Privacy policy

What we collect

Nothing. OpenStatement has no server and no account, and it contains no third-party code for analytics, advertising, crash reporting or tracking. We never receive your accounts, balances, transactions, categories, settings or anything else you do in the app. On the App Store, OpenStatement's privacy label reads “Data Not Collected”.

What stays on your iPhone

We can't see any of it. Settings › What we store in the app shows the same table.

Network requests

OpenStatement contacts only the SimpleFIN Bridge server named in the setup token you paste, and only if you choose to connect SimpleFIN:

1. Once, when you connect: it exchanges your one-time setup token for read-only access.
2. When it syncs (when you open the app after a few hours, when you tap Sync or pull down, and in the background when iOS allows): it asks for your accounts and transactions for a date range.

These requests carry your SimpleFIN credential, the date range and a generic app name (OpenStatement/1.0 (iOS)). Like any internet request, they also show your IP address to SimpleFIN. They carry nothing else from your iPhone, and the app keeps no cookies or web cache for them. If you only import statements, OpenStatement makes no network requests at all.

You can check this yourself: Settings › Network log lists every request the app has made, and iOS's App Privacy Report (Settings › Privacy & Security) shows which domains each app contacts.

Buttons such as Fix at SimpleFIN and Manage or cancel SimpleFIN open SimpleFIN's website in Safari, outside the app. What you do there is between you and SimpleFIN.

SimpleFIN and your bank data

SimpleFIN Bridge is an independent service that you sign up for and pay directly. You link your banks at SimpleFIN, so OpenStatement never sees or stores a bank password. SimpleFIN and its bank-connection partner handle your bank data to provide their service, under SimpleFIN's own privacy policy and terms. We don't receive that data, we aren't paid by SimpleFIN, and we have no access to your SimpleFIN account.

You can stop OpenStatement's access at any time by disabling its access token in your SimpleFIN Bridge account, even if you no longer have the app. Billing and cancelling your SimpleFIN subscription also happen there. The support page has the steps.

Files you import

CSV, OFX/QFX and PDF statement files you pick in Files are read on your iPhone. The file is never uploaded anywhere.

Apple Intelligence (optional)

Sort with Apple Intelligence is off until you use it. When you tap Sort in Settings › Sort with Apple Intelligence, OpenStatement asks Apple's on-device language model to suggest a category for merchants nothing else recognises. The model reads each merchant's name, the bank's description and its usual amount.

• It runs entirely on your iPhone. OpenStatement uses only the on-device model, never Apple's Private Cloud Compute or any other AI service, so your transactions aren't sent to Apple, to us or to anyone else.
• You review every suggestion. Nothing changes until you tap Apply, and a category you set yourself always wins.
• It's available only on iPhones that support Apple Intelligence, with it turned on.

Face ID and notifications

Face ID. With Lock with Face ID on (the default), iOS checks your Face ID or passcode when the app opens. OpenStatement learns only whether the check succeeded; it never receives your face data or passcode. While you're in another app, the app switcher shows a plain cover instead of your figures.

Notifications. Reminders (renewals, price changes, a month's snapshot, sync problems) are scheduled on your iPhone by the app itself. No push server is involved. You can turn off amounts in notifications, or any type of notification, in Settings.

Backups and export

• Never in iCloud Backup. OpenStatement's storage folder (the database, holdings and accepted categories) is always excluded from iCloud Backup and from backups to a computer. There's no setting to include it.
• No export. The App Store version of OpenStatement has no export, no backup file and no way to share your statements. It keeps your data in one place, on your iPhone.
• A new iPhone starts empty. Your SimpleFIN access is kept on this device only, so on a new iPhone you create a new setup token at SimpleFIN and connect again, or import your statements.

Third parties

OpenStatement contains no third-party software development kits and shares nothing with anyone. We don't sell or share personal information, and we don't use any for advertising. Merchant icons are monograms drawn on your iPhone, so merchant names are never sent anywhere to fetch logos.

Apple's role

• Downloads and reviews. Apple runs the App Store and handles your download and any rating or review you leave, under Apple's own privacy policy.
• Crash reports and statistics. If you've chosen to share analytics with app developers (Settings › Privacy & Security › Analytics & Improvements), Apple may give us crash reports and aggregated figures that don't identify you and don't contain your accounts or transactions. You can turn this off at any time.

Keeping and deleting your data

Your data stays on your iPhone until you delete it.

• Settings › Erase Everything asks for Face ID, then deletes the database and the files beside it, the SimpleFIN access in the Keychain, scheduled notifications and settings. It can't be undone.
• Settings › Disconnect removes the SimpleFIN access from your iPhone and stops syncing. Your statements stay until you erase them.
• Deleting the app removes its database and settings. iOS can keep Keychain items after an app is deleted; OpenStatement removes any leftover SimpleFIN access the next time it's installed. To remove it straight away, use Erase Everything before deleting the app.
• At SimpleFIN, disable OpenStatement's access token to stop all access at the source.

Children

OpenStatement isn't directed at children, and it collects no data from anyone. If you believe a child has emailed us, tell us and we'll delete the message.

Your choices and rights

Privacy laws such as the GDPR and the CCPA give you rights over personal data that a company holds about you. Through OpenStatement we hold none, so there's nothing for us to access, correct, export or delete; everything is in your hands on your iPhone. You're welcome to ask us about it, and we'll delete any email correspondence on request.

This website

This site uses no cookies, analytics, trackers, web fonts or third-party scripts. It's hosted on Cloudflare Pages, and Cloudflare may log technical information such as IP addresses to deliver and secure the site, as described in Cloudflare's privacy policy.

If you email us

Send feedback in the app opens your own email app; nothing is attached automatically. If you write to us, we receive your email address and whatever you include. We use it only to reply, and we don't add you to any list. Please don't send account numbers, statements or screenshots with figures showing; Discreet mode hides figures if you need a screenshot.

Changes

If OpenStatement ever changes how it handles data, for example by adding a sync service or an in-app purchase, we'll update this page and its date before that version is released, say so in the release notes, and update the App Store privacy label.

Contact