Privacy Policy

1. Scope and current design

This Privacy Policy explains how Paledor (the “App,” “we,” “us,” or “our”) handles information when you use the App or visit this Privacy Policy page. Paledor is a personal finance tracking, budgeting, goals, recurring expenses, receipt/screenshot scanning, import/export, backup, and insights app.

The current version of Paledor is designed to work primarily on your device. You can use the App without creating an account or logging in.

• We do not currently operate a Paledor account system.
• We do not currently operate a Paledor backend or cloud-sync service.
• We do not provide banking, payments, loans, investments, insurance, crypto, or money-transfer services.
• We do not sell your personal information.
• We do not show ads.
• We do not use third-party analytics or advertising SDKs in the current version.
• Your financial records are stored locally on your device unless you choose to export, share, back up, import, or send information to us.

2. Information stored on your device

Depending on how you use Paledor, the App may store the following information locally on your device.

Financial tracking information

• Transactions, including amount, type, date, category, account, currency, exchange rate, and notes.
• Income and expense categories.
• Budgets, budget settings, and budget snapshots.
• Accounts you create inside the App, such as cash, checking, savings, or custom account names.
• Transfers between accounts.
• Recurring expense or recurring income rules.
• Goals, target amounts, target dates, notes, contributions, and withdrawals.
• Import category/account mappings used to help process future CSV imports.
• App-generated insights, summaries, calculations, and local app states based on your data.

You control what you enter. You should avoid entering information that the App does not need, such as full bank account numbers, full payment card numbers, government identification numbers, passwords, or other highly sensitive identifiers.

App settings and preferences

• Theme and display settings.
• Currency settings.
• Onboarding state.
• Budget and insight preferences.
• Recovery-passphrase configuration state, where available.

Receipt, screenshot, and image text recognition data

If you choose to scan a receipt, upload a receipt image, or import a transaction screenshot, the App may access the image you select or capture so it can extract text and suggest transaction details.

In the current version, receipt and screenshot text recognition is intended to be processed on device using Google ML Kit text recognition. The App uses recognized text to create a draft transaction or draft imported transactions for your review.

The App does not intentionally keep the original image as a permanent app record. If you capture a new image through the camera flow, the App attempts to remove the temporary image file after recognition. If you select an existing image from your gallery or files, that original image remains under your control in its original location.

If you save a transaction created from a receipt, screenshot, or image, the saved transaction details become part of your local Paledor database.

Imported files

If you choose to import a CSV file or backup file, the App reads the selected file so it can show a preview, help map categories/accounts, and import records you approve. The App does not scan your device files generally; it only reads files you select through the system file picker.

Exported and backup files

If you choose to export transactions or create a backup, the App may create files containing your data. These files are controlled by you.

• CSV transaction exports.
• Plain JSON backup files.
• Password-protected encrypted backup files.

Plain JSON backups and CSV exports are not encrypted by Paledor after you save or share them. Anyone with access to those files may be able to read their contents. Password-protected Paledor backup files are encrypted using the password you choose, but you are responsible for keeping that password safe.

3. Information sent off your device

In the current version, your financial records are not sent to a Paledor server because the App does not currently use a Paledor backend or cloud account system.

The App may send or involve limited technical information in the following cases.

Exchange-rate data

If you use currency features that require updated exchange rates, the App may request exchange-rate data from Frankfurter using endpoints such as api.frankfurter.dev or legacy/redirecting Frankfurter endpoints.

These requests may include currency codes, such as the selected base currency and requested target currencies. Your transaction amounts, notes, categories, budgets, accounts, goals, and backup files are not intentionally sent with these exchange-rate requests.

As with most internet requests, the exchange-rate service and network providers may receive technical information such as your IP address, device/network information, request time, and requested URL.

Support communications

If you contact us by email or another support channel, we may receive the information you choose to send, such as your email address, message content, screenshots, attachments, exported files, backup files, or diagnostic details you provide. Please do not send sensitive financial data unless necessary for support.

Website and hosting

If you visit this Privacy Policy page or another Paledor website page, the hosting provider, email provider, domain provider, security services, or network providers may process standard technical information such as IP address, browser/device information, request time, and requested URL. This policy page is designed to work without advertising cookies or analytics scripts.

Platform services

Apple, Google Play, your device manufacturer, your operating system, your file picker, your sharing targets, your email provider, cloud storage provider, or other apps/services you choose may process data according to their own privacy policies when you use those platform features.

4. Permissions and platform capabilities

The App may request or use the following device permissions or platform capabilities.

Camera

Used only when you choose to scan a receipt or capture an image for text recognition. You can deny or revoke camera access in your device settings and continue using manual entry features.

Photos, media, and files / file picker

Used when you choose to select an image, CSV file, or backup file, or when you choose where to save an export or backup. The App accesses the files you select or create through the system picker or sharing interface.

Internet and network access

Used to fetch exchange-rate data and to open external links such as the Privacy Policy page.

Permissions not currently required for core use

The current version of Paledor is not intended to require access to contacts, precise location, microphone, health data, calendars, or advertising identifiers for its core budgeting features.

