Updated August 1, 2026
Your money data lives on your device. We do not have a server that holds it, we cannot see it, and we could not sell it if we wanted to. The services we do use see anonymous identifiers and coarse app events — never your wallets, transactions, or balances.
Everything you enter: wallets, transactions, budgets, goals, debts, insurance details, check-ins, streaks, points, lesson progress, and every answer from onboarding. It is stored locally by iOS. Deleting the app deletes it; Profile → Delete everything wipes it in place.
Four things, none of them your money data. 1) The app fetches its list of partner offers from a public file we host; that request carries nothing about you. 2) Anonymous usage events go to Firebase Analytics — things like "checked in" or "lesson finished", plus coarse facts such as your score band. Never amounts, never entries. 3) Purchases are processed by Apple and recorded by RevenueCat under a random anonymous id — no name, no email. 4) If you allow notifications, OneSignal holds a push token, the same anonymous id, and coarse tags (score band, lessons started, days since last check-in) so we can send fewer, more relevant messages.
The streak reminder and budget alerts are local: scheduled and delivered on your device, no service involved. Remote messages (like a win-back nudge after a quiet week) go through OneSignal using only the anonymous data described above. Permission is asked once, and saying no simply means only local reminders you asked for.
The free version shows ads: rewarded ads you choose to watch, and occasional interstitials at natural pauses. The App Tracking Transparency prompt controls only whether those ads can be personalised. Saying no is a first-class choice — you get non-personalised ads and the app works exactly the same. Subscribers see no interstitials at all.
Payment runs through your Apple account; we never see card numbers or billing details. RevenueCat keeps the anonymous purchase record that makes your subscription restorable across reinstalls.
Export everything as JSON or CSV from Profile at any time. Delete everything from Profile at any time. Under the GDPR you can also write to us with any request about your data — for your financial data the honest answer is that we never had it, and for the anonymous identifiers above we will delete them on request.
MB Utilab
Perkunkiemio g. 19, LT-12120
Vilnius, Lithuania
hello@utilab.org