Privacy Policy

Last updated: 23 April 2026

This Privacy Policy describes how portfx ("we", "us", or "the app") handles information when you use the portfx iOS application. portfx is a personal finance management app. Protecting your privacy is a core design principle: your financial data stays on your device.

1. Controller

portfx is operated from Groningen, the Netherlands. For any privacy-related question you can contact us at info@portfx.app.

2. What data we collect

We do not operate any user account system. We do not have servers that store your financial data. All accounts, balances, transactions, subscriptions, investments and settings you enter in portfx are stored locally on your device.

We do not collect analytics, telemetry, usage statistics, advertising identifiers, or crash reports. portfx contains no third-party tracking SDKs.

The following data is processed in the narrow ways described below.

2.1 Financial data you enter — stored on your device

Account balances, transactions, cashflow items, subscriptions, investments, goals and app preferences are stored locally in the app's sandbox on your iPhone or iPad. We have no access to this data.

2.2 Optional iCloud sync (CloudKit)

If you enable iCloud sync in Settings → iCloud, portfx stores an encrypted copy of your data in your personal iCloud account, using Apple's CloudKit service (container iCloud.app.portfx.portfx). The data is transmitted and stored inside your iCloud account — not ours. We have no access to it. Apple's privacy practices apply: see apple.com/legal/privacy.

You can turn iCloud sync off at any time in the app's settings.

2.3 Face ID / Biometric unlock

If you enable app lock, portfx uses the device's Face ID or Touch ID to unlock the app. Biometric data never leaves your device; we never see or receive it. This feature is handled entirely by iOS.

2.4 Notifications

If you grant permission, portfx schedules local notifications to remind you about upcoming payments. These notifications are generated on your device. We do not send push notifications from a server.

2.5 In-app purchases (subscriptions)

Subscriptions and one-time purchases are processed by Apple through StoreKit. Your payment details are handled by Apple and are never shared with us. We only receive a signed receipt that confirms whether your subscription is active. Apple's privacy policy applies to transactions; see apple.com/legal/privacy.

2.6 Network requests to third-party services

portfx makes the following outbound network requests. None of them include your name, email, financial amounts, account names, or any personal data.

The company name or domain you send is the label of a subscription you chose to add. No linkage to you as a person is transmitted — these services receive only a company query, over standard HTTPS.

2.7 Diagnostic data from the App Store

Apple may share anonymised App Store analytics and crash information with us through App Store Connect if you have consented in your iOS privacy settings. That data is aggregated by Apple; we cannot identify individual users from it.

3. Legal basis for processing (GDPR)

For users in the EEA, processing takes place on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR) — to provide the app and its subscription features when you purchase them.
• Your consent (Art. 6(1)(a) GDPR) — for optional features such as iCloud sync and notifications.
• Legitimate interests (Art. 6(1)(f) GDPR) — for minimal network requests required to display exchange rates and logos.

4. Retention

Data you enter stays on your device for as long as you keep the app installed. If you enable iCloud sync, the copy remains in your iCloud account until you delete it or turn sync off. Uninstalling the app removes the on-device copy. Exchange-rate and logo data is cached briefly and contains no personal data.

5. Sharing and export

portfx allows you to export your data to a .portfxbackup file via the iOS share sheet. Where that file goes is entirely up to you (Files, AirDrop, email, etc.). We never receive a copy.

We do not sell, rent, or otherwise share your personal data with third parties.

6. Your rights (GDPR)

If you are in the EEA, you have the rights of access, rectification, erasure, restriction, data portability, and objection under Articles 15–22 GDPR. Because portfx does not hold your financial data on our servers, most of these rights you can exercise directly inside the app (edit, delete, export). For any other request, contact us at info@portfx.app. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Children

portfx is not directed at children under 16. We do not knowingly collect data from children.

8. International transfers

The third-party endpoints listed in 2.6 may be hosted outside the EEA. Only non-personal data (exchange-rate queries, company-name queries, company domains) is transmitted to them. Apple's CloudKit storage follows Apple's own international transfer safeguards.

9. Security

Data on your device is protected by the iOS security model and, if you enable it, by Face ID / Touch ID unlock. iCloud data is encrypted in transit and at rest by Apple. Our Cloudflare Worker uses HTTPS only.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced in the app or on this page with a new "Last updated" date.

11. Contact

Questions? info@portfx.app