AfloatPrivacy Policy
Afloat is a budgeting app that helps you plan your monthly spending. We built it so that we never need to see your financial data.
What we collect
We don’t sell your data, and we don’t pass it to anyone except the two service providers named below, who process it only to run the AI features. We don’t keep your budget, your documents or anything in them. Afloat has no user accounts, no advertising and no third-party tracking or analytics. Data leaves your device only when you use one of the optional AI features below. When you do, two things stay on the server side for a limited purpose: a standard technical log of the request, and a usage counter. Both are described below.
Where your data lives
- Everything you enter — accounts, bills, budgets, goals, balances and spending — is stored on your device.
- With Premium and iCloud enabled, the app syncs this data through your private iCloud database, which is controlled by your Apple Account. We cannot access it. Backups and exports you save are files you control.
- Home and Lock Screen widgets read a small summary stored on your device.
AI features (optional, Premium)
Afloat has three optional AI features. Each sends data over an encrypted connection to our server (Google Cloud Functions, Firebase; region europe-west3, Frankfurt, EU) and from there to Claude, an AI model by Anthropic:
- Bill and receipt scan — the photos or PDF you pick are sent as they are and read to find payments or purchases. That means everything printed on them, including a name, an address or an account number if they are there. Before the first scan the app asks for your consent.
- Statement import — the bank statement you pick (PDF, CSV or screenshots) is sent as it is and read to list its transactions with categories. It uses the same consent screen.
- Spending review — when you start it, a summary of the chosen period is sent to get recommendations. The app shows this before you start. The summary contains:
- the period’s operations: date, amount, type, place of purchase, account name, category, and the goal name if the operation belongs to a goal;
- bills and regular payments: name, amount, date, whether paid;
- budgets: category, limit and amount spent;
- goals and savings: name, target, monthly plan and amount saved;
- accounts: name, balance and type;
- your income: amount, how often it comes and how much has arrived;
- the period’s dates, and totals by category for this period and the previous one, for comparison.
With each request the app also sends the purchase record signed by Apple, to confirm your Premium access (it contains no name or email), and your device language and region, your currency and today’s date.
- We do not store your documents or the data sent for a review. They pass through our server to produce the result and are not saved there.
- Server log. When you use an AI feature, our hosting provider (Google Cloud, Frankfurt) records a standard log entry for the request: IP address, date and time, which of the three features was called, the size and duration of the request, and the app version. The log contains none of your documents, amounts or names. Google deletes these entries after 30 days. If you don’t use the AI features, the app never contacts our server.
- Usage counter. To prevent abuse, our server keeps a counter linked to your Apple purchase number. This identifier is pseudonymous: it contains no name, email or device number, and we cannot tell who you are from it, though Apple can. The record holds the last day of use, the number of attempts that day and in total, which product was bought, and, for the spending review, the times of the last few runs. The counter is kept for as long as it is needed to enforce the limits.
- Anthropic processes the data to produce the result. It may keep what was sent for up to 30 days and then deletes it; it keeps it longer, for up to 2 years, only if its automated safety systems flag a request as a violation of its rules. Under its commercial terms, Anthropic does not use this data to train models. See Anthropic’s privacy policy.
- You can review and edit everything the AI suggests before it is added.
Bank access
Afloat never asks for bank credentials and does not connect to financial institutions.
Purchases
Subscriptions and purchases are processed by Apple. We receive no payment details. Apple’s privacy policy applies to payments.
Notifications
Reminders (income, bills, balance check-ins) are scheduled locally on your device. No data is sent to our servers.
Deleting your data
Use Settings → Erase all data in the app. Your budget is deleted from this device, and from your iCloud if sync is working — the app tells you which applies before you confirm. Backup and export files the app was holding for sharing are deleted too (from version 1.0.1).
Erasing does not delete:
- backup or export files you saved to Files or sent to someone — they are yours to manage;
- the usage counter on our server: it belongs to the purchase, not to your budget;
- server log entries: they expire after 30 days.
Deleting the app removes everything from the device. Data in your iCloud stays.
To remove iCloud data, manage it in iOS Settings → [your name] → iCloud.
Children
Afloat is not directed at children under 13.
Changes
If this policy changes, we will update this page and the effective date.
Contact
The person responsible for your data is Mykola Noskov, Ukraine — the developer of Afloat. Questions and requests: support@afloatbudget.com