Privacy Policy

Local financial data

OwnFi stores your account email, password hash, imported statements, transactions, accounts and balances, portfolio holdings, budgets, budget rollover, savings goals, debts, subscriptions, receipts, financial memories, merchant rules, cached exchange rates, and preferences in the app database on this device. This financial data is not uploaded to an OwnFi server.

Documents, camera, and photos

PDF, CSV, OFX, receipt, and screenshot imports are used only to extract transactions you choose to add. Camera access is used for receipt and screenshot capture. Photo access is used when you choose an image from the system picker.

Share Sheet and Voice Entry

On iOS, the OwnFi Share Extension lets you send PDFs, screenshots, and CSVs from other apps into OwnFi. On both platforms, voice entry and Siri Shortcuts / App Intents accept phrases like "add $15 coffee at Starbucks" and turn them into a transaction. Voice text is parsed on-device by the app's local parser; nothing is sent to an OwnFi server for transcription or interpretation. Where on-device dictation is used, it is handled by the operating system under its own privacy terms.

Quick Add gesture

You can bind a device gesture — Back Tap on iOS, Quick Tap or a launcher shortcut on Android — to log an expense without opening the app first. On iOS this uses OwnFi's Shortcuts actions: the amount, category, and note you enter are held in a shared container that only OwnFi and its own extensions can read, and are saved into the local database the next time you open the app. On Android the gesture simply opens OwnFi to a two-field quick-add form. Both paths run entirely on your device, add no permissions, and can be turned off in Settings.

Forecasts and projections

The Time Machine projects your future balance, and any "what if" changes you add, using only data already stored on this device — your recurring income, bills, debts, savings goals, and past spending. The calculation runs locally in the app; no forecast input or result is uploaded, and the "what if" changes you try are held in memory only — they are never written to your database and never leave the device. Projections are estimates based on your own data, not guarantees, and are not financial, investment, tax, legal, or accounting advice.

Notification and alert capture

On Android, if you explicitly grant the notification-listener permission, OwnFi can read bank transaction notifications (SMS or push alerts) and turn them into transactions. Only alerts that look like bank transactions are processed, and processing is entirely on-device. On iOS, Apple Wallet purchase notifications can be captured with your consent by an in-app helper. You can revoke either at any time in system settings, and captured alerts are only kept as parsed transactions in the local database.

Home-screen widgets

iOS and Android widgets display a small snapshot of budget progress, upcoming bills, savings goals, and exchange rates. Snapshots are generated on-device by the app and stored in a shared container that only OwnFi's widget extensions can read. Nothing is uploaded.

Apple Watch

If you pair an Apple Watch, the iPhone app sends the watch the same small on-device snapshot the widgets use — safe-to-spend, your next upcoming bill, and their display settings. The snapshot travels directly from your phone to your paired watch over Apple's device-to-device connection (Bluetooth or your local Wi-Fi); it does not pass through an OwnFi server or the internet, and the watch stores it locally so it can display it offline. The watch never accesses your full financial database. Voice quick-add on the watch uses the system dictation keyboard, which is provided by the operating system under Apple's own privacy terms; the resulting text is then parsed on your phone by the app's local parser, exactly like Siri voice entry.

Backups and family sync

Backup and family sync packages are created only when you request them and are encrypted with AES-256 using a key derived from your account credentials, before any transfer. Family sync offers two ways to deliver a package. Nearby sync discovers your family member's device on the same Wi-Fi network and sends the encrypted package directly from one device to the other over your local network — the data never touches the internet or any server. File sync travels through your device's standard share sheet, so you control where the file is saved or sent — Files, iCloud Drive, Google Drive, email, messaging, or elsewhere. In both cases, OwnFi never receives the package or the encryption key.

Biometrics and notifications

Face ID, Touch ID, or fingerprint authentication is used only to unlock the local app session. Budget, bill, and subscription reminders are scheduled locally on your device and may be delivered best-effort by the operating system.

Optional network access

Financial transaction data is not uploaded for analysis. Optional network calls are strictly limited to the following, and only occur when you use the corresponding feature:

• huggingface.co — downloading a language model file if you choose to install one from the Model Library, using a Hugging Face token you provide.
• open.er-api.com — fetching daily exchange rates if you use multi-currency features.
• query1.finance.yahoo.com — fetching public market prices for portfolio ticker symbols you add. Only the public ticker symbol is sent, never account or transaction data.

The app may also open documentation links in your browser when you tap them. Family sync's nearby transfer communicates only with your family member's device on your local Wi-Fi network — this is why the app asks for local network permission when you use the feature — and never reaches the internet. No other outbound network calls are made.

AI and financial guidance

AI insights run on-device. When you install a local Gemma model from the Model Library, the advisor generates its answers using that model on your device. When no model is installed, a deterministic advisor answers from your data using pure calculations. In either case, your questions and financial context are not transmitted to an OwnFi or third-party AI server. AI-generated content is educational and informational only, and is not financial, investment, tax, legal, or accounting advice.

Tracking and analytics

OwnFi does not include advertising SDKs, third-party analytics SDKs, or cross-app tracking. There is no telemetry describing which features you use, which screens you open, or what your finances look like.

Deleting your data

You can delete your local account and app data from Settings. This removes local financial data, preferences, model tokens, biometric session data, cached widget snapshots, and scheduled finance notifications from this device. Signing out or deleting your data also pushes a signed-out snapshot to a paired Apple Watch, clearing the figures it displays. Uninstalling the app removes everything else, including any downloaded model files.