Privacy Policy

1 · Who We Are

BalancePilot is an iOS application developed and operated by Cyril Daime ("we", "us", or "our"), an independent developer. You can contact us at cyril.daime@gmail.com.

This Privacy Policy explains what data BalancePilot collects, how it is used, and what rights you have over your data.

2 · Data We Collect

Account data

When you create an account, we collect your email address and a hashed password. Your email is verified with a 6-digit confirmation code. No name, phone number, or social login is required.

Financial data you enter

BalancePilot stores the information you voluntarily enter to manage your finances:

• Account names, account types, banks and currencies you choose
• Balances and the balance history (snapshots) you record
• Budget categories, planned and actual amounts, and monthly notes
• Reserves and sinking funds
• Loans / credits and their terms
• Net-worth and forecast figures derived from the data above

This data is linked to your account and stored on our servers. It is never shared with third parties for advertising or profiling purposes.

Device & usage data

We collect only the minimal technical data needed for the app to function:

• App version and operating system version
• Your entitlement status (Pro or Free)

We do not use analytics or crash-reporting SDKs, and we do not track advertising identifiers, browsing behavior, or location.

3 · Third-Party Services

Supabase (database & authentication)

BalancePilot uses Supabase to securely store your account and financial data. Supabase is hosted on AWS infrastructure in the EU region. Supabase acts as a data processor on our behalf and does not access or use your data independently.

Supabase Privacy Policy: supabase.com/privacy

RevenueCat (in-app purchase)

The one-time Pro purchase (BalancePilot Pro, lifetime) is managed by RevenueCat. RevenueCat processes your App Store transaction data to verify and manage your purchase. Payment details (credit card, Apple ID) are handled entirely by Apple and are never transmitted to us or RevenueCat.

RevenueCat Privacy Policy: revenuecat.com/privacy

Resend (email delivery)

Transactional emails, such as your account confirmation code, are delivered through Resend on behalf of Supabase. Only your email address is processed to deliver these messages; we do not send marketing emails.

Resend Privacy Policy: resend.com/legal/privacy-policy

Exchange-rate data

To convert foreign-currency balances, the app fetches public exchange-rate data from the open-source Currency API (served as static files via a public CDN). These requests contain no personal data or account identifiers — only a request for the current published rates.

Apple (App Store, StoreKit)

All payments are processed by Apple. Apple's privacy practices are governed by the Apple Privacy Policy.

4 · How We Use Your Data

We use the data we collect exclusively to:

• Provide the core functionality of the app (managing accounts, budgets, reserves, loans and net-worth forecasts)
• Authenticate you securely and sync your data across your devices
• Manage your Pro entitlement status
• Diagnose and fix technical issues

We do not:

• Sell your data to any third party
• Use your financial data for advertising
• Share your data with data brokers or analytics platforms
• Profile you for purposes beyond delivering the app's core features

5 · Data Retention

Your data is retained for as long as your account exists. If you delete your account, all associated data (accounts, balances, budgets, reserves, loans and account information) is permanently deleted from our servers within 30 days.

6 · Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to the processing of your data

How to delete your account

You can delete your account and all associated data directly from the app:

Settings → Account → Delete Account

Alternatively, send an email to cyril.daime@gmail.com with the subject "Account Deletion Request" and we will process your request within 30 days.

7 · Data Security

All data transmitted between the app and our servers is encrypted using HTTPS/TLS. Passwords are hashed and never stored in plain text. Access to the database is restricted and protected by Supabase's Row Level Security (RLS) policies, ensuring each user can only access their own data.

You may optionally protect the app with Face ID or Touch ID. This biometric check is performed entirely on your device by iOS; your biometric data never leaves your device and is never transmitted to us.

8 · Children's Privacy

BalancePilot is designed for adults and is not intended for use by children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

9 · Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via an in-app notice or email. The "Last updated" date at the top of this page reflects the most recent revision.

10 · Contact

For any privacy-related question, data access request, or account deletion request, contact us at: