Privacy Policy

Duefolio can handle information that you enter or select so it can calculate and display your subscription portfolio. This may include:

• subscription names, prices, currencies, billing dates, renewal settings, and price history;
• optional monthly income amounts used for the profit-and-loss view;
• app preferences, such as display currency, haptics, and report settings;
• custom subscription names, icons, colors, and an optional image you select as a logo;
• a bank-statement CSV or text file you choose for local recurring-charge detection;
• a Duefolio ledger file or clipboard text you choose to import;
• questions and generated replies in the optional Folio on-device analyst; and
• App Store purchase history for the optional lifetime Pro unlock.

This information can be financially sensitive, but Duefolio does not transmit it to Cynq Ventures. Derived totals, projections, and charts are calculated on your device.

If you use the public feature-request board, we receive the request title and description you submit, an optional display name, your vote choices, a random browser identifier, and any report you send about a request. New requests are reviewed before publication. Approved request text, display names, statuses, and vote totals are public; reports and moderation records are available to the team. Do not include private financial, account, or contact details in a request.

Your ledger, income entries, and app preferences are stored in Duefolio’s local app storage. Custom logo images are saved in the app’s Application Support area. Currency conversion uses rates bundled with the app and does not require a network request.

If you enable Folio, Duefolio downloads one pinned public language-model file from Hugging Face’s hosting infrastructure and stores it in Application Support, excluded from device backups. The hosting provider may process ordinary request information, such as an IP address and device or connection metadata, to deliver and secure that download. Duefolio does not include your ledger, income, prompts, tool results, or generated replies in the request. Folio inference then runs locally on your device.

When you select a bank statement, Duefolio reads it locally to identify possible recurring debits. The app does not upload the statement. Raw statement rows and review candidates are cleared from the active import flow when you finish, reset, or leave it. Only subscription entries you explicitly approve are added to your ledger.

Duefolio uses RevenueCat to load its one-time lifetime offer, validate the App Store receipt, restore the purchase, and determine whether the Pro entitlement is active. RevenueCat receives an anonymous app user identifier, device type and operating system, the Apple receipt, purchase history, and last-seen app time. Duefolio does not send your ledger, bank statement, income, custom subscription contents, Folio prompts, or generated replies to RevenueCat.

The feature-request board runs on Cloudflare and stores requests, votes, reports, and moderation records in a hosted database. A random browser cookie helps the same browser remember its votes. We store a one-way hash of that identifier with requests and votes and use it for rate limits and abuse restrictions. No account or email address is required. This identifies a browser rather than verifying a person; clearing browser data or changing browsers can reset remembered votes.

When you follow the board from its previous address, a short-lived signed transfer can carry the one-way browser identifier to the new board so your existing votes can remain remembered. This links your old and new board activity for that purpose; it does not transfer your financial ledger or require an account.

When you submit a request, vote, or report content, we use Cloudflare Turnstile to check for automated abuse. Cloudflare processes connection and browser signals, such as an IP address, browser information, and the website being visited, to provide and improve bot detection. Our server also uses your connection IP address to calculate a keyed, one-way network identifier for rate limits and temporary blocks. We store that identifier and recent submission, vote, and report counts for moderation; our board database does not store the raw IP address. Browser and network identifiers can connect activity from the same browser or connection, so they are pseudonymous rather than proof of anonymity.

See Cloudflare’s Turnstile Privacy Addendum for more about this processing.

We do not sell or rent your app data. Duefolio contains no third-party advertising, cross-app tracking, behavioral-analytics, or crash-reporting SDKs. It uses RevenueCat only for App Store product information, purchase handling, receipt validation, entitlement access, restore, fraud prevention, and aggregate purchase reporting.

Duefolio uses Apple-provided system features such as the file picker, photo picker, clipboard, and share sheet. If you choose to export a ledger, copy it, share it, paste it into another service, or save it elsewhere, the recipient and destination you choose may process that information under their own privacy policies. You control whether those actions occur.

The optional Folio model is downloaded from Hugging Face. Its hosting and delivery providers process the model-file request under their own privacy terms. LiteRT-LM runs the downloaded model on-device; Duefolio does not use a hosted AI service for Folio questions or replies.

