Last updated: 2026-07-07

SnapSpend (“the app”, “we”) is a local-first personal spending tracker. Your financial data stays on your device. This policy explains what the app does and does not do with your information.

Summary

We do not collect your data — no analytics, no advertising, no tracking.
Your records stay on your device (and, only if you turn it on, in your own iCloud).
Receipt scanning is 100% on-device. Images and OCR text never leave your phone.
The only routine network request fetches public exchange rates and contains no personal data — just currency codes and dates.

What data the app stores (on your device)

Transactions, accounts, categories, tags, receipt images, notes, optional location tags, audit history, and settings — all saved locally via SwiftData on your device.

On-device processing

Receipt & statement scanning uses Apple’s on-device Vision OCR and local parsers. Images, PDFs, and extracted text are processed entirely on the device and are never uploaded to us or any third party.
Categorization, duplicate/transfer/refund detection, and reports run locally.

Network usage

Exchange rates: To convert foreign transactions to your base currency, the app requests public reference rates from the European Central Bank via the Frankfurter API (https://api.frankfurter.app) over HTTPS. These requests contain only currency codes and dates — never your amounts, merchants, or any personal data. Rates are cached for offline use.
No other servers are contacted. We operate no backend and receive none of your data.

Optional iCloud sync (Pro)

If you enable iCloud Sync (a Pro feature), your records are synchronized through your own private iCloud (CloudKit) database so your devices stay in sync. This data lives in your personal iCloud account under Apple’s privacy terms; we cannot access it. Sync is off by default and can be turned off at any time.

Encrypted backup

Backups are opt-in and encrypted on your device with a passphrase you choose (AES-GCM; key derived via PBKDF2). Your passphrase is stored in the device Keychain behind Face ID and is never transmitted. You choose where to save the backup file (e.g. iCloud Drive or Files). We never receive your backup or your passphrase.

Purchases

Pro is unlocked through Apple In-App Purchase. Payment is handled by Apple; we do not receive or store your payment details. Apple’s App Store privacy terms apply to the transaction.

Device permissions

Camera — scan receipts.
Photo Library — read a receipt photo you choose (and its location metadata when a receipt has no printed address).
Location (When In Use) — optionally tag a purchase with where it happened.
Face ID — unlock your encrypted-backup passphrase.

You can grant or revoke any of these in iOS Settings; the app works without them (with the related feature disabled).

Data sharing & selling

We do not sell, rent, or share your data. There are no third-party advertisers, analytics providers, or data brokers.

Children

The app is not directed at children and collects no personal data from anyone.

Your control

Because your data is stored locally (and optionally in your own iCloud), you control it directly: edit or delete any record in the app, export to CSV/PDF, disable sync, or delete the app to remove its local data from the device.

Changes to this policy

We may update this policy; the “Last updated” date will change accordingly.

Contact

Questions? Contact snapspend.app@gmail.com.

隐私政策

最后更新：2026-07-07

灵记（“本应用”、“我们”）是一款本地优先的个人记账应用。你的财务数据保存在你自己的设备上。本政策说明本应用会以及不会如何处理你的信息。

概要

我们不收集你的数据——无统计分析、无广告、无追踪。
你的记录保存在你的设备上（仅在你开启时，才存入你自己的 iCloud）。
小票扫描完全在本机进行，图片与识别文字绝不离开你的手机。
唯一的常规网络请求用于获取公开汇率，不含任何个人数据——只有货币代码与日期。

本应用在设备上保存的数据

交易、账户、分类、标签、小票图片、备注、可选的位置标记、变更历史与设置——全部通过 SwiftData 保存在你的设备本地。

本机处理

小票与账单扫描使用 Apple 的本机 Vision 文字识别与本地解析器。图片、PDF 与提取的文字完全在设备上处理，绝不上传给我们或任何第三方。
分类、重复/转账/退款识别与报表均在本地运行。

网络使用

汇率：为将外币交易折算为你的基准货币，本应用通过 Frankfurter API（https://api.frankfurter.app，HTTPS）向欧洲央行获取公开参考汇率。这些请求仅包含货币代码与日期，绝不包含你的金额、商家或任何个人数据。汇率会缓存以供离线使用。
不会连接其他任何服务器。我们没有任何后端，也不会收到你的数据。

可选的 iCloud 同步（Pro）

若你开启 iCloud 同步（Pro 功能），你的记录会通过你自己的私有 iCloud（CloudKit）数据库在设备间同步。这些数据存于你的个人 iCloud 账户，受 Apple 隐私条款约束，我们无法访问。同步默认关闭，可随时关闭。

加密备份

备份为选择性开启，并在你的设备上以你设定的口令加密（AES-GCM；密钥通过 PBKDF2 派生）。口令保存在设备钥匙串中并由 Face ID 保护，绝不传输。你自行选择备份文件的保存位置（如 iCloud 云盘或“文件”）。我们绝不会收到你的备份或口令。

购买

Pro 通过 Apple 内购解锁。付款由 Apple 处理，我们不会收到或存储你的支付信息。该交易适用 Apple App Store 的隐私条款。

设备权限

相机——扫描小票。
照片——读取你选择的小票照片（当小票没有印刷地址时读取其位置信息）。
位置（使用期间）——可选地为一笔消费标记发生地点。
Face ID——解锁你的加密备份口令。

你可在 iOS 设置中授予或撤销以上任一权限；即使不授予，本应用仍可使用（相关功能停用）。

数据共享与出售

我们不会出售、出租或共享你的数据。没有任何第三方广告商、统计分析提供方或数据经纪商。

儿童

本应用不面向儿童，也不向任何人收集个人数据。

你的控制权

由于你的数据存于本地（以及可选的你自己的 iCloud），你可直接掌控：在应用内编辑或删除任意记录、导出 CSV/PDF、关闭同步，或删除应用以从设备移除其本地数据。

本政策的变更

我们可能更新本政策；“最后更新”日期将相应变化。

联系方式

有疑问？请联系 snapspend.app@gmail.com。

← Back to SnapSpend