Skip to content
Custodian

Legal

Privacy policy

Effective · Covers the Custodian iPhone app and this website

The short version

  • Custodian doesn't collect your data. There's no account, no server, no analytics and no ads.
  • Everything you enter stays on your iPhone. It leaves only when you export it or back it up yourself.
  • The app never connects to the internet, so there's nothing for us to receive, sell or share.
  • This website sets no cookies and runs no trackers.

What we collect

Nothing. Custodian has no sign-up, and it contains no analytics, advertising or other code that reports back to anyone. It doesn't track you across apps or websites. We never receive your financial information, how you use the app, or anything that identifies your iPhone.

What stays on your iPhone

Your accounts, transactions, budgets, categories, the people you split bills with, receipt photos and settings are saved in Custodian's own storage on your iPhone. iOS encrypts that storage while your phone is locked. We can't see any of it.

What the app asks permission for

Each one is optional, and the app asks only when you use the feature that needs it.

Camera

To take a photo of a receipt. The photo is made smaller and saved inside the app.

Photos and Files

When you attach a photo or a file, the iOS picker hands over only the ones you choose. Custodian saves a smaller copy inside the app.

Face ID or Touch ID

For App Lock. iOS does the check and tells Custodian only whether it passed. The app never sees your face or fingerprint data.

Notifications

For reminders about bills and card due dates. They're set up on your iPhone. While App Lock is on, they hide amounts, categories and card names.

Siri and Shortcuts

To log spending by voice or from a shortcut. Custodian handles the request on your iPhone, and while App Lock is on it won't log anything until you've unlocked the app. Siri's speech processing is covered by Apple's privacy policy.

Bank texts

This is optional and off until you set it up in Settings → Bank texts. Once it's on, an automation in the Shortcuts app passes the text of your bank's messages to Custodian. Custodian reads each one on your iPhone to log a purchase or update a card's bill, and ignores the rest. A text it can't read waits in the app until you save or discard it. Nothing is sent anywhere, and you can turn the automation off in the Shortcuts app at any time.

Exports and backups

Custodian makes a copy of your data only when you ask for one, in Settings → Import, Export & Reset:

  • Export CSV saves your transactions as a spreadsheet file.
  • Back up saves everything in one file. You can lock it with a password. Without one, anyone who has the file can open it. With one, a forgotten password means the file can't be opened.

You choose where the file goes, and the app deletes its temporary copy when the share sheet closes. After that, the file is looked after by wherever you saved or sent it.

Your iPhone's own iCloud or computer backup also includes Custodian's data, depending on your iOS settings. Apple or your computer handles those backups, not us.

Deleting your data

To erase everything, including receipt photos and reminders, go to Settings → Import, Export & Reset → Reset data → Reset everything. If App Lock is on, it asks for Face ID or your passcode first. Deleting the app also deletes everything it stored.

We don't keep a copy, so there's nothing else to ask us to delete. Files you exported or backed up are yours to delete wherever you saved them.

Emailing us

If you email us, including from Settings → Send feedback in the app, we receive your email address and whatever you write. The app's draft adds only the app version, iOS version and iPhone model, and you can delete them before you send. We use your email only to reply to you, and we don't share it. Our mailbox is hosted by Google under Google's privacy policy.

This website

This site sets no cookies, runs no analytics and loads nothing from other companies. If you switch between light and dark, your choice is saved in your own browser and never sent to us. The site is hosted by Cloudflare, which keeps standard server logs, such as IP addresses and the pages requested, for security and reliability. See Cloudflare's privacy policy.

Children

Custodian doesn't collect personal information from anyone, including children under 13.

Changes to this policy

If a future version of Custodian handles data differently, for example by adding optional iCloud sync, we'll update this page before that version comes out and change the date at the top.

Contact

Questions about privacy? Email custodian.support@gmail.com.