Apple processes payment and App Store transaction information under Apple’s terms. RevenueCat processes the limited purchase and technical information described above under its privacy policy. Duefolio uses RevenueCat’s anonymous app user identifier and does not attach a name, email address, advertising identifier, or Duefolio account to the purchase history.

The public privacy page has no forms or advertising added by Cynq Ventures. Cloudflare hosting adds a Web Analytics beacon to this page to measure page views and website performance. The public feature-request board uses Cloudflare hosting, database services, and Turnstile, and keeps operational and moderation records. The hosting and security infrastructure may process IP addresses, browser and connection information, request details, and technical logs to deliver and protect the websites. These provider records are separate from the temporary network identifiers in the board database. We also keep encrypted database backups in a private GitHub repository’s backup storage. These services are not used by us for advertising or cross-app tracking.

On-device information remains until you edit or remove it, replace it through an import, or delete Duefolio from your device. Deleting a custom subscription also removes its locally stored custom logo when that logo is no longer used.

Folio’s conversation is kept only for the current app session. You can delete its downloaded model separately in Duefolio Settings without deleting your ledger; uninstalling the app also removes the model from the app container.

Exported files and clipboard copies are under your control and must be deleted from their chosen destinations by you. Because Duefolio has no account or cloud copy of your local ledger, Cynq Ventures cannot retrieve or remotely delete that ledger. Uninstalling the app removes its app container according to iOS behavior.

If you email us, we receive the information you choose to include. We retain support correspondence only as long as reasonably necessary to respond, maintain business records, prevent abuse, and meet legal obligations. You may ask us to delete eligible correspondence.

Public feature requests, their browser hashes, and individual vote records may remain while they are useful for product planning and community reference. Pending or hidden requests are retained for review and administration unless we remove them. The voting cookie is set to expire after one year unless your browser removes it sooner. Clearing that cookie does not delete requests, votes, or other server records. Contact us with enough detail to identify a post for an eligible deletion or correction request; because no account is required, we may need reasonable information to verify the request.

Recent network associations expire seven days after the relevant submission or the latest recorded activity. A moderator may apply a browser restriction for 30 days and a network restriction for seven days from the moderation action; a later moderation action may renew a restriction. Network restrictions can affect other visitors sharing the same connection. Expired network associations and restrictions are removed by daily cleanup, which can take up to one further day while cleanup is operating normally. Rate-limit counters are also removed through daily cleanup.

We keep unresolved reports while they need review. Resolved reports and administrator action records are removed through daily cleanup after 90 days. Encrypted backups can retain earlier copies after information is removed from the active database. Routine GitHub backup copies are configured to expire after seven days; separate migration and recovery copies may be retained while needed to verify the move and recover the service. Hosting, security, and Turnstile providers may retain their own operational records under their applicable terms.

A lifetime purchase remains associated with your Apple ID so Apple can restore it. Apple and RevenueCat retain purchase records according to their own legal, security, fraud-prevention, and service requirements. Contact Duefolio support for an eligible RevenueCat data request; App Store transaction rights and refunds are handled by Apple.

Duefolio offers one optional, non-consumable lifetime Pro purchase. There is no monthly or annual subscription, automatic renewal, or free trial. The app displays the localized App Store price before purchase and provides a Restore Purchases control.

Apple processes payment-card information and completes the transaction; Cynq Ventures and RevenueCat do not receive your payment-card details. RevenueCat receives and validates the receipt and purchase history so Duefolio can unlock and restore Pro. RevenueCat also uses purchase history for receipt validation, fraud prevention, customer history, and aggregate purchase analytics. This information is not used for cross-company advertising tracking.

Duefolio is a general-purpose subscription-management tool and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has sent personal information to us through a support message or public feature request, contact us so we can review and delete it when appropriate.

We may update this policy as Duefolio evolves or legal requirements change. The effective date at the top will show the latest revision. Material changes will be reflected here and, when appropriate, in the app or its App Store listing.

We will review this policy before adding features such as accounts, cloud sync, analytics, diagnostics, richer online feedback tools, or notifications backed by a server. App Store privacy answers must be reviewed at the same time whenever data practices change.

For privacy questions or eligible deletion requests, contact Cynq Ventures at:

[email protected]