That's five minutes a month for a complete, private record of your financial life — plus a journal of your decisions you can learn from later.
Portfolio Journal is offline-first: your data lives on your iPhone or iPad, protected by Face ID, with optional end-to-end iCloud sync between your own devices. There is no server, no account, and no way for anyone — including us — to see your balances. You can read more about the security model or export everything to CSV/JSON at any time.
+Portfolio Journal is offline-first: your data lives on your iPhone or iPad, protected by Face ID, with optional iCloud sync between your own devices through your own private iCloud database, encrypted by Apple. There is no server of ours, no account, and no analytics or advertising SDK in the app — we never receive your balances. You can read more about the security model or export everything to CSV/JSON at any time.
Portfolio Journal collects the data you choose to enter into the app, such as portfolio sources, snapshots, contributions, categories, goals, and journal notes. This information is stored locally on your device unless you enable iCloud sync or export your data.
-We also collect usage data and device identifiers. This includes product interaction data, device ID, other usage data, and advertising data.
+We collect nothing else. There is no account, no analytics SDK, no advertising SDK and no crash-reporting SDK in the app, and no usage data or device identifier is sent anywhere.
Your data is used to provide app functionality: portfolio calculations, charts, progress tracking, and reminders. Usage data and identifiers are also used to understand performance and measure advertising effectiveness.
+What you enter is used only to run the app on your device: portfolio calculations, charts, progress tracking, and reminders. It never reaches us.
For transparency, our App Store privacy labels include:
+For transparency, our App Store privacy labels declare:
These data types include product interaction, device ID, other usage data, and advertising data.
+The app also ships a privacy manifest (PrivacyInfo.xcprivacy) that declares no tracking, no tracking domains and no collected data types.
By default, all content is stored on-device. If you enable iCloud sync, your data is stored in your iCloud account and synced across devices signed in with the same Apple ID. Portfolio Journal does not operate separate servers for user data.
-You can export your data in CSV or JSON format at any time. Exported files are stored wherever you choose (Files app, local storage, or another provider you control).
+You can export your data in CSV or JSON format at any time, and Premium can write automatic JSON backups. These files are plain, readable JSON — the app does not encrypt them. They are stored wherever you choose (Files app, local storage, or your iCloud Drive), and anyone who can open the file can read your balances.
Usage data and device identifiers may be shared with advertising and analytics partners for measurement and attribution. This data may be used to track you across apps and websites owned by other companies.
-We also collect usage data and identifiers that are not linked to your identity for analytics and product improvement.
+None. Portfolio Journal does not share anything with advertising or analytics partners, because it does not collect anything to share. Purchases are handled by Apple through the App Store, and optional sync uses your own iCloud account; we see neither.
+Crash and hang diagnostics are collected on-device by iOS (MetricKit) and kept in the app container. They are never uploaded; sharing one from Settings is the only way a report leaves your device.
Your data is retained on your device until you delete it. If you enable iCloud, data is retained in your iCloud account until you delete it from the app or remove it in iCloud settings.
diff --git a/security.html b/security.html index 2961ee1..7d26f72 100644 --- a/security.html +++ b/security.html @@ -4,12 +4,12 @@Portfolio Journal can use iOS security features, including device passcodes and Face ID, to keep your data protected from unauthorized access.
If you enable iCloud sync, your data is stored and synced through your Apple ID. iCloud uses Apple-managed encryption in transit and at rest.
+If you enable iCloud sync, your data is stored in your own private CloudKit database and synced between devices signed in with your Apple ID. The encryption is Apple-managed, in transit and at rest — we do not add a second layer of our own, so we do not describe it as end-to-end encrypted. We operate no servers of our own and never hold a copy of your data.
+ +Portfolio Journal ships with no advertising SDK, no third-party analytics SDK and no crash-reporting SDK. The app never asks for App Tracking Transparency permission, because there is nothing to track. Crash and hang diagnostics are collected on-device by iOS (MetricKit); they stay in the app container unless you choose to share one.
You can export CSV or JSON files for manual backups. We recommend storing backups in a trusted location and keeping your Files app secured.
+You can export CSV or JSON files, and Premium can write automatic JSON backups. These files are plain, readable JSON — the app does not encrypt them. Anyone who can open the file can read your balances, so keep them somewhere you trust and keep your Files app secured.