Netty is a personal finance app for iPhone. It is built so that your money stays yours: there is no account, no login and no server of ours. This policy explains what the app stores, what leaves your device, and why.
Who is responsible
Netty is developed and published by Kacper Matelski, an individual developer based in Poland ("we", "us"). For anything about this policy or your data, write to k.matelski1@gmail.com.
In short
- Everything you enter (accounts, balances, transactions, categories, recurring rules, notes) is stored on your iPhone, and, once iCloud sync is available and you turn it on, in your own private iCloud. We cannot read it.
- Netty has no server of ours and shows no ads. If a feature ever needs to go online, this policy will say so first.
- Two third parties see a small amount of anonymous data: Apple and RevenueCat to handle your purchase and to tell us whether an Apple Ads campaign brought you to Netty, and TelemetryDeck to count anonymously how the app is used. You can turn the usage statistics off.
- We do not sell data, build profiles or use advertising identifiers.
Data that stays on your device
| What | Where | Why |
|---|---|---|
| Accounts, balances, transactions, categories, groups, recurring rules, notes, currencies and exchange rates | A local database on your iPhone (and in your private iCloud when sync is on) | This is the app |
| Settings and preferences (text size, Face ID lock, notification choices, the analytics switch) | Local preferences on your iPhone | So the app remembers how you set it up |
| A random installation ID | Local preferences on your iPhone | See Usage statistics below |
This data is protected by your iPhone's own encryption and by your passcode. If you turn on Face ID lock, the Face ID or passcode check is done entirely by iOS; Netty only learns whether it succeeded and never sees biometric data.
Reminders for recurring transactions are local notifications scheduled on your iPhone. They do not go through any server.
Export. When you export your data as CSV or JSON, Netty writes a file and hands it to the iOS share sheet. From there it goes only where you send it (Files, Mail, AirDrop, another app). We never receive a copy.
Deleting your data. Deleting the app deletes everything Netty stored on your iPhone. Data in iCloud is deleted through iOS Settings › Apple Account › iCloud › Manage Storage, or when you turn sync off and remove the data.
iCloud sync
iCloud sync uses Apple's CloudKit private database. Your data travels between your devices through your own iCloud account, protected by Apple, and is readable only by you. We have no access to the private database. Apple's handling of iCloud is described in Apple's Privacy Policy.
Purchases
Netty is a paid app: a monthly or yearly subscription, or a one-time lifetime purchase, bought through Apple's App Store. Payment is handled entirely by Apple; we never see your card, your Apple ID or your name.
To know whether your purchase is active, Netty uses RevenueCat (RevenueCat, Inc., USA). RevenueCat receives:
- a random anonymous app user ID generated on your device,
- your App Store purchase receipt and the product you bought,
- basic device information (iOS version, device model, app version, locale).
RevenueCat uses this only to validate purchases and to tell the app which plan is active. See RevenueCat's Privacy Policy. Legal basis: performance of the contract between you and us (providing what you paid for).
Apple Ads attribution
We advertise Netty on the App Store through Apple Ads. To learn whether such an ad led to your install, the app asks iOS for an attribution token (Apple's AdServices framework) and passes it to RevenueCat, which asks Apple what that token stands for. The answer is limited to campaign-level information: whether the install came from an Apple Ads campaign and, if so, which campaign, ad group, keyword and country, together with the date. It contains no identifier of you, no advertising identifier (IDFA) and no personal data; Apple's attribution does not require tracking permission and we do not ask for it.
RevenueCat links this campaign information to the same anonymous app user ID as your purchase, so we can see, in aggregate, which campaigns bring people who subscribe. It is used for nothing else and is not shared with any ad network. Legal basis: our legitimate interest in knowing whether our advertising works, kept proportionate by using only aggregate, campaign-level data.
Usage statistics
To improve Netty we count, anonymously, how many people open the app, how far they get through onboarding, how many see the plans screen and how many buy. We use TelemetryDeck (TelemetryDeck GmbH, Germany), a privacy-first analytics service that stores only aggregates.
What is sent, and only this:
- the event names
app_opened,onboarding_step(with the step number),onboarding_completed,paywall_shown,purchase_completedandpurchase_restored(with the plan name, never a price), - app version and build, iOS version, device model and your language/region setting,
- a random installation ID, generated once on your device and hashed on the device before it is sent, so it cannot be traced back to you or your Apple ID. A reinstall creates a new ID.
Never sent: amounts, balances, account names, categories, currencies, notes, or anything else you type into Netty. Netty does not use the advertising identifier (IDFA) and does not ask for tracking permission because it does not track.
You can turn this off at any time in Settings › Security and data › Anonymous usage statistics. After that, nothing is sent. Legal basis: our legitimate interest in understanding whether the app works for the people who install it, kept proportionate by collecting only anonymous counts. See TelemetryDeck's Privacy Policy.
What we do not do
- No account, no e-mail address, no password.
- No ads inside the app, no ad networks, no advertising identifiers. Apple Ads attribution (above) only tells us which App Store campaign an install came from.
- No selling, renting or sharing of your data with anyone beyond the three providers named above.
- No access by us to what you enter in the app.
Data retention
Your financial data lives on your device and in your iCloud for as long as you keep it. Purchase records at Apple and RevenueCat are kept for as long as needed to honour your purchase and meet legal and tax obligations. TelemetryDeck receives anonymous data only; it cannot be attributed to you and is kept as aggregate statistics.
Your rights
Under the GDPR you have the right to access, rectify, erase and port your personal data, to restrict or object to processing, and to complain to a supervisory authority (in Poland, the Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
Because Netty keeps your data on your device and we hold nothing that identifies you, the most direct way to exercise these rights is in the app itself: export your data from Settings, edit or delete anything you like, turn off usage statistics, or delete the app. For purchase-related data, Apple is the party that holds your identity; for anything else, write to us and we will help as far as we are able to.
Children
Netty is not directed at children under 16 and we do not knowingly collect data from them. Netty collects no personal data from anyone, so no special handling arises.
International transfers
RevenueCat is based in the United States. Transfers rely on the EU Standard Contractual Clauses included in RevenueCat's terms, and the data involved is limited to the anonymous purchase information described above. TelemetryDeck processes data in the European Union.
Changes to this policy
When something in this policy changes, we update the date at the top and publish the new version at the same address. If a change means Netty would send new kinds of data, the app will tell you before it does.
Contact
Kacper Matelski
k.matelski1@gmail.com