PRIVACY POLICY

Money Manager & Budget Expense

Last updated: 11 August 2026

THE SHORT VERSION

Your financial records stay on your device and in your own private iCloud

account. We cannot see them. We do not have a server that stores them, we do

not have an account system, and we do not collect analytics, advertising

identifiers or any other tracking data.

The app makes exactly one network request, and it contains no information

about you. Everything else it does happens on your phone.

The rest of this page explains that in full, because a claim like the one

above is only worth anything if it is specific.

1. WHO IS RESPONSIBLE

Money Manager & Budget Expense is developed and operated by:

 Due Track

Privacy questions: privacy@duetrack.bd

Support: support@duetrack.bd

Under the UK and EU General Data Protection Regulation, the person or company

named above is the "data controller" for the very limited processing described

in section 4.

We aim to answer every privacy enquiry within 30 days.

2. WHAT THE APP STORES, AND WHERE

The app records the information you choose to enter:

  - Transactions: amount, date, currency, category, payee, notes

  - Accounts and balances you enter, including their names and currencies

  - Budgets, savings goals and expected income

  - Recurring bills and subscriptions you set up

  - Money you have lent or borrowed, and loan details you enter

  - Investments and holdings you enter

  - Receipt photographs, if you choose to attach them

  - Exchange rates, whether you typed them or the app fetched them

  - Your settings: language, appearance, time zone, primary currency,

    reminder times, and whether the app lock is on

This information is stored in two places, and only these two:

  a) On your device, in the app's own storage.

  b) In YOUR iCloud account, in what Apple calls the private database, if

     iCloud is signed in and iCloud Drive is enabled for this app. This is the

     same mechanism the Notes app uses. The data is stored under your Apple

     Account, is accessible only to you, and is not visible to us. We have no

     credentials for it and no way to request it.

There is no third place. We do not operate a server that receives your

financial data, because the app has no way to send it to one.

If you delete the app and want the iCloud copy removed as well, you can do so

from Settings on your device: your name, then iCloud, then Manage Account

Storage. That deletion is performed by Apple, not by us.

3. WHAT THE APP NEVER COLLECTS

We want to be precise here rather than reassuring.

  - No account, sign-up, email address or password. The app has no login.

  - No analytics or usage statistics. There is no analytics library in the

    app at all — not ours and not a third party's.

  - No advertising. The app contains no advertisements and no advertising

    identifier (IDFA). It does not participate in any ad network.

  - No tracking across apps or websites, as Apple's App Tracking Transparency

    framework defines it. The app never presents that prompt because it has

    nothing to ask for.

  - No contacts, calendar, photo library scanning, microphone or location.

  - No device identifiers, no fingerprinting, no crash-reporting SDK.

  - No selling or sharing of personal information. We have none to sell.

4. THE ONE NETWORK REQUEST

When you hold money in more than one currency, the app can fetch exchange

rates. That is the only outbound request the app makes. It is:

  GET https://open.er-api.com/v6/latest/<YOUR PRIMARY CURRENCY CODE>

for example, .../v6/latest/USD

What is sent: the three-letter currency code, and nothing else. No account,

no device identifier, no transaction, no amount, no name. The request carries

no information capable of identifying you or describing your finances.

Like any internet request, the provider's servers will see the IP address your

connection presents. We do not receive it, log it or have access to it.

The provider is ExchangeRate-API (open.er-api.com), an independent company.

Their handling of that request is governed by their own privacy policy, at

https://www.exchangerate-api.com/terms

Automatic refresh is a paid feature. If you are on the free tier the app makes

no network request at all, and you can enter rates by hand instead — that

option remains available on every tier.

Legal basis, for users in the UK and EU: this processing is necessary to

perform the contract of providing you with currency conversion (Article 6(1)(b)

UK/EU GDPR).

5. RECEIPT SCANNING AND PHOTOGRAPHS

If you scan a receipt, the text recognition runs entirely on your device using

Apple's Vision framework. The image is never uploaded and never leaves your

phone as part of that process.

