Privacy Policy

Section 1Who is responsible#

Section 2The short version#

Settlano is built so that the operator does not hold your data. Everything you enter in the app is stored on your device and nowhere else. There is no sign-up, no cloud copy and no analytics. This is not a setting you have to find; it is how the app is made.

That promise has a few exceptions, all of them listed in Sections 4 to 8. None of them involves your income, expenses, invoices or receipts.

Section 3What stays on your phone#

The app stores on your device:

• your income, expenses, invoices, quotes, payments and clients, and every figure the app computes from them;
• your tax profile (for example your filing status, VAT article and prior-year figures);
• receipt photos you take or import, and the text the device reads from them;
• your business details and invoice branding, including a logo if you add one;
• your settings, reminders and the state of the app.

Receipt photos are read by your device’s own text recognition. They are not uploaded, stored or shared by the app.

The app never asks for or receives bank credentials. Nothing is connected to your bank unless a future version offers it and you switch it on yourself; working offline, on your phone alone, is the default and will remain so.

Section 4What leaves your phone, and why#

Purchases

Subscriptions are sold and billed by Apple. To check that a subscription is active and to restore it on another device, the app uses RevenueCat, a subscription-management service. RevenueCat receives the purchase receipt Apple issues and an identifier that its software generates at random the first time the app runs. As with any internet request it also receives your IP address, and its software attaches the device model, the iOS and app versions, your language settings, your App Store country and Apple’s per-developer device identifier. The app never sends RevenueCat your name, your email address or anything from your books, and the identifier is not linked to your identity by the app. The legal basis is the performance of the subscription contract. RevenueCat’s own privacy policy is at revenuecat.com/privacy.

Reminders

Deadline and habit reminders are scheduled on the device itself. No reminder is sent through a server.

Things you choose to send

When you share an invoice, a quote, an accountant pack, a CSV export or a backup file, it goes wherever you send it, by whatever app you choose. That is your action, not the app’s, and the recipient then holds a copy.

The home-screen widget

The widget reads a small summary (your safe-to-spend figure, the amount set aside, and the next deadline with its estimate) from a store shared between the app and the widget on the same device. It does not leave the device; the amounts are hidden while the phone is locked, and replaced by dots whenever the app lock is on.

Section 5The TestFlight beta#

Pre-release builds are distributed through Apple’s TestFlight. If we invited you by email, App Store Connect shows us the email address we sent the invitation to, the name we entered with it, the date you installed, how many sessions you have had and any crashes. If you joined through a public link, Apple shows us the same installation, session and crash figures but lists you as anonymous. Apple also collects crash reports and usage statistics and makes them available to us; under Apple’s TestFlight terms a tester cannot opt out of that while testing. Any screenshot or feedback you send through TestFlight reaches us with that data.

We use this to run the beta and to fix what breaks, and for nothing else. It is not combined with anything in your books, which TestFlight cannot see. TestFlight itself is governed by Apple’s TestFlight terms and by Apple’s privacy policy. We keep the tester list for as long as the beta runs and delete it within three months of the beta ending.

Section 6Calendar#

If you turn on “Add to Apple Calendar” (off by default), the app creates a calendar named Settlano and writes your tax deadlines and the due dates of invoices you have sent into it. It writes only to that one calendar and never reads or changes anything else in your schedule.

Where that calendar lives decides what goes into it. Where your iPhone keeps an on-device calendar, the app uses that: nothing syncs to your other devices, and those entries can include estimated amounts and client names. iOS only keeps on-device calendars while iCloud Calendar is switched off, so on most iPhones there is none to use. The app will not fall back to your iCloud account on its own: it asks first, naming the account, and does nothing if you decline. If you agree, the entries carry only the date and what is due, with no amounts and no client names, because calendar data in iCloud is not end-to-end encrypted. Those figures stay in the app on your phone.

Turning the setting off, using “Delete all data”, or letting the trial or subscription lapse removes every entry the app created. The figures themselves stay in the app on your phone.

Section 7Backups#

You can export an encrypted backup of your data (AES-256; only your passphrase opens it) and store it wherever you choose. We cannot open it and cannot recover the passphrase.

iOS device backups (iCloud or Finder) may include the app’s data under Apple’s backup encryption. Those are controlled by your device settings, not by us.

Section 8This website#

settlano.com uses no analytics, no cookies and no third-party scripts. The one thing it stores in your browser is your light-or-dark choice, if you make one, and that never leaves your browser.

If you join the beta waitlist, we store the email address you submit, what you told us you do, and the date you signed up. That is the whole record we keep: the form stores no IP address and nothing about your browser. Vercel, which runs the form, keeps its own short-lived server logs of each request, as any web host does, and we do not use them to identify you. The legal basis is our legitimate interest in running a beta you asked to join, and you can leave at any time. We use your entry only to send TestFlight invites and beta updates. It is never shared with anyone else and never sold.

We keep waitlist entries until the beta ends or for 24 months from signup, whichever comes first, and then delete them. Ask to be removed sooner and we delete it: write to support@settlano.com.

Section 9Who processes data for us#

RevenueCat, Neon, Resend, Vercel, Cloudflare and our email provider act only on our instructions as processors. We do not use any advertising, analytics or tracking service, and there is nothing to opt out of.

Section 10Your rights#

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Because your books live only on your device, those rights over your books are exercised by you, directly: you can read, export, correct and delete everything in the app, and “Delete all data” removes it entirely.

For the data we do hold (a waitlist entry, or a TestFlight tester record), write to support@settlano.com and we will answer within one month. You may also complain to the Information and Data Protection Commissioner in Malta at idpc.org.mt, or to the supervisory authority where you live.

We make no decisions about you by automated means and we do not profile you.

Section 11Children#

The app and the waitlist are intended for people aged 18 or over who are self-employed. If you believe a child has given us personal data, tell us and we will delete it.

Section 12Changes to this policy#

We will update this policy when the app’s behaviour changes in a way that affects your data, for example if a future version offers an optional bank connection. The version number and effective date at the top of this page change with it, and any change that reduces what we promise is announced in the app and on settlano.com at least 30 days before it takes effect, as the Terms of Use provide for the agreement as a whole.

Section 13Contact#

Questions about this policy, or a request under it: support@settlano.com. The operator is identified in Section 1. The terms that govern using the app are at settlano.com/terms.