In short
- Your finances are kept in a file on your Mac, encrypted with your password.
- IPFA sends Apheresa nothing. It has no analytics, no ads and no tracking.
- If you allow it, IPFA asks a few rate and price services for exchange rates and prices. They get currency codes, tickers and dates, never your amounts or accounts.
- Bank downloads happen only when you ask for one, and go straight to your bank.
- If you email support, we use your email only to answer you, and delete it within a month.
Who is responsible
Apheresa Ltd is the controller of the personal data that reaches us, described under What Apheresa receives. It is registered in England and Wales, company number 17378598, with its registered office at Blackpool FY1 1RW, United Kingdom. Write to us at info@apheresa.org.
What IPFA keeps on your Mac, and sends from it, stays in your hands: Apheresa cannot see it.
What IPFA keeps on your Mac
| What | Where | Protected by |
|---|---|---|
Your finances (the .fmgr file) |
Where you save it | Encryption with your password. A password is always required. |
| Backups of that file | The file's folder, or a folder you choose | The same encryption. If that folder syncs to a cloud service, that service holds the encrypted copies. |
| Exports (CSV, OFX, QIF and others) | Where you save them | Nothing. They are plain files. |
| Settings, the list of recent files, the folders you let IPFA use, window layout | IPFA's own folder: ~/Library/ |
macOS permissions. Not encrypted. These hold file and folder names, not your finances. |
| A log of what the app did | IPFA's own folder; up to 5 MB, plus one older file | macOS permissions. It can name folders, files, tickers and a bank's error message. It never holds passwords, keys or amounts. |
API keys you add for a price service are saved inside your encrypted file.
What leaves your Mac
Exchange rates and prices
IPFA asks the first time it needs a rate or a price. Nothing is sent before you choose Allow. You can turn it off at any time: Settings → API keys → Online rates and prices → Off.
When it is on, your Mac contacts these services directly:
| Service | Used for | What it receives |
|---|---|---|
| European Central Bank | Euro exchange rates | Only your internet address |
| Frankfurter | Rates for other currencies | Currency codes and dates |
| Coinbase | Crypto prices and some rates | Currency codes and dates |
| ExchangeRate-API (with your key) | Rates for other currencies | Your key and a currency code |
| Finnhub (with your key) | US stock prices and sectors | Your key and tickers |
| EODHD (with your key) | Stock, fund and crypto prices | Your key, tickers and dates |
| financialdata.net (with your key) | Prices and index values | Your key, tickers and dates |
Every service also sees your internet address, as any website does. A date can be the date of one of your transactions, when IPFA needs that day's rate or price. A service you added a key for can link the tickers IPFA asks about to your account with it. No service ever receives your transactions, amounts, balances, quantities, account names or your file.
Bank downloads
Only when you start a download, IPFA connects to your bank's server, at the address saved in that bank connection. It sends what your bank needs to answer: your login, the password or PIN you type for that session, any security code or answer your bank asks for, your account details, the dates you asked for, and an identifier for this connection. IPFA never saves your bank password or PIN. Your bank's own privacy policy applies to what it receives.
Links you open
The Website, Privacy policy and Support links open ipfa.app in your browser. Like any website, it sees your visit.
What Apheresa receives
IPFA itself sends Apheresa nothing. There are two other ways information can reach us:
- If you email support, we get your email address, what you write and anything you attach. We use it only to answer you: never for marketing, and we never add you to a mailing list. We delete it once your request has been dealt with. Our hosting provider holds our email for us in the United Kingdom.
- If you turned on sharing with app developers in macOS, Apple may share crash reports and App Store usage figures with us. We read them only in Apple's App Store Connect, to find and fix faults, and never download them. Apple's privacy policy covers what they contain.
Third parties
IPFA shares none of your data with any third party. It contains no analytics, advertising or tracking code, and no other company's code that collects data. The services above receive only what each request needs, straight from your Mac. Apheresa has no agreement with them. Each handles its requests under its own privacy policy, published on its website: ecb.europa.eu, frankfurter.dev, coinbase.com, exchangerate-api.com, finnhub.io, eodhd.com and financialdata.net.
Legal basis
We handle support emails, and read Apple's crash reports, on the basis of our legitimate interests (Article 6(1)(f) of the UK GDPR, and of the EU GDPR for people in the European Union): answering your requests, and finding and fixing faults in IPFA.
You never have to give us personal data: IPFA works without it, and without an email address we simply cannot reply. No decision about you is made by automated means.
Keeping and deleting your data
Everything IPFA keeps is on your Mac, so you decide how long it stays.
- To delete your finances, delete your
.fmgrfile, its backups and any exports. - To remove settings, recent files and logs, delete
~/Library/. Deleting the app alone does not remove this folder.Containers/ org .apheresa .ipfa - To stop all rate and price requests, turn Online rates and prices off in Settings → API keys.
- To remove an API key, use Clear in Settings → API keys. Older backups keep the key until they are replaced, so also cancel or renew the key with its service.
A service may keep its own records of requests, such as your internet address. Ask that service about them.
Support emails are deleted once your request has been dealt with, one month after they arrive at the latest. You have your own copy of what you sent. Until we delete them, you can ask us for a copy of what we hold. Ask from the same email address, so we know the request is yours.
Crash reports and usage figures stay in App Store Connect, and Apple decides how long they are kept.
Your rights
Wherever you live, you can ask us what personal data we hold about you and for a copy of it, and ask us to correct it, delete it, restrict or object to its use, or send it to you in a form you can reuse. Write to info@apheresa.org from the email address the request is about, so we know it is yours; we need nothing else to confirm who you are. We reply within one month. Using these rights never changes how we treat you.
Most of what IPFA handles never reaches us. It is on your Mac, where you can see, change and delete it yourself.
If you are unhappy with how we handle your data, tell us first at info@apheresa.org. You can also complain to the Information Commissioner's Office (ico.org.uk), the UK data protection authority, or to the data protection authority where you live.
California
In the past 12 months, Apheresa has collected these categories of personal information, as the California Consumer Privacy Act names them: identifiers (your email address) and whatever else you include in a message, from you, to answer your requests; and internet or other electronic network activity information (crash reports and app usage figures), from Apple if you opted in, to fix faults. We keep each as described under Keeping and deleting your data. We have disclosed them for a business purpose only to our hosting provider, which holds our email for us. We do not sell or share anyone's personal information, including that of people under 16, and we collect no sensitive personal information: your bank login goes from your Mac straight to your bank.
You have the right to know what we collect and how we use it, and to have it deleted or corrected; ask as described above. There is no sale or sharing to opt out of. An authorized agent may ask on your behalf with your signed permission; we may ask you to confirm the request from your own email address.
No one, including other companies, follows your activity across websites or over time through IPFA or ipfa.app. Do Not Track and Global Privacy Control signals therefore have nothing to switch off.
Australia
Under the Australian Privacy Principles: the personal information we collect, how we collect and hold it, and why, are described above, and you can access and correct it as described under Your rights. To complain about how we have handled it, write to info@apheresa.org; we will look into it and reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). We hold personal information in the United Kingdom, where Apheresa and its hosting provider are based, and disclose it to no one in another country.
Children
IPFA is not aimed at children and collects nothing from anyone.
Changes to this policy
If this policy changes, the new version will be published here with a new date.