5. How information is used

Paledor uses information in the App to:

• Save and display your transactions, accounts, categories, budgets, recurring rules, transfers, and goals.
• Calculate balances, budget progress, goal progress, recurring activity, insights, summaries, and trends.
• Parse CSV imports and restore backups you choose to import.
• Generate CSV exports and app backups you choose to create.
• Extract text from receipts or screenshots when you choose to scan or import an image.
• Fetch exchange rates when currency conversion features need updated rates.
• Respond to support requests you send to us.
• Maintain app security, encryption, backup, restore, and recovery functionality.
• Comply with legal obligations and protect rights, safety, and security where applicable.

We do not use your local financial records for advertising.

6. Sharing and disclosure

In the current version, we do not sell your personal information, rent your personal information, or share your local financial records with advertisers. We also do not share personal information for cross-context behavioral advertising.

Information may be shared or disclosed in these limited situations:

• At your direction: when you export, save, share, email, upload, or otherwise transfer a CSV, JSON backup, encrypted backup, screenshot, or other file yourself.
• Exchange-rate provider: limited currency-code requests may be sent to Frankfurter to retrieve exchange-rate data.
• Support providers: if you contact us, email providers or support tools may process the information you send.
• Platform services: Android, iOS, Google Play, Apple, your device manufacturer, your file picker, your sharing targets, your email provider, your cloud storage provider, or other apps/services you choose may process information according to their own policies.
• Legal or safety reasons: if we are required to comply with applicable law, legal process, or valid requests from authorities, or to protect rights, safety, and security.
• Business changes: if Paledor or its assets are involved in a merger, acquisition, financing, reorganization, or similar transaction, information we actually hold, such as support communications or future account/cloud data, may be transferred as part of that transaction. Local app data that has not been sent to us remains on your device.
• Future service providers: if we add backend, sync, analytics, AI, crash reporting, subscriptions, or cloud processing in the future, we may use service providers to operate those features. We will update this policy to describe those features and providers.

7. Data storage, retention, and deletion

Local app data

Your Paledor data is stored on your device until you delete it, reset the App data, uninstall the App, clear app data through your device settings, or replace it through a restore/import operation.

The App includes local data management options, such as reset, export, backup, and restore features. Because your current local app data is not stored on Paledor servers, we generally cannot access, correct, export, or delete that local data for you unless you choose to send it to us.

Backup and export files

Backup and export files remain wherever you save or share them. Deleting data inside the App may not delete copies that you previously exported, saved, emailed, uploaded, or shared. You are responsible for deleting those external copies if you no longer want them.

Support messages

If you contact us, we may retain your message and related support information for as long as needed to respond, troubleshoot, maintain records, prevent abuse, protect rights, or comply with legal obligations.

Future accounts or cloud services

If we add account creation, cloud sync, or backend processing in the future, we will update this policy to explain account deletion, server-side retention, deletion requests, and any data that may need to be retained for legal, security, fraud-prevention, billing, or dispute-resolution reasons.

8. Security

Paledor is designed to protect local app data by using an encrypted local SQLite database. The database key is stored using device secure storage where supported by the platform.

The App may also allow you to configure a recovery passphrase. The recovery mechanism is intended to help restore access to the local encrypted database if the device secure-storage key becomes unavailable. You are responsible for remembering your recovery passphrase.

Password-protected Paledor backup files are encrypted using password-based encryption. Plain JSON backups and CSV exports are not encrypted by Paledor after you save or share them.

No method of storage, encryption, or transmission is perfectly secure. You are responsible for keeping your device, device passcode, backup files, backup passwords, and recovery passphrase safe.

9. Your choices and rights

You can:

• Use manual entry instead of camera or image scanning.
• Deny or revoke camera, photo, media, or file permissions through device settings where supported.
• Choose whether to import files.
• Choose whether to export or share files.
• Choose plain or encrypted backup options where available.
• Reset or delete local App data.
• Delete backup/export files you created outside the App.
• Contact us about privacy questions at info@paledor.com.

Depending on where you live, you may have legal rights to request access, correction, deletion, portability, or restriction of personal information that we hold about you. In the current local-first version, most financial data is stored only on your device, so we may not have access to it unless you send it to us.

If future versions include accounts or cloud services, we will provide additional controls and update this policy to reflect those features.

10. Children’s privacy

Paledor is not directed to children. The App is intended for personal finance tracking by adults or users old enough to manage personal financial information under applicable law. We do not knowingly collect personal information from children.

If you believe a child has provided us personal information through a support channel, contact us so we can review and delete it where appropriate.

11. International use

If you contact us, visit the Paledor website, use exchange-rate features, or use third-party platform services from your location, information may be processed in countries other than your own. Data protection laws may vary by country.

12. No financial advice

Paledor is a personal budgeting and finance tracking tool. It does not provide regulated financial, investment, tax, legal, credit, insurance, lending, banking, or accounting advice. Any insights, summaries, or calculations shown in the App are informational and based on the data you enter.

13. Future changes to the App or this Privacy Policy

We may update this Privacy Policy from time to time. We may update it to reflect changes in the App, such as optional account features, cloud sync, backend processing, analytics, crash reporting, artificial intelligence processing, subscriptions, payments, bank-statement import, or other services.

When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice in the App, on the website, or through the relevant app platform.

If we introduce account creation in the future, we will add a way to request or initiate account deletion as required by applicable platform rules and law.