Privacy Policy

Effective date: 5 November 2026

Publisher (data controller): Addeo Labs Ltd, a company registered in England and Wales with company number 17551523, whose registered office is at Office 22034, 182-184 High Street North, East Ham, London E6 2JA.

Contact: info@addeolabs.com

The short version

• Your financial data never leaves your device. Balances, accounts, assets, transactions, goals, projections and history are stored only on your phone, encrypted. We cannot see them, and we have no copy.
• There is no account, no sign-up, no advertising, no analytics and no tracking. We do not sell or share data.
• The app connects to the internet only for a few clearly defined things, listed below.

1. Data stored only on your device

Everything you enter into Addeo.fi stays on your device, encrypted with AES-256 and integrity-protected. This includes:

• assets, accounts, liabilities and transactions;
• income and expenses, and goals;
• settings, history and your PIN.

The encryption key is kept in your device's secure keychain/keystore and is set so it is not included in device backups and cannot be moved to another device. The encrypted data itself is also excluded from device backups (iCloud and computer backups on iPhone, Google backups on Android), so it never leaves your phone that way. To move to a new phone, create an encrypted .addeo backup and restore it there.

• We never receive this data. It is not sent to us or to any third party.
• Backups are under your control. If you create an encrypted .addeo backup or a CSV export, you choose where that file goes. .addeo backups are protected by a password only you know.
• Deleting your data: use Settings → Reset App Data. This permanently erases everything on the device. Uninstalling the app also removes it.
• Face ID / Touch ID / fingerprint: these are handled entirely by your device's operating system. Addeo.fi never receives your biometric data.

2. When the app connects to the internet

Like any internet request, these connections reveal your device's IP address to the service you are connecting to. We do not use IP addresses to identify or locate you.

• Our server functions: they do not store ticker symbols, feedback content or purchase proofs in their logs.
• Third parties: each provider processes data under its own privacy policy: Finnhub, CoinGecko, ExchangeRate-API, Supabase, Mailgun, Apple and Google.

3. What we do NOT do

• No user accounts, email sign-up or social login.
• No advertising, no ad identifiers (IDFA/AAID), no tracking across apps or websites.
• No analytics or crash-reporting SDKs. If you chose in your phone's settings to share diagnostics with app developers, Apple or Google may pass us crash reports about Addeo.fi. These contain technical details of the crash (such as device model, system version and where in the app it happened); we use them only to fix bugs.
• No sale or sharing of personal data.
• No remote push notifications. Reminders are scheduled locally on your device.

4. Why we process data (legal bases under the UK GDPR and EU GDPR)

• Performance of a contract / providing the service you ask for: price lookups, exchange rates, purchases, promo-code redemption, answering your feedback.
• Legitimate interests: keeping our servers secure and preventing abuse, e.g. rate-limiting promo-code attempts and confirming that a Pro purchase is genuine.

5. How long data is kept

• On your device: until you reset the app or uninstall it.
• Feedback emails: kept for 24 months to support you, then deleted.
• Promo-code redemptions: kept while the promotion is valid and for 12 months afterwards, to prevent repeat use.
• Promo-code attempt records (used only to rate-limit guessing): records older than one day are deleted the next time the same anonymous ID redeems a code, and all records are deleted after at most 30 days. Our hosting provider keeps routine request logs for a short period under its own policy.
• Purchase records: kept by Apple/Google as required for billing and tax. Our server function checks purchase proofs and keeps no copy; the app keeps the result on your device.

6. International transfers

We are based in the UK. Our server functions run on Supabase in the EU (Paris), which UK law recognises as providing adequate protection. Some providers (Finnhub, and possibly Mailgun and CoinGecko) process data outside the UK and the European Economic Area, mainly in the USA. Where this happens, transfers rely on appropriate safeguards such as the UK–US Data Bridge, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

7. Your rights

If you are in the UK, the EEA or a similar jurisdiction, you have the right to:

• access your personal data;
• correct it;
• delete it;
• restrict or object to processing;
• data portability;
• complain to a data protection authority. In the UK, that is the Information Commissioner's Office: ico.org.uk. In the EU, you can complain to the authority in the country where you live.

Because the app is local-only, almost all of your data is on your device and fully under your control. To exercise rights over the limited data described in section 2 (feedback emails, promo redemptions), email info@addeolabs.com. The promo ID is anonymous, so include the promo code you redeemed so that we can find the record.

8. Children

Addeo.fi is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We will update this policy when the app's data practices change and show the new effective date above. Significant changes will be highlighted in the app or on the store listing.

10. Contact

Addeo Labs Ltd, Office 22034, 182-184 High Street North, East Ham, London E6 2JA, info@addeolabs.com