If you choose to attach a receipt photograph to a transaction, it is stored

alongside your other records — on your device and in your own private iCloud,

exactly as described in section 2.

Using the camera requires your permission, which iOS asks for and which you

can withdraw at any time in iOS Settings.

6. PURCHASES

Subscriptions and the lifetime purchase are handled entirely by Apple through

the App Store. We never see and never receive your name, card details, billing

address or Apple Account.

What the app receives from Apple is a receipt confirming whether an active

entitlement exists. It contains no payment information.

Apple's handling of your purchase is governed by Apple's own privacy policy.

7. NOTIFICATIONS

Reminders are scheduled and delivered locally by your device. No notification

is sent from a server, and we have no way to send you a message. Nothing about

what a reminder says or when it fires is transmitted anywhere.

You may turn notifications off at any time in iOS Settings.

8. APP LOCK, FACE ID AND TOUCH ID

If you turn on the app lock, authentication is performed by iOS. Your face or

fingerprint data never reaches the app; iOS answers only "authenticated" or

"not authenticated". If you set a PIN it is stored on your device only.

9. WIDGETS, SIRI AND SHORTCUTS

Widgets and Siri shortcuts read your data on your own device to show a figure

or to open the app at the right screen. Nothing is transmitted.

10. IMPORT AND EXPORT

CSV import reads a file you choose, on your device. PDF export writes a file

you choose where to save or share. Neither passes through us. If you then send

that file somewhere, that is your action and outside this policy.

11. HOW LONG DATA IS KEPT

Your records stay until you delete them. There is no expiry and no automatic

purge, because a ledger with a hole in it is not a ledger.

We keep nothing, so there is nothing on our side to retain or delete. Emails

you send us are kept only as long as needed to answer you.

12. YOUR RIGHTS

If you are in the UK, the EU or another region with comparable law, you have

the right to access, correct, erase, restrict and object to processing of your

personal data, and the right to data portability.

For this app, those rights are unusually direct: the data is already in your

possession. You can view and correct every record in the app, export it as a

PDF, and delete any part or all of it. Erasure is achieved by deleting the

records, or the app, and removing the iCloud copy as described in section 2.

If you believe we have processed your data improperly, you may complain to

your local data protection authority. In the UK that is the Information

Commissioner's Office (ico.org.uk); in the EU it is your national authority.

California residents: we do not collect, sell or share personal information as

the CCPA and CPRA define those terms, so there is no "Do Not Sell or Share My

Personal Information" mechanism to offer. You retain the rights described

above, and you will never be discriminated against for exercising them.

13. CHILDREN

The app is not directed at children and is rated for users aged 4 and over on

the App Store only because it contains no objectionable content. We do not

knowingly collect personal information from anyone, including children. If you

believe a child has provided us with personal information, write to

privacy@duetrack.bd and we will act on it, though as described above we are

unlikely to be holding anything.

14. INTERNATIONAL TRANSFERS

We are based in Bangladesh. Because we do not receive your financial records,

there is no transfer of them to Bangladesh or anywhere else.

Your data resides on your device and, if you use iCloud, on Apple's

infrastructure in the region Apple assigns to your Apple Account. Apple's

own terms govern that.

If you email us, that email reaches us in Bangladesh. Please do not include

account numbers, card details or other sensitive information in a support

email — we do not need them to help you.

15. SECURITY

Your data is protected by your device's own encryption and passcode, and by

Apple's protections on your iCloud account. You can add the app lock (Face ID,

Touch ID or a PIN) for a further layer.

No system is perfectly secure. Because we hold no copy of your records, a

breach of ours could not expose them.

16. CHANGES TO THIS POLICY

If this policy changes, the date at the top changes with it, and the current

version is always the one published at this address. Material changes will

also be noted in the app's release notes.

17. CONTACT

Privacy: privacy@duetrack.bd

Support: support@duetrack.bd