Privacy Policy

1. Who we are

The data controller for the limited processing described here is:

{{LEGAL_NAME_AND_ADDRESS}}

Contact: support@compoundrix.com. In this policy “we” means that controller, and “the app” means Compoundrix for Mac and Compoundrix for iPhone.

2. Data on your device

Everything you enter or import into Compoundrix — accounts, transactions, categories, counterparties, balances, checkpoints, asset holdings, settings — is stored in a single SQLite database file on your device, inside the app's own sandboxed container. Prices and exchange rates the app fetches are stored in the same file.

This data never leaves your device unless you turn on iCloud sync, write a backup, or export it yourself. We have no access to it.

3. iCloud sync (Compoundrix Pro)

If you subscribe to Compoundrix Pro and turn on sync, the app copies your ledger's records to your own private iCloud database using Apple's CloudKit, in the container iCloud.com.compoundrix.ledger, so that your other Macs and iPhones signed in to the same Apple Account can receive them.

• The private database belongs to your Apple Account. We as the developer cannot read it, query it or export it; CloudKit gives developers no access to users' private databases.
• The contents of each record are stored in CloudKit's encrypted fields, which Apple encrypts at rest.
• Storage counts against your iCloud quota and is governed by Apple's Privacy Policy and the iCloud terms you accepted with Apple.
• We run no server of our own. No copy of your data passes through us at any point.

Without Pro, or with sync turned off, nothing is sent to iCloud.

4. Backups and exports

The app writes backup copies of the ledger file automatically — daily, and before operations that change many entries.

• On the Mac, backups go to a folder you choose (by default Documents/Compoundrix Backups).
• On the iPhone, a rolling daily copy (the last two days) is written to the app's Documents folder, visible in the Files app, and deleted with the app. A Copy of the Ledger you make goes wherever you save it.

Exports (CSV files, spreadsheet workbooks, copies of the ledger) are written only where you tell the app to write them. If those folders are inside iCloud Drive or another cloud service you use, that service will store them under its own terms.

5. What the app sends over the network

Apart from iCloud sync, the app makes a small number of requests to public data sources. None of them carry account data, balances, amounts or any identifier of you. As with any internet request, the receiving server sees your device's IP address.

A list of ticker symbols can reveal which assets you hold, though not how much of them. Yahoo processes these requests under its own privacy policy. Yahoo, the ECB, Eurostat and INE are independent of us; we do not receive anything from them about you.

6. Subscriptions and payments

Compoundrix Pro is sold through the App Store. Apple handles the purchase, billing and renewal as an independent controller under its own privacy policy. We receive no payment details and no name or email address. The app checks with Apple's StoreKit, on your device, whether a subscription is active; App Store Connect gives us aggregated, non-identifying sales reports only.

7. What we do not collect

• No analytics, telemetry or usage statistics.
• No advertising and no advertising identifiers.
• No tracking across apps or websites, and no data brokers.
• No user accounts, logins or bank credentials.
• No third-party SDKs. The only third-party code in the app is the open-source database library GRDB (and its companion GRDBQuery), which runs entirely on your device and sends nothing anywhere.

8. When you write to us

If you email support@compoundrix.com, we receive your email address and whatever you choose to include. We use it only to answer you, on the basis of our legitimate interest in supporting the app (GDPR Art. 6(1)(f)). Please do not send your ledger or statements unless we ask and you are comfortable doing so. We keep support correspondence for up to two years after the conversation ends, then delete it.

9. Crash reports and beta feedback

If you have chosen in your device's settings to share analytics with app developers, Apple may send us anonymised crash reports and diagnostics. If you test a beta through TestFlight, Apple shares the feedback and screenshots you submit, together with the email address of your TestFlight invitation. Both are controlled by Apple's settings and terms; you can switch them off at any time.

10. This website

compoundrix.com is a static site. It sets no cookies, runs no analytics and loads nothing from third parties — its fonts and images are served from the same domain. The hosting provider keeps standard server logs (IP address, browser user agent, page requested, time) for a short period for security and to deliver the pages; we do not use them to identify anyone.

11. Retention and deletion

Your data is kept for as long as you keep the files. Because we hold none of it, deletion is in your hands:

• On a device: delete the app. On the Mac, also delete any backup folder you chose and any exports you made. On the iPhone, deleting the app deletes its Documents folder too.
• In iCloud: on iPhone, go to Settings ▸ [your name] ▸ iCloud ▸ Storage (on the Mac, System Settings ▸ Apple Account ▸ iCloud ▸ Manage), choose Compoundrix and delete its data. This removes it from all your devices' sync.
• Support email: ask us and we will delete our correspondence with you.

12. Your rights under the GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, rectify and erase personal data about you; to restrict or object to its processing; and to receive it in a portable format. Since your ledger is held by you and not by us, you can exercise most of these rights directly in the app — edit, export or delete. For anything we hold (in practice, support emails), write to support@compoundrix.com and we will answer within one month.

You also have the right to complain to a data-protection supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD) — or to the authority where you live or work.

We do not sell or share personal data, and we make no automated decisions about you. Because we do not receive your financial data, we do not transfer it outside the EEA; Apple's and Yahoo's own transfers are governed by their policies.

13. Children

Compoundrix is not directed at children under 16, and we do not knowingly receive data from them.

14. Changes to this policy

If what the app does with data changes, we will update this page and its effective date before the change ships, and say so in the release notes.

15. Contact

Questions about privacy: support@compoundrix.com.