1. On-device data
Households, members, accounts, checks, balance entries, exchange rates, and net-worth snapshots are stored in the app's local data container by default and are not sent to a developer-operated server. The app does not silently replace a persistence failure with temporary memory data or an empty ledger.
Amounts, quantities, unit prices, notes, and other entry text are saved automatically on this device before you confirm an entry. The original ledger, member, check, and account are kept. Automatic saving alone does not create a financial entry or confirm a balance. The entry screen shows the save state. The latest input may not survive process termination if saving is still in progress or has failed.
This entry text is excluded from household sharing records, JSON and SQLite ledger exports, and system backups. It is kept until the corresponding entry is confirmed and cleanup succeeds, or until you explicitly discard it. It does not expire silently. Failed cleanup keeps the text and shows a notice. You can inspect or discard it in Unconfirmed input. These backups cannot recover the text after the app is deleted. Switching ledgers or members does not automatically assign old input to the new identity.
2. iCloud and household sharing
When you unlock Plus and choose collaboration, household data is synchronized and shared through your Apple Account and Apple CloudKit. Apple handles that data under its iCloud terms and security mechanisms. We do not operate a server that stores or relays household financial records, and we do not describe standard iCloud protection as end-to-end encryption in every sharing scenario.
Invited members can view the shared household's ledger data. Assigning an account to a member does not make its data private from other household members.
Choosing to copy historical balances creates structured ledger records that still need confirmation for the new check. When collaboration is active, those records follow the ledger's sharing rules. Members must confirm them before completing the check. They are separate from the device-only entry text described above.
3. Photos and on-device recognition
The app asks for Photos access only when you configure a screenshot template or actively use screenshot prefill. Apple Vision recognizes text and amount candidates on-device. Reference images, template regions, and previews stay local; they are not uploaded to a developer server or included in shared household data. A new balance suggested by screenshot prefill must be confirmed before it is recorded in the check and can sync through iCloud when collaboration is active.
4. Automatic exchange rates
When automatic rates are enabled, the app requests currency-code rates from the public ExchangeRate-API endpoint. Requests do not include household names, member names, account names, balances, notes, screenshots, or snapshots. The provider may process IP addresses and network-request information under its own policy; its open-access documentation describes IP-based rate limiting. You can disable automatic rates and explicitly choose manual rates for a check. See the provider's terms and privacy policy.
5. Purchases
Family Asset Plus is a one-time, non-consumable purchase handled by the Apple App Store. The app reads product information and Apple-verified transaction status to purchase, restore, and determine access. The developer does not directly collect payment-card details.
6. Data we do not collect
The app includes no developer account system, analytics SDK, advertising SDK, or cross-app tracking SDK. We do not sell household data or use household financial records for advertising or profiling.
7. Your choices
You can use local mode only, disable automatic exchange rates, change Photos access in system settings, and decide whether to create or join an iCloud share. Leaving or revoking a share can affect other participants, so review the app's sharing status and confirmation text before acting.
8. Updates and questions
If the data flow changes materially, this page will show a new effective date. For privacy questions, email familyasset@zach.ren . Do not include balances, account names, member names, or financial screenshots in a support request.
9. Website visits and support email
This website provides product, support, and privacy information. It has no accounts, financial-data uploads, or online ledgers, and sets no analytics, advertising, or tracking cookies. Infrastructure providing HTTPS and network connections processes necessary request information, such as IP addresses.
If you choose to email support, email services process the email address and content you provide. Remove household financial information first. Hosting this public website is separate from storing household financial data in the app.