Privacy Policy

Last updated September 26, 2026

Fenn is built around one idea: your money is your business. This page explains, plainly, what stays on your phone, what we ever see, and why.

The short version

What never leaves your phone

Your money records, the receipt photos attached to them, your budget and your recurring reminders are stored in an encrypted, on-device database (SQLCipher). This data is not uploaded to us. If you record a voice note, it is transcribed on the device itself — the audio is never saved and never sent anywhere, by us or by Apple.

What is sent to make a capture work

When you photograph a receipt or dictate a note and ask Fenn to turn it into a record, the text read from that capture is sent to our server so a model can extract the amount, merchant and category. That text is processed and returned as a record; it is not retained afterwards. We log only the channel used, the platform and a token count — never the content of what you captured. Fifteen of these assisted captures are included free each month; typing a record yourself is always unlimited and never touches a server.

If you buy On Device, this step happens with Apple Intelligence right on your phone instead, and nothing about the capture is sent anywhere at all.

The anonymous id behind an assisted capture

The first time a capture is sent for help reading it, the app creates an anonymous identity for your phone — a random id, with no email address, no name and nothing else attached to it. It is what the monthly allowance is counted against and what records which plan you are on. We cannot tell whose phone it belongs to, and there is nothing to sign in to.

The name Fenn greets you by and the picture beside it, if you set them, are stored on your phone alone. Neither is ever sent anywhere, and a picture you pick is never uploaded — Fenn has no server to keep one on.

If you want the anonymous identity behind your captures removed, email us and we will delete it. Your ledger is on your phone and is untouched either way.

iCloud backup

Paid plans can keep an encrypted copy of your ledger in your own iCloud Drive. That backup lives in your iCloud account, not ours — we cannot open it, and it comes back automatically on any iPhone signed in to that same account.

Diagnostics and product analytics

Crashes are reported so we can fix them, through a filter that strips amounts, card numbers, IBANs, emails, tokens, your name and your device identifiers before anything is sent. Product analytics — which screens are used, not what's in them — is tied to a random identifier generated on install, with no name, email or profile attached, and no cross-app or cross-company tracking of any kind. It is on by default, and you can turn it off at any time in Settings → Privacy → Anonymous usage; turning it off deletes that identifier from your device. Payments are handled entirely by the App Store and our payments provider; we never see your card details.

What we don't do

Your choices

There is no account to create and none to close. Deleting the app deletes everything stored on your phone — your ledger, your receipts, your name and your picture. To have the anonymous identity behind your assisted captures deleted as well, reach us at contact@fennmoney.app and we'll take care of it.

Children

Fenn is not directed at children and we don't knowingly collect data from anyone under 13.

Changes to this policy

If how Fenn handles your data changes, this page will change with it, and the date above will move.

Contact

Questions about this policy or your data can go to contact@fennmoney.app.