Privacy Policy

Last updated September 26, 2026

Fenn is built around one idea: your money is your business. This page explains, plainly, what stays on your phone, what we ever see, and why.

The short version

• Your ledger — every record, receipt photo and note — lives in an encrypted database on your own iPhone.
• No account is required to use Fenn. Signing in is optional and only moves your ledger to a second device.
• A voice note or a receipt photo is read on your phone when possible; when a capture is sent for help reading it, only the resulting text is sent, and it is not stored afterwards.
• We don't sell data, run advertising, or share anything with a data broker.

What never leaves your phone

Your money records, the receipt photos attached to them, your budget and your recurring reminders are stored in an encrypted, on-device database (SQLCipher). This data is not uploaded to us. If you record a voice note, it is transcribed on the device itself — the audio is never saved and never sent anywhere, by us or by Apple.

What is sent to make a capture work

When you photograph a receipt or dictate a note and ask Fenn to turn it into a record, the text read from that capture is sent to our server so a model can extract the amount, merchant and category. That text is processed and returned as a record; it is not retained afterwards. We log only the channel used, the platform and a token count — never the content of what you captured. Fifteen of these assisted captures are included free each month; typing a record yourself is always unlimited and never touches a server.

If you buy On-Device Pro, this step happens with a model downloaded to your phone instead, and nothing about the capture is sent anywhere at all.

If you choose to sign in

An account is optional and exists only to move your ledger to a second device. If you sign in, we store your email address, your name and an anonymous user ID. Sign-in is an emailed code rather than a password, so we never hold one.

iCloud backup

Paid plans can keep an encrypted copy of your ledger in your own iCloud Drive. That backup lives in your iCloud account, not ours — we cannot open it, and it comes back automatically on any iPhone signed in to that same account.

Diagnostics and product analytics

Crashes are reported so we can fix them, through a filter that strips amounts, card numbers, IBANs, emails, tokens, your name and your device identifiers before anything is sent. Product analