The short version

  • Nothing about your spending leaves your device.
  • We have no servers, no analytics SDK, no third-party trackers.
  • We do not have an account system. We do not know who you are.
  • We do not see your bank, your transactions, your statements, or your events.

If you have questions, email support@ctrlsze.studio.

What TapTrack stores

Everything below is stored locally on your iPhone, inside an encrypted SQLite database in TapTrack’s app sandbox (shared across the app and its widget / App Intents extensions via an iOS App Group):

  • Transactions you’ve added manually or captured via the iOS Shortcut.
  • Bank statements you import (parsed to transactions, then the source file is deleted within 60 seconds).
  • Categories, custom categories, and merchant→category rules you teach us.
  • Subscriptions, weekly + per-category budgets, insights history.
  • Events (named time windows that auto-tag your transactions).
  • App preferences (accent colour, notification toggles, your name if you set one).
  • Per-currency state when you spend in more than one currency.

When you uninstall TapTrack, iOS removes that database along with the app.

What TapTrack does NOT collect

  • No personal identifiers.We don’t ask for your name or email (entering your first name in Settings is optional and stays on the device).
  • No bank credentials. We never see, request, or store bank login details.
  • No analytics. No third-party SDK (Firebase, Mixpanel, Amplitude, Segment, etc.).
  • No crash reporting SDK.Crash reports go through Apple’s built-in Xcode Organizer pipeline — anonymous and aggregated.
  • No advertising identifier. We don’t request IDFAand we don’t track users across other apps or websites.
  • No location. TapTrack has no Location entitlement.

How the iOS Shortcut works

TapTrack’s primary capture path is an iOS Personal Automation that triggers when you tap with Apple Pay, using Apple’s built-in Transaction (Wallet) trigger. The automation is something youcreate in Apple’s Shortcuts app; iOS hands the amount, merchant, and transaction date directly to our Log Transaction App Intent.

  • iOS — not TapTrack — observes the Apple Pay event.
  • The data never leaves your device.
  • TapTrack only ever sees the three fields the automation passes in.

Statements (CSV import)

If you import a statement:

  1. The file is read on-device by TapTrack.
  2. Transactions are written to the local database.
  3. The original file is deleted from TapTrack’s storage within 60 seconds.

We never upload the file anywhere.

Notifications

TapTrack uses local notifications only (no remote push). You control which categories are on in Settings → Notifications. Granting notification permission lets TapTrack post reminders to your Notification Center on-device — Apple does not share notification content with us.

App Intents and Live Activities

The Log Transaction App Intent runs in an extension on your phone when called by the Shortcut. It writes to the same local database the app uses. The Live Activity that runs during an active Event reads from your own transactions and renders locally to your Lock Screen and Dynamic Island.

Events and multi-currency

Events are named time windows you create (e.g. “Japan trip”). Any transaction captured during the window is auto-tagged. Events stay in the local database — they aren’t shared anywhere.

If you spend in multiple currencies, TapTrack tracks each separately. We don’t convert between currencies and we don’t fetch exchange rates from any server. Each currency is its own self-contained ledger inside the local database.

Background processing

TapTrack uses iOS’s BackgroundTasks framework to:

  • Generate the next expected charge for tracked subscriptions (~daily).
  • Run the weekly insight engine (~weekly).

Both run entirely on-device. iOS decides when (or whether) to grant the time; they’re advisory. The app also runs both lazily when you open it, so missing a background slot just means a small catch-up at next launch.

iCloud backup

If iCloud Backup is enabled for your iPhone (Settings → [your name] → iCloud → iCloud Backup), the encrypted database file is included in your standard iPhone backup. Apple’s iCloud terms apply to that backup. We don’t operate a separate sync service.

Sharing

When you tap “Share” on a transaction or weekly summary, the share card is rendered on-device and handed to the iOS share sheet. Where it goes from there (Instagram, Messages, Save to Photos, etc.) is governed by that destination, not by TapTrack. The card includes only what you see in the preview.

Children

TapTrack is not directed at children under 13. We don’t knowingly collect data from children — because we don’t collect data from anyone.

Changes to this policy

If this policy changes, the new version will be posted here with an updated date. Material changes will be highlighted in the app’s “About” screen.

Contact

Email: support@ctrlsze.studio
Studio: ctrlsze.studio