Privacy policy

This policy covers the Wealth Compass apps for iPhone (iOS 17 and later) and Mac (macOS 14 and later) — listed on the App Store as Wealth Compass Tracker — and this website. The two apps are built from the same shared code and store data the same way, so everything below applies to both unless a sentence says otherwise.

The project repository also contains an earlier browser version of Wealth Compass that runs on Supabase. It is a separate application with its own storage, described on its own terms in section 07. Nothing in it can reach the data held by the iPhone and Mac apps.

Wealth Compass is written and published by Simone Mattioli, Verona, Italy. There is no company behind it and no other party with access to anything described here.

Everything you enter — transactions, recurring schedules, investments, cryptocurrency holdings, liabilities, categories, and net-worth snapshots — is written to a single JSON file inside the app's own container, at Application Support/Wealth Compass/wealth-compass-local-data.json. On iOS that file is written with complete-unless-open file protection, so it is encrypted at rest while the device is locked. None of it is transmitted to the developer, who runs no server that could receive it.

• —Preferences — display currency, privacy mode, in-app language, the iCloud toggle — are kept in UserDefaults. Both privacy manifests declare that use with reason code CA92.1: app functionality, readable only by this app.
• —Optional market-data API keys are stored in the Keychain under the service com.wealthcompass.mobile.marketdata. They are not marked synchronizable, so they never reach iCloud Keychain or the sync described in section 03.
• —There is no registration, no account, and no sign-in screen. The apps carry no analytics, advertising, or attribution SDK — in fact they have no third-party dependencies at all, only Apple's own frameworks.

iCloud sync is off until you turn it on in Settings. With it on, the apps use CloudKit to keep your own devices in step: six record types — transactions, recurring transactions, investments, crypto holdings, liabilities and net-worth snapshots — are written to the private database of the container iCloud.com.wealthcompasstracker, under your Apple Account.

That private database belongs to you. The developer has no access to it and receives no copy of it; Apple operates it under Apple's own privacy policy. Apple's push service is used to tell your other devices that something changed. Your API keys and the preferences in section 02 are never synced.

Turning the toggle off stops sync. The synced copy can be removed from your Apple Account's iCloud storage settings, on the device or at iCloud.com.

The apps contact four services, and only to carry out something you asked for. Each request goes from your device straight to the provider. There is no proxy or intermediary operated by the developer, so there is no point at which your keys, your IP address, or the symbols you look up pass through developer infrastructure.

• —Frankfurter — European Central Bank reference exchange rates. Keyless. Refreshed when the stored rates are more than twelve hours old.
• —Finnhub — stock and ETF quotes, only once you supply an API key. The key travels as an X-Finnhub-Token request header.
• —CoinGecko — cryptocurrency prices and coin lookup, only once you supply an API key, sent as an x-cg-demo-api-key header.
• —Yahoo Finance — keyless fallback for instruments Finnhub's free tier cannot price, such as European-listed ETFs, and for resolving a ticker or ISIN to a concrete listing.

A request carries only what the provider needs to answer it: a currency pair, a ticker symbol, an ISIN, or a coin identifier. It carries none of your amounts, balances, quantities or account names. A key is sent only to the provider that issued it. Providers see ordinary network metadata such as your IP address and handle it under their own privacy policies.

• —Face ID or Touch ID app lock. Authentication is performed by Apple's LocalAuthentication framework. The app receives a yes or a no; it never sees biometric data.
• —Reminders for recurring transactions are scheduled as local notifications. They are created on the device and pass through no server.
• —Export produces a PDF report or a JSON backup and hands the file to the share sheet. Where it goes next is your choice, and the file is then yours to manage.
• —Import reads a JSON backup or a broker statement you pick with the file picker — Trade Republic and Revolut CSV, Trade Republic PDF. Parsing happens on the device; the file is not uploaded anywhere.
• —Export Sync Diagnostics writes a support file containing counts, timings and error text only — no amounts and no records — which you then decide whether to send.

Wealth Compass does not sell personal information, does not show advertising, does not use the Advertising Identifier, and does not track you across apps or websites owned by other companies.

Both privacy manifests set NSPrivacyTracking to false and declare an empty NSPrivacyCollectedDataTypes list. That is what produces the Data Not Collected label on the App Store listing, and you can read the manifests yourself in the repository. The apps set no cookies. This website sets no cookies and loads nothing from a third party.

Before the Apple apps there was a browser version of Wealth Compass, and its code is still in the repository. It is source-available under the PolyForm Noncommercial 1.0.0 licence — which is not the same as open source, since it grants no commercial use — and it works differently from the App Store apps in ways that matter here.

Whoever deploys it supplies their own Supabase project, hosting and API keys, and that person or organisation is responsible for the data in it. In that application, and not in the iPhone and Mac apps:

• —Sign-in is by email and password against the operator's Supabase project. A deployment can restrict sign-in to one configured address.
• —Financial records live in that Supabase database rather than on your device, and interface preferences are held in browser localStorage.
• —A Finnhub API key entered there is written to the operator's profiles table — a database row, not a keychain.

A copy of the web application is served from this site under /sw, and it functions only against a Supabase project whose credentials were supplied when the site was built. No account created there is connected to the App Store apps: none of its data reaches them, and none of theirs reaches it. The developer does not operate a consumer account service for the iPhone or Mac apps.

The developer retains nothing from the iPhone and Mac apps, because nothing from them is transmitted to the developer in the first place. What you can do:

• —Edit or delete any individual record inside the app.
• —Use Delete All Data in Settings to erase the local database.
• —Turn off iCloud sync, and remove the app's iCloud data from your Apple Account's storage settings.
• —Delete the app, which removes its container and the local database with it.

Files you exported stay wherever you saved or sent them. Only you can remove those.

Wealth Compass is a general-purpose personal finance utility and is not directed to children. The apps ask for no personal information from anyone, and so do not knowingly collect any from children.

This policy is revised when the apps' behaviour or the applicable rules change. The dates at the top of this page identify the current revision, and the history of this file is public in the repository.

Wealth Compass is written and published by Simone Mattioli in Verona, Italy. For any question about this policy, or to ask what the apps do in a case it does not cover, write to mattioli.simone.10@gmail.com.

The source behind every claim on this page is public. The licence it is published under is PolyForm Noncommercial 1.0.0.