Privacy policy

Last updated: 28 October 2026

Glasstally is a spending tracker for iPhone. It is built to work without an account: your transactions, categories and budgets stay on your device unless you choose to turn on sync. This policy explains what data the app handles, where it goes and what you can do about it.

Glasstally is developed by Eduard Teodor Lainer ("we", "us"), the data controller for the data described here.

1. Data that stays on your device

• Everything you enter: transactions, amounts, notes, categories, budgets, recurring entries and settings such as your name, currency and pay period.
• This data is stored in the app's local database and in the app group shared with the Glasstally widgets. We cannot see it.
• Face ID or Touch ID is handled entirely by iOS. The app only learns whether unlocking succeeded.
• Exports (CSV, PDF, JSON backup) are created on your device and go only where you send them with the share sheet.

2. Sign in with Apple (optional)

You need an account only for sync, shared books and receipt scanning. Signing in uses Sign in with Apple. We receive and store Apple's stable user identifier for this app, plus the dates your account was created and last signed in. We do not ask Apple for your name or email address, and we do not store them.

3. Sync and shared books (optional)

• When you turn on sync, your transactions, categories, budgets, recurring entries and shared settings (currency, period and budget) are uploaded to our server so they can reach your other devices. Your name stays on your device.
• Our server runs on Cloudflare (Workers and D1 database). Data is encrypted in transit (HTTPS) and at rest by Cloudflare.
• If you invite someone to a shared book, every member can see and edit all of that book's data. Invite codes expire after 7 days.

4. Receipt scanning (Premium)

• When you scan a receipt, the photo (resized on your device) and your list of category names are sent through our server to Anthropic, whose Claude model reads the receipt and suggests categories for each item.
• We do not store receipt photos. Anthropic processes them to return the result and, under its commercial terms, does not use them to train its models. The extracted items are sent back to your device and saved only if you choose to save them.
• We keep a count of the scans you used (free scans and this month's scans) to apply the free trial and the fair-use limit.

5. Purchases

Premium is sold through the App Store. Apple handles payment; we never see your payment details. We use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous app user ID (our internal account ID once you sign in), your purchase history for Glasstally and basic device information.

6. Analytics

We use Amplitude (EU data center) to understand how the app is used, for example which screens are opened, whether onboarding is finished and whether scans succeed. Events never contain your amounts, notes, category names or name. Amplitude receives a random device identifier, our internal account ID if you are signed in, the device model, iOS version, app version, language and an approximate country derived from your IP address. This data is not used for advertising and is not shared with data brokers.

7. Server logs and abuse prevention

Our server counts requests per IP address (for sign-in) or per account to prevent abuse. These counters are short-lived and not stored with your data. Error logs contain technical details such as the request path and error code, never your financial data.

8. What we do not do

• No ads, no tracking across other companies' apps or websites.
• No bank connections; the app never reads your bank accounts.
• We do not sell or rent your data.

9. Legal bases (GDPR)

• Sync, shared books, scanning and purchases: performance of our contract with you.
• Analytics and abuse prevention: our legitimate interest in a reliable, improving app.

10. Retention and deletion

• Local data stays until you delete it or remove the app.
• You can delete your account in the app under Settings > Account > Delete account. This removes your account, your synced data (unless other members still use a shared book) and revokes Sign in with Apple. To stop free scans from being reset by deleting and re-creating an account, we keep a one-way hash of your Apple identifier with the number of free scans used.
• Analytics data is kept only while it helps improve the app; you can ask us to delete it.

11. Your rights

You can ask for access to, correction of, deletion of or a copy of your data, object to processing, or restrict it. Write to us with the form below. You can also complain to your data protection authority; in Romania that is ANSPDCP (dataprotection.ro).

12. Children

Glasstally is not directed at children under 13, and we do not knowingly collect their data.

13. Changes

If this policy changes, we update the date above and, for significant changes, tell you before they apply.

14. Contact

Questions, support or privacy requests: