Privacy Policy

1. Introduction

At Crafting Bytes, we are committed to protecting your privacy. This Privacy Policy explains how WealthSnap — our net worth tracker — handles your information. WealthSnap deals with some of the most sensitive data a person has, so the design principle is simple: your financial data stays on your device and, if you turn on sync, in your own iCloud account. We never see it.

2. Our Privacy Model

WealthSnap is a manual tracker by design, and that design choice is the foundation of its privacy:

• No Bank Linking: WealthSnap does not connect to your bank, broker, or exchange. There is no Open Banking flow, no account aggregator, and no place to enter banking credentials.
• No Account Required: You do not create an account with us. There is no sign-up, no password, and no profile held on our systems.
• You Enter Your Own Numbers: Every balance, holding, transaction, and valuation in the app is one you typed or imported yourself.

3. What WealthSnap Stores on Your Device

Your financial information is stored locally on your device and is not transmitted to Crafting Bytes. This includes:

• Accounts, balances, holdings, and the institutions you group them under
• Transactions, cost basis, and any documents or notes you attach
• Net worth snapshots and the history they build up over time
• Your settings, chosen theme, display currency, and app preferences
• Safety backups: copies of your data that the app writes on your device before a change that could replace it, such as a choice between the data on this device and the data in iCloud. They let you restore the earlier state, and they are never sent to us.

Deleting the app removes this data from your device. If you have enabled iCloud sync, see section 4 for how to remove the synced copy as well.

4. iCloud Sync (Optional)

WealthSnap can sync your data across your own devices using Apple's iCloud. This feature is off by default and only starts when you turn it on in Settings.

• Your iCloud Account, Not Ours: Synced data is written to the private CloudKit database of your personal iCloud account. It is not stored on Crafting Bytes servers.
• We Cannot Read It: As the app developer, we have no ability to access, read, or export the contents of your private CloudKit database. Apple's platform does not grant developers that access.
• Your Control: You can turn sync off at any time in Settings, and you can delete the stored data from your Apple account through iOS Settings › your name › iCloud › Manage Account Storage.

Data handled by iCloud is subject to Apple's Privacy Policy.

5. What Our Servers Receive

To show live prices and exchange rates, the app asks our service for market data, and it can report errors to the same service. What it sends is deliberately narrow and never contains your financial information:

• Market Data Queries: A request contains only what is needed to look up a price — for example a cryptocurrency identifier, a stock symbol, or a currency pair. It never includes how much you hold, what an asset is worth to you, your account names, or your net worth.
• An Anonymous Install Tag: Each installation generates a random twelve-character identifier the first time it is needed. It is not derived from you, your device, or your Apple Account, it is never combined with your financial data, and reinstalling the app replaces it with a new one. We use it to understand how much data-provider capacity an installation consumes so we can size and pay for the service, and to group the error reports described below.
• Error Reports: When something fails inside the app, for example a file that cannot be saved or a sync step that does not complete, the app can send us a short error report. A report contains a fixed description of the failure, the place in our code where it occurred, its severity, the technical error type and code, the app version and build, the iOS version, and the time. It is sent with the anonymous install tag, so the reports of one installation are linked to each other. A report never contains your balances, amounts, account or institution names, transactions, or notes, and we cannot connect the install tag to your identity. We use these reports only to find and fix defects.
• Standard Connection Information: As with any internet request, our infrastructure provider processes the network information necessary to deliver a response, such as your IP address. We do not use it to build a profile of you.
• App Attestation: Requests carry a token proving they came from a genuine copy of the app, which stops third parties from abusing our data allowance. The token identifies the app installation, not you.

The app requests prices, exchange rates, and market history only from our service and never directly from the underlying market-data providers, so those providers do not receive your IP address or any information about you. There is one exception: cryptocurrency logo images load directly from CoinMarketCap's image servers, which receive your IP address and the identifier of the coin whose logo is shown, as with any image on the web.

6. Subscriptions and Payments

WealthSnap offers an optional PRO subscription. Purchases are processed by Apple through the App Store — we never see or handle your payment details.

• Subscription status is managed through RevenueCat, a subscription service. It assigns your installation an anonymous identifier and receives the App Store purchase records for that identifier, so the app knows whether PRO is active and can restore your purchase.
• We do not receive your name, email address, or payment method from Apple.
• Your subscription status is not linked to your financial data, which RevenueCat never receives.

Data handled by RevenueCat is subject to RevenueCat's Privacy Policy.

7. What We Do Not Do

Some things are worth stating plainly:

• No Analytics: WealthSnap contains no analytics or product-usage tracking SDK. We do not record which screens you open or what you tap.
• No Third-Party Crash Reporting: The app contains no crash-reporting SDK. The only diagnostic data it sends is the error reports described in section 5, and they go to our own service.
• No Advertising: No ads, no ad networks, and no advertising identifiers.
• No Selling or Sharing: We do not sell, rent, or share your data with anyone, and there is no financial data on our side to sell in the first place.

8. Third-Party Services

WealthSnap relies on a small number of external services. None of them receives your financial data in a form it can read:

• Apple (iCloud & App Store): Optional sync into your own private iCloud database, and processing of subscription purchases.
• Our Service: Hosted on Cloudflare, it fetches prices and exchange rates on the app's behalf so that data providers never see your device, and it stores the error reports described in section 5.
• App Attestation and Remote Configuration: Google Firebase App Check verifies that requests come from a genuine app installation, and Firebase Remote Config lets us adjust app settings without shipping an update. To do this, Firebase assigns the installation an identifier of its own. Firebase Analytics and Crashlytics are not part of the app.
• Subscription Management: RevenueCat records entitlement status against an anonymous installation identifier.
• Market Data Providers: Prices, exchange rates, and market history come from third-party financial data providers. They are credited on the WealthSnap Data Sources page, and requests reach them only through our service, except for the cryptocurrency logo images described in section 5.

9. Data Security

We implement strong security measures around the data the app handles:

• On-Device Protection: Your data is stored in the app's private container, protected by iOS file-level encryption and your device passcode or biometrics.
• Encryption in Transit: All network communication is encrypted via HTTPS.
• No Credentials to Lose: Because WealthSnap never asks for bank, broker, or exchange logins, there are no financial credentials stored anywhere for an attacker to obtain.
• Minimal Server Footprint: Our service holds no user accounts and no financial records, only anonymous usage counts and error reports, which keeps the consequences of any incident on our side limited by design.

10. Children's Privacy

WealthSnap is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has used WealthSnap inappropriately, please contact us.

11. Your Rights

Because your financial data stays under your control, exercising your rights does not require going through us:

• Access and Portability: You can export your full data set from within the app at any time, in a portable format you can keep, back up, or move to another tool.
• Deletion: You can reset app data from within the app, and uninstalling removes the local copy, including its safety backups. If iCloud sync was enabled, delete the app's iCloud data through iOS Settings as described in section 4. Reinstalling the app replaces the anonymous install tag, so later reports are not linked to earlier ones.
• Objection and Restriction: Turning off iCloud sync stops all syncing; declining or cancelling a subscription stops all subscription processing.
• Enquiries: For any question about your rights under the GDPR, contact us using the details below and we will respond within the statutory time limits.

12. Changes to This Policy

We may update this Privacy Policy as WealthSnap evolves. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed.

13. Contact Information

If you have questions about this Privacy Policy or WealthSnap's privacy practices, please contact us:

Email: privacy@craftingbytes.eu

General Contact: contact@craftingbytes.eu

14. Jurisdiction

This Privacy Policy is governed by the laws of the European Union and is designed to be compliant with GDPR requirements. Our commitment to privacy extends beyond legal requirements — we aim to offer the best possible protection for our users.