Privacy Policy
Last updated: 9 August 2026
In short: your financial data never leaves your device. Every transaction, account, category, budget, and exchange rate you enter is stored only on your phone, using an on-device database (Hive) — not on a server, because Saldo has no server for that data. Signing in is required to use the app, but it only unlocks your Saldo Premium subscription and optional push reminders; it has nothing to do with your money.
What stays on your device, always
All financial data — accounts, transactions, transfers, categories, budgets, the exchange-rate table, funds, debts, and planned transactions — is stored locally on your device and is never uploaded, synced to a server, or shared with anyone, including us. Uninstalling the app permanently deletes it.
Why sign-in is required, and what it actually does
Saldo requires signing in with Google or Apple to use the app. This is deliberately scoped to identity and account management only — it never touches your financial data. Signing in:
- Creates a minimal profile (your email, display name, and profile photo, if you share one) used to identify your account.
- Lets you subscribe to Saldo Premium and restore that subscription on a new device.
- Registers your device for optional push notifications (bill/reminder alerts).
Data we collect, and who processes it
Saldo uses a small number of third-party services, each scoped to a specific job. None of them ever receive your financial data — only the identity/account information below.
| Service | What it's used for | What it receives |
|---|---|---|
| Firebase Authentication | Sign-in with Google/Apple | Email, name, photo, provider |
| Cloud Firestore | Storing your minimal account profile | Email, name, photo, push tokens |
| Firebase Cloud Messaging | Push notifications (optional) | A device push token |
| Firebase Analytics | Understanding app usage (screens, feature use) | Anonymized usage events, no financial figures |
| RevenueCat | Managing your Saldo Premium subscription | Email, name, purchase/entitlement status |
All five are standard identity/analytics/billing infrastructure — none of them are an ad network, and none of them are given your transactions, balances, budgets, or any other financial figure. That data simply never reaches them, because it never leaves your device in the first place.
Biometric app lock
If you turn on the optional Face ID/Touch ID/fingerprint lock, authentication is handled entirely by your device's own operating system. Saldo never receives, stores, or has access to any biometric data — it only receives a yes/no "unlocked" result from the OS.
What Saldo does not do
- No advertising, and no ad-tracking identifiers are used.
- No financial data — transactions, balances, budgets, exchange rates — is ever transmitted, synced, or sold.
- No data is shared with third parties beyond the five services listed above, each strictly for the purpose stated.
Account deletion
You can request deletion of your account and associated profile data (email, name, photo, push tokens) at any time by contacting us at the address below. Because financial data is never uploaded in the first place, deleting the app itself is enough to permanently erase it.
Children's privacy
Saldo is not directed at children and does not knowingly collect information from anyone under the age required to hold a Google or Apple account in their region.
Changes to this policy
If Saldo's data practices change, this page will be updated first, with a new "last updated" date above.
Contact
Questions about this policy can be sent to abdo.arab2018@gmail.com.