Privacy Policy

Effective with the first App Store release. Last updated: 11 August 2026.

Bill Tracker is a shared envelope-budgeting app. Our starting point is simple: your money is your business. We never ask for your bank credentials, we never connect to your bank, and we never sell your data.

What we collect

Bill Tracker has no sign-up. You can use the whole app without giving us an email address, a password, or any personal detail. Until you share a workspace, your budget never leaves your device.

• Budget data you enter — workspaces, envelopes, transactions, notes and member names. Stored on your device. It is uploaded only for workspaces you choose to share, so the people you invite can see them.
• An anonymous account — the first time you share or join a workspace, the app signs your device in to an account that has no email address and no password. It exists only to tell the members of a shared workspace apart.
• Usage analytics — Google Analytics for Firebase records which screens are opened and which actions are taken (for example "an expense was logged"), together with a per-install identifier Apple and Google call the app instance ID, plus the device model, OS version, app version and country. We use it to see which features matter. It is not joined to your budget data, and there are no advertising trackers and no cross-app tracking (the app never asks for tracking permission because it never tracks you).
• Purchase status — whether this device has an active Premium subscription. Apple handles the payment; we never see your card details.
• Feedback you send — if you use "Help us improve" in the app: your rating, what you would like built next, anything you type, and an email address only if you choose to add one for a reply.

What we never collect

• Bank logins, account numbers, or card details. Bill Tracker never connects to a bank.
• Your contacts, location, photos, calendar, or health data.
• Anything for advertising, and anything sold or shared with data brokers.

Where your data lives

Shared workspaces and feedback are stored with our backend provider Supabase in the European Union (Frankfurt, Germany) and processed in accordance with the GDPR. Analytics is processed by Google (Firebase) as our processor. Everything else lives only on your device.

Who can see your data

Members of a workspace can see that workspace's envelopes and transactions. Nobody outside your workspaces can see your budget — the database enforces this per row, not just in the app. Our staff does not browse your data; access is limited to what is technically necessary to operate the service.

Your rights

• Export — More → Data → "Export to CSV" gives you every transaction of a workspace, any time, without asking us.
• Delete — More → "Delete all my data" erases every workspace, envelope and transaction on the device, deletes the shared workspaces you own, removes you from the ones you joined, and discards the anonymous account. It cannot be undone.
• GDPR rights — access, rectification, erasure, portability, and objection. Contact us to exercise them.

Contact

Questions about this policy: info@itpmgroup.com