UntilfreePrivacy policy
In short
Untilfree has no account and no server of its own. The numbers you enter — age, income, spending, savings, amounts, names — stay on your phone. We (Srofia, the publisher) cannot see them.
A few outside services help run the app: anonymous crash reports (Sentry, which you can turn off), optional anonymous usage statistics (PostHog, in the EU, only if you turn them on), the one-time Plus purchase (RevenueCat, Apple, Google) and ads in the free version (Google AdMob). None of them receives your financial numbers. The details are below.
What stays on your phone
Your age, income, spending, savings, net worth, the entries and bills you add, your wishlist, your settings, the first name you may add in Profile (optional) and when you open the app (to time notifications). All of it is stored in the app’s local database on this device.
This data is used only to calculate and show your date and to plan notifications. It is never sent to us or to any service listed here, and it is never sold.
Notifications
Notifications are scheduled on your phone; no push server is involved. They never show a name you typed or an amount. You can turn them off in Settings or in your phone’s settings.
Share cards
A share card is an image made on your phone only when you tap Share. It contains exactly what the preview shows, and it goes only where you choose in your phone’s share menu. We do not receive a copy.
Plus purchase (RevenueCat)
Untilfree Plus is a one-time purchase, not a subscription. Payment is handled entirely by the App Store or Google Play; your card or bank details never reach us or RevenueCat.
To check whether Plus is unlocked and to restore it, the app uses RevenueCat (revenuecat.com). RevenueCat receives a random anonymous ID created by the app, the purchase and store receipt details (product, date, transaction ID, store country and currency) and basic device data (operating system, app version). It is not linked to your name or email and is used only to provide the purchase.
Usage data (PostHog, EU)
If “Share usage data” is on, the app sends anonymous usage events to PostHog, hosted in the EU (eu.posthog.com). An event is a feature name with a rough category — for example “an entry was logged: kept”, “the Plus screen was viewed”, “onboarding finished” — plus the app version, device model, operating system, language, whether Plus is active and a random ID stored in the app.
Never sent: your numbers, amounts, ages, dates, names or notes, your advertising ID, or your location. We ask PostHog not to derive location from your IP address and not to keep it. There is no sign-in, no personal profile and no screen recording.
Default: off, in every country. Nothing is sent until you say yes — the app asks once, in one line on Today, or you turn on Settings > Privacy > Share usage data. You can turn it off again at any time. Events are kept for up to 12 months and then deleted.
Crash reports (Sentry)
When the app crashes or hits an error, it sends a crash report to Sentry (sentry.io) so we can fix it: the error and where in the code it happened, the app version, device model and operating system, and whether the app session ended in a crash.
Reports carry no account or user ID (only a random installation ID made by the crash tool), no screenshots, no screen layout, nothing you typed and none of your numbers; identifying fields are removed on the phone before sending, and Sentry is set not to store your IP address. Crash reports are on by default because they help keep the app working; you can turn them off at any time in Settings > Privacy > Crash reports, and then nothing is sent. Reports are kept for up to 90 days.
Ads (Google AdMob)
The free version shows ads served by Google AdMob. To serve and measure ads, Google may collect your device’s advertising identifier, IP address, approximate location and ad interaction data, under Google’s own privacy policy (policies.google.com/privacy).
Where the law requires it (for example in the EEA and the UK), the app asks for your consent first through Google’s consent form (UMP); you can reopen it in Settings > Privacy options (ads). On iPhone, the app asks for permission to track (App Tracking Transparency); if you decline, ads are not personalised. You can change these choices at any time.
In What-if you can choose to watch a short rewarded ad to open more scenarios for the day; watching is always optional.
Your financial numbers are never shared with the ad network. With Plus, no ads are shown and the ad technology never starts: no consent form, no ad request and no request for your advertising ID.
Backups
If iCloud Backup (iPhone) or Google backup (Android) is on, your phone may include the app’s data in its own backup, under Apple’s or Google’s terms.
“Back up now” creates a copy file and opens your phone’s share menu; the copy goes only where you choose to save it (for example your own iCloud Drive or Google Drive). Keep it somewhere safe: anyone with the file can read your numbers.
Deleting your data
Settings > Delete all data erases everything from this phone at once and resets the anonymous usage ID, so later events cannot be connected to earlier ones. Uninstalling the app also erases the data on the phone. Copies you saved yourself and your phone’s own backups are removed where you keep them.
Anonymous usage events and crash reports already sent cannot be connected to you, so we cannot find them to delete them early; they expire as described above. Your Plus purchase stays with your store account and can be restored.
Service providers
Google (AdMob, ads; consent form) — USA/worldwide · RevenueCat (purchase status) — USA · PostHog (usage data, only if on) — EU · Sentry (crash reports) — EU region where available, otherwise USA · Apple and Google (app stores, payments, notifications on the phone, backups). Each processes data under its own terms and security measures.
Transfers outside your country (including to the USA) rely on the providers’ standard contractual clauses or other safeguards recognised by law.
Legal bases (GDPR)
Plus purchase: performance of a contract (Art. 6(1)(b)). Crash reports: our legitimate interest in a working, secure app (Art. 6(1)(f)); you can object at any time by turning them off in Settings. Usage data, everywhere, and personalised ads where required: your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings without affecting earlier processing.
Your rights
Your financial data stays on your device, so you can see, change, export and delete it yourself at any time in the app.
Under GDPR you also have the right to access, correct, delete, restrict or port data, to object to processing based on legitimate interest and to complain to your data protection authority. Write to us for anything we can help with; we answer within 30 days.
Turkey (KVKK)
Data controller: Gönül Tıkıl, trading as Srofia (the publisher of Untilfree). Contact: support@srofia.com.
Purposes: providing the Plus purchase, finding and fixing errors, understanding which features are used (only if you allow it) and showing ads in the free version. Legal grounds (KVKK Art. 5): performance of a contract (5/2-c), legitimate interest (5/2-f) and, for usage data and personalised ads, your explicit consent (5/1).
Collection: automatically, electronically, through the services named above inside the app. Transfer abroad (Art. 9): to the providers listed above in the EU and the USA, relying on standard contractual clauses or, where these do not apply, your explicit consent.
Under KVKK Art. 11 you may ask whether your data is processed, request information, learn the purpose and recipients, request correction or deletion and notification of this to recipients, object to a result against you arising solely from automated analysis, and claim damages for unlawful processing. Apply by email; we answer within 30 days at the latest.
Children
Untilfree is not directed at children under 13 and does not knowingly collect their data.
Changes and contact
If this policy changes, the date above changes and the new version is shown in the app and on srofia.com.
Publisher: Srofia · support@srofia.com