Your data never
reaches us.

Florin is a private, on-device money manager for iPhone. It has no accounts, no backend, and no analytics. Your ledger is stored only on your device, and the developer of Florin cannot see it. Its App Store privacy label reads Data Not Collected, and this policy explains, in plain terms, why that is true.

The short version

• Florin does not collect, transmit, sell, or share your personal or financial data.
• There is no account and no sign-up. There is nothing to log in to.
• Everything you enter lives in a private database on your device.
• There are no analytics, no advertising, no trackers, and no third-party SDKs.
• The only time Florin contacts the internet is to fetch currency exchange rates, and that request carries none of your data.

What Florin stores, and where

The transactions, accounts, categories, budgets, receipt photos, and settings you create are stored locally on your device using Apple's on-device database. This data is not uploaded anywhere by Florin. It is protected by your device's own security (passcode, Face ID, or Touch ID) and, optionally, by Florin's own App Lock. If you delete the app, this data is removed with it.

The one network request

To convert between currencies, Florin fetches public exchange-rate tables from one of two providers:

• Frankfurter, which publishes European Central Bank reference rates (primary), and
• open.er-api.com (fallback).

These requests send only a base currency code (for example, USD or INR). They contain no account identifier, no device identifier, and none of your transactions. The returned rates are cached on your device so the app works offline. Your use of these providers is subject to their own privacy policies, linked above.

Device permissions

Florin asks for a permission only when you use the feature that needs it, and only for that purpose:

• Camera: to photograph a receipt and attach it to a transaction. Photos are stored on your device with the rest of your ledger.
• Face ID / Touch ID: to unlock the app when you enable App Lock. Biometric data is handled entirely by iOS and is never seen by Florin.
• Local Network: to serve Florin's optional web dashboard to other devices on your own Wi-Fi network. This is off by default.

The web dashboard and AI (MCP) access

Florin can optionally serve a web dashboard, and expose a Model Context Protocol (MCP) endpoint for AI assistants, to other devices on your local Wi-Fi network. When you turn this on:

• The connection is local network only. Nothing is routed through the internet or through any server run by Florin.
• Access is protected by a token that you control and can regenerate at any time.
• The server runs only while the app is open, and refuses all requests while App Lock is engaged.
• AI assistants can read your ledger and propose transactions, but proposed entries go to your Review Inbox. Nothing is written to your ledger without your confirmation.

What you choose to share with an AI assistant you connect is governed by that assistant's own privacy policy, not this one.

Purchases

If you choose to support Florin with a purchase, the transaction is handled entirely by Apple through the App Store. Florin receives only an anonymous confirmation that an entitlement is active. It never receives your name, payment card, or billing address.

What Florin does not do

• No analytics or usage tracking.
• No advertising and no ad identifiers.
• No third-party SDKs or embedded trackers.
• No selling, renting, or sharing of your data. There is nothing to sell, because nothing is collected.

Children's privacy

Florin does not collect data from anyone, including children. It is a personal expense tracker and is not directed at children under 13.

Your control and deletion

Because your data lives only on your device, you are always in control of it. You can export your entire ledger to an Excel file at any time, and you can erase everything using Settings → Erase All Data, or by deleting the app. Once erased, the data is gone; there is no cloud copy to recover, because none was ever made.

A note for reviewers and the curious

Florin is a personal expense tracker. It does not connect to bank accounts, move money, or provide financial advice. It cannot read your text messages: to capture bank SMS alerts, you create a Shortcuts automation on your own device that forwards messages you choose to Florin.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "Last updated" date. Because Florin collects no contact information, we cannot notify you directly; please check back here.

Contact

Questions about this policy or about privacy in Florin? Email krizhnaprem@gmail.com.