Privacy Policy

Qianey · developed by Yu Xiao · Effective date: October 7, 2026

In one line: Qianey does not collect your data. No account, no servers of ours, no ads, no tracking. Your records live in your own iCloud.

1. What we don't collect

• No sign-up. We don't collect your phone number, email, name, or any identity information.
• No device identifiers for tracking.
• No third-party advertising, analytics, or crash-reporting SDKs. The app ships with zero third-party dependencies.
• We don't operate any server that stores your records — we don't have one.

2. Where your data lives

Every transaction, account, category, budget, merchant, member and attached image you record is stored in your own private iCloud database (Apple CloudKit, under your Apple ID and iCloud storage). Apple stores and encrypts it within your iCloud account.

We cannot read it. The app never uses CloudKit's public database, so no user's records are visible to us anywhere.

If you share a ledger with your family, the people you invite can see the contents of that ledger through Apple's sharing mechanism. Whether to share, and with whom, is entirely your choice. The developer is not a participant in any share and cannot see the contents either. You can leave a shared ledger at any time.

3. Data kept on your device

• A local copy of the database, for offline entry and fast reads.
• A few preferences, such as the current ledger, appearance mode, and app-lock setting.

These stay on your device. They are not sent to us.

4. The one external network request: exchange rates

When you record a transaction whose currency differs from your ledger's base currency, the app requests that currency pair's rate from the public service api.frankfurter.app (Frankfurter, an open-source, free exchange-rate API).

• The request contains only the currency pair (for example USD to CNY) — no personal information, no account details, no amounts.
• As with visiting any website, the operator of that service may see your IP address.
• If you don't record in multiple currencies, this request never happens.

Beyond this, the app makes no network requests at all.

5. We don't ask for permissions you don't need

• Photos: the app reads an image only when you tap "Attachment" and pick it yourself, and stores it as an attachment to that transaction. The app does not request photo library permission and cannot browse your library.
• Camera, contacts, location, microphone: not requested.
• Face ID / Touch ID: used only when you enable App Lock, through the iOS system API. Biometric data is handled by the Secure Enclave; the app receives only a pass/fail result and can neither access nor store your fingerprint or face data.

6. What we don't do

• No advertising.
• No analytics or user profiling.
• No tracking you across apps or websites (App Store privacy label: Data Not Used to Track You).
• No selling, sharing, or transferring your data to third parties.

7. Children's privacy

The app is intended for a general audience (rated 4+) and does not knowingly collect personal information from children. We collect no user information at all.

8. Your data, your call

• Delete: remove transactions, ledgers or attachments in the app, or delete the app itself.
• After deleting the app, the iCloud copy can be removed in iOS Settings → your name → iCloud → Manage Storage.
• Export: take your records out as CSV or JSON whenever you like.
• Because the data is not in our hands, we cannot delete or restore it for you — and for the same reason, nobody else can touch it either.

9. Changes to this policy

If this policy changes, we will update the effective date at the top of this page. Significant changes to how data is handled will be noted in the app's release notes.

10. Contact

Questions about this policy or about your data? Email yuxiao.sky@me.com.