Privacy Policy
Last updated: October 15, 2026
1. Overview & Core Philosophy
At WhoOweds, privacy is not an afterthought—it is the foundational architecture of the product. We believe your personal financial agreements, debts, and loan records belong exclusively to you. WhoOweds is engineered as an offline-first utility. We do not require accounts, logins, or cloud synchronization.
2. Information We DO NOT Collect
Because WhoOweds operates locally on your device, we have zero access to your sensitive financial activities. Specifically:
- We do not collect or transmit the names of your contacts.
- We do not collect amounts lent, amounts borrowed, or running balances.
- We do not read transaction notes or due dates.
- We do not request access to your device's system Address Book (contacts are strictly managed internally within the app).
- We do not connect to your bank accounts, credit cards, or financial credentials.
3. Information Processed by Third-Party Services
To provide in-app purchases and essential app store distribution, the following third-party services process limited technical data:
RevenueCat (In-App Subscriptions & Purchases)
We use RevenueCat to process in-app purchases and manage Pro subscription entitlements. RevenueCat receives anonymous store receipts and an anonymous user identifier (e.g., $RCAnonymousID:...). RevenueCat does not receive your financial ledger entries, contact names, or debts. For more details, visit RevenueCat's Privacy Policy.
Apple App Store & Google Play Store
When you purchase a subscription or lifetime license, payment transactions are handled directly by Apple or Google under their respective terms. We never see or store your payment card numbers.
4. On-Device Storage & Local Backups
All records you enter into WhoOweds reside exclusively in a local SQLite database on your device filesystem.
Backup Portability: When you generate a backup file via Settings > Export Backup, an encrypted or plain JSON file is generated locally and shared solely via your device's native share sheet. You determine where that file is stored (e.g., your personal iCloud Drive, Google Drive, or local storage).
5. Biometric Data
If you enable the Biometric & Passcode Lock feature, the app utilizes your operating system's local security framework (Apple LocalAuthentication or Android BiometricPrompt).Biometric authentication takes place strictly at the hardware level.WhoOweds never accesses, stores, or transmits your fingerprint, facial scan, or passcode.
6. Data Retention and Deletion
Because all data is stored on your device, deleting the WhoOweds application permanently deletes all stored contacts, debts, and ledger histories unless you have manually saved an offline JSON backup file. We do not maintain remote copies of your records.
7. Children's Privacy
WhoOweds does not knowingly collect or solicit personal information from children under the age of 13. Since no personal data is collected or transmitted to servers, our application is safe from commercial tracking.
8. Changes to This Policy
We may revise this Privacy Policy periodically. Any updates will be posted to this page with an updated "Last updated" date.
9. Contact Us
If you have questions regarding this Privacy Policy or your data, you can contact us at: