UFA
Privacy Policy
UFA (“the app”) is a personal finance app for iPhone, published by Abir Barman (“we”, “us”). This policy explains what the app stores, where it is stored, and the choices you have.
The short version
- Your financial records are stored on your iPhone.
- UFA has no accounts, no servers of its own and no analytics. We do not receive your financial data unless you choose to send it to us in feedback.
- If you turn on iCloud Sync, your records are also stored in your own private iCloud database, operated by Apple.
- Screenshots are read on your iPhone and are not kept unless you choose to keep one.
Information UFA stores on your iPhone
- Transactions you save: amount, merchant, date, category, payment method, notes and the account they belong to.
- Financial information you add: account and card names, institution, type, the last four digits if you enter them, and opening balances. UFA never asks for full card or account numbers, and never asks for bank login details.
- Hub records: names you type for people, amounts owed, loans, repayments, due dates and notes. UFA does not read your Contacts. If you pick a person with the system contact picker, only that name is shared with UFA.
- AutoPay, EMIs, budgets, goals and trips you create.
- Settings and preferences.
This information stays in the app’s private storage on your device, protected by iOS data protection.
Screenshots and text recognition
When you add a transaction from a screenshot, UFA reads the text with Apple’s on-device Vision framework. The image and the recognised text are processed on your iPhone and are not sent anywhere. They are deleted from UFA’s temporary storage after the transaction is confirmed or cancelled. UFA keeps a reference to the Photos item so it can offer to tidy up the screenshot later; UFA does not modify your Photos library on its own.
Payment Proof (off by default)
If you choose to keep a screenshot with a transaction, UFA saves one copy of that image inside its private storage on your iPhone, protected with iOS file protection and excluded from device backups. It is not synced to iCloud and not included in UFA backups or exports, and it is deleted when the transaction is permanently deleted. UFA does not verify that a screenshot is genuine.
iCloud and CloudKit (optional, off by default)
If you turn on iCloud Sync in Settings, UFA uses Apple’s CloudKit to keep your records the same on the Apple devices signed in to your Apple Account.
- Synced: transactions, accounts and cards, payment app IDs, Hub people and records, AutoPay and EMIs, budgets, goals, trips, and the category choices you have made.
- Never synced: screenshots (including Payment Proof), passwords and other Keychain items, Face ID and App Lock settings, import history, the recycle bin and temporary files.
- Synced data is stored in your private CloudKit database. We cannot access it. Apple’s handling of iCloud data is described in Apple’s privacy policy.
- Turning iCloud Sync off stops syncing from the next launch. Data already in iCloud stays there until you delete it from iCloud (Settings → your name → iCloud → Manage Storage).
Backups and exports
Backups you create are encrypted files saved on your device, using a key kept in your Keychain. If you choose cross-device backup encryption, that key is stored in your iCloud Keychain so another of your devices can open the backup. Exports (for example CSV) are created only when you ask and go only where you send them with the share sheet.
Security
- Optional Face ID or App Lock before UFA shows your data, with a privacy screen in the app switcher.
- Passwords and keys are kept in the iOS Keychain.
- Data is stored using iOS data protection.
No method of electronic storage is perfectly secure. We design UFA to minimise the data that exists and where it goes, but we cannot guarantee absolute security.
Diagnostics
UFA’s diagnostic logs stay on your device and are designed never to include amounts, merchants, names or account details. UFA does not include its own crash-reporting or analytics service. If you have chosen to share analytics with app developers in iOS Settings, Apple may provide us with crash reports and usage statistics under Apple’s own terms.
Feedback and attachments
If you use Settings → Feedback, UFA prepares an email to abir@abirbarman.com in Apple Mail or another app you choose. Nothing is sent until you tap Send in that app. The email contains what you typed, any photos, videos or files you chose to attach, and basic app context: app version and build, iOS version, iPhone model, the screen you came from and the time. If you link a transaction, its merchant, date and a reference ID are included, and its amount only if you turn that on. Your contact email is included only if you enter one. UFA never attaches screenshots, transaction data, logs or your database on its own.
Copies of attachments are kept in UFA’s private temporary storage while you write, and are deleted after sending, when you leave the form, or automatically within 24 hours. We use feedback only to provide support and improve UFA.
Notifications
If you turn on reminders, UFA schedules local notifications on your device; nothing is sent through a server. By default, Hub reminders don’t show names or amounts on the Lock Screen.
Third-party services
UFA contains no advertising, tracking or analytics SDKs, and we do not sell or share your data. The app relies on Apple services you control: iCloud and CloudKit when you turn on iCloud Sync, and Mail or another app you choose when you send feedback. We have no access to your data in those services.
This website is hosted on Vercel, which may process standard technical information (such as IP address and browser type) to deliver the site. The website does not use cookies or analytics.
Retention and deletion
Your data stays until you delete it. You can delete individual records, use Settings → Data Management, or delete the app to remove everything on that device. Deleted transactions stay in the recycle bin for 30 days and are then removed. With iCloud Sync on, deletions sync to your other devices. Because we do not hold your financial data, we cannot delete it for you — but we can help you do it; contact us below.
Children
UFA is not directed at children under 13, or the minimum age in your country.
Your rights
Depending on where you live, you may have rights to access, correct or delete personal data. Almost all UFA data is held only on your devices and in your own iCloud account, where you can view, change and delete it directly. For anything we hold — such as feedback you sent — contact us.
Changes to this policy
We will update this policy when UFA’s data handling changes and show the new effective date on this page.
Contact
Questions about privacy: abir@abirbarman.com. See also our Terms of Use.