Privacy Policy
Effective date: July 4, 2026 · Applies to the BuildingFreedom iOS app and buildingfreedom.app
1. Who we are
BuildingFreedom ("we," "us") is the developer of the BuildingFreedom app for iPhone. Contact: support@buildingfreedom.app.
2. What data the app handles, and where it lives
Financial data (never leaves your control)
- Apple Wallet data via FinanceKit. With your explicit permission, the app reads transactions, balances, and balance history for Apple Card, Apple Cash, and Apple Savings using Apple's FinanceKit framework. You choose which accounts to share and for what time range, and you can revoke access at any time in iOS Settings. This data is processed on your device and stored only in the app's local database.
- Data you add yourself. Manual transactions, imported statements (CSV/OFX), scanned receipts, budgets, bills, income schedules, and goals are stored in the same local database.
- Storage and sync. The app's database is protected by iOS data protection (encrypted at rest) and synced only through your personal iCloud private database (CloudKit), which is encrypted by Apple and inaccessible to us. We operate no server that stores, receives, or can access your financial data.
Optional premium AI features (aggregates only)
If you subscribe to Plus and use cloud-powered coaching features, the app sends derived, anonymous summaries — such as category totals, pay-cycle statistics, and goal parameters — to our AI processing service to generate advice. These requests:
- never include raw transactions, merchant names, account numbers, balances tied to real accounts, your name, or your email;
- are identified only by an anonymous token from Apple's App Store (so we can enforce fair-use limits), not by any account or identity;
- are not stored after the response is generated, and are not used to train AI models.
Free-tier AI features run entirely on your device using Apple Intelligence and send nothing anywhere.
Analytics (aggregate, optional)
To understand which features are used, the app may record privacy-preserving, aggregate event counts (for example, "the bill calendar was opened"). These events never contain dollar amounts, merchant names, account details, or anything that identifies you. You can turn analytics off in the app's settings.
Purchases
Subscriptions are processed entirely by Apple through the App Store. We receive anonymized subscription-status information from Apple; we never see your payment details.
3. What we do NOT do
- We do not sell, rent, share, or monetize your personal or financial data — with anyone, for any reason.
- We do not show advertising and do not use advertising SDKs or trackers.
- We do not require an account, email address, or phone number to use the app.
- We do not move, hold, or have any access to your actual money. The app is read-only with respect to your finances.
- We do not use your data to train AI models.
4. FinanceKit data — specific commitments
Data obtained through Apple's FinanceKit is used solely to provide user-facing features you can see in the app: transaction lists, categorization, budgeting math, bill detection, forecasts, and insights. It is never transmitted off your device, never shared with third parties, and is deleted when you delete the app or revoke access. Our use of FinanceKit data complies with Apple's developer requirements for the FinanceKit entitlement.
5. Your rights and controls
- Access & portability: export all of your data (CSV/JSON) from within the app, free, at any time.
- Revocation: withdraw Apple Wallet access in iOS Settings at any time.
- Deletion: deleting the app deletes its local data; you can also erase the app's iCloud data from within the app's settings or via iOS iCloud management.
- Questions or requests: email support@buildingfreedom.app and we'll respond within 30 days.
6. Children
BuildingFreedom is not directed at children under 13, and we do not knowingly collect information from them.
7. Changes to this policy
If we change this policy, we will post the new version here with a new effective date, and material changes will be announced in the app before they take effect. Because of the app's architecture, changes can only ever affect the limited data flows described above — we cannot retroactively access data we never had.