no device identifier and nothing that says who asked; a symbol asked for by one person or by a hundred people looks the same. Our hosting provider processes your IP address to deliver each request and to prevent abuse; we do not store it.

To get the data, our price server asks third-party market data sources. They receive only the symbols (or search text), they see requests from our server, not from you, and they receive no information about you.

The app uses an analytics service to learn which features are used and which are not. It sends which features you use, the random identifier described below, a randomly generated device id, your device model, your iOS version, and your language and region settings. It may also include the type of an account, such as 'mortgage' or 'stock', and the currencies of holdings you price yourself, such as 'GBP', which tells us which markets to support next. It never includes amounts, names, symbols, your IP address or your location.

The first time you open the app, it generates a random identifier (a UUID) on your device. It contains no name, email address or Apple Account, and it is not derived from any of them. It is stored in your keychain as an item that can sync: if iCloud Keychain is on, it is the same on your devices signed in to the same Apple Account, and if not, it stays on that device. We use it as your user id for analytics and for purchases (section 5), so that both follow the same person across devices and, later, other platforms. We add no other identifier. Because analytics and purchases use the same identifier, the data we hold about you is tied to it, though not to your name or email.

The app also uses a crash reporting service, so we can find and fix what makes it crash. If the app crashes, it sends a crash report the next time you open it: where in the app's code the crash happened, your device model and your iOS version. Each time you open the app, it also sends a short session record (your device model, iOS and app version, network type and the time), so we know what share of sessions end in a crash. Both carry a random identifier that the crash reporting service creates for this installation of the app; they do not carry the random identifier described above. We add nothing from your balance sheet; on rare occasions, the error message the system attaches to a crash can describe the data the app was working with at that moment. If your device's region is in the European Economic Area or the United Kingdom, the app sends no crash reports or session records at all.

We do not use this information for advertising and we do not combine it with other data to identify who you are. If your device's region is in the European Economic Area or the United Kingdom, the app sends no analytics at all. Our analytics service stores this data in the United States.

Accounted Pro is sold through Apple's In-App Purchase. Apple handles the payment, and we never see your payment details. To confirm what you have bought and unlock it on your devices, we use a purchase validation service, which receives the purchase receipt, the product, the price, the currency, your App Store region and the random identifier described in section 4.

If you turn on reminders, the app schedules local notifications on your iPhone. They are created and delivered by the device itself. We run no push server, and the notifications do not contain amounts or account names.

accounted.finance is a static website. Our hosting provider processes each request, including your IP address, to deliver the site and to protect it from abuse.

The interactive demo on the home page runs entirely in your browser and sends nothing to us.

The website uses an analytics service to count page views and clicks, and which campaign or website brought you here. It does not read what you type into forms. Unlike the app, the website's analytics service receives your IP address and uses it to estimate your approximate location (country and city), so we can tell which markets visitors come from. Visitors in Europe will see a consent banner first, and nothing is measured if you decline.

The website keeps your theme choice and your consent choice in your browser's local storage. They stay on your device, and you can clear them in your browser settings.

If you arrive from a link tagged with a campaign, or from another website, the website adds where you came from (the campaign's name, or that website's name) to its App Store links, so that Apple can count how many downloads each one brought. Apple reports these counts to us only as totals. Once analytics is allowed (from the start outside Europe; in Europe, after you accept), the website also remembers where you came from for the rest of your visit, in your browser's session storage, and clears it if you decline.

We do not sell your information. We do not share it for advertising. We do not track you across other companies' apps or websites. There are no ads in Accounted and no advertising SDKs. We do not give your information to data brokers.

These parties may receive information about you: Apple (the App Store, purchases, iCloud and the on-device features of iOS), and the service providers that work on our behalf: our hosting provider (the website and the price server), our analytics service, our crash reporting service and our purchase validation service. Each is bound by data processing terms that provide protection equivalent to what this policy describes, and may use the information only to provide its service to us. If you'd like to know who they are, ask us at support@accounted.finance.

The market data sources described in section 3 receive no information about you. We may also disclose information if the law requires it.

• Your balance sheet: on your iPhone until you delete the accounts or the app, and in your iCloud until you delete the accounts or delete Accounted's data from your iCloud storage. Its backups are kept the same way: the app makes one a week and keeps the last 3, plus up to 3 you make yourself, until you delete them in Accounted's Settings > iCloud. Settings: on each device until you delete the app.

• Price lookups: the list of symbols on our price server contains no personal information and is kept for as long as the service runs. Abuse-prevention counters are temporary.

• Analytics and purchase data: kept by our analytics and purchase validation services according to their retention settings. The random identifier: in your keychain until you delete the app (and, if iCloud Keychain is on, until you remove it from iCloud Keychain).

• Crash reports: kept by our crash reporting service for 90 days. Session records: kept by our crash reporting service according to its retention settings.

• Emails you send us: kept as long as needed to answer you and keep a record of the conversation.

You can delete all your balance sheet data at any time by deleting accounts and backups in the app, which deletes them on every device, or by deleting Accounted's data from your iCloud storage and then the app. You can decline cookies and measurement on the website.

Depending on where you live, including under the EU and UK GDPR and Taiwan's Personal Data Protection Act, you may have the right to ask to access, correct or delete personal data about you, to object to or restrict its use, and to withdraw consent you gave. Because the analytics data is not linked to your name or email, we may need the random identifier to find it. Contact us at support@accounted.finance and we will help.

If you are in the EU or UK, you can also complain to your local data protection authority.

Accounted is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, contact us and we will delete it.

We are based in Taiwan. Our service providers may process information in the United States and other countries. Where required, these transfers rely on the safeguards in their data processing terms.

We may update this policy as the app changes. We will post the new version on this page and update the effective date. If a change affects what this policy says about accounts, logins, what we can see, or what leaves your device, we will tell you in the app before it takes effect.

Questions or requests about this policy: support@accounted.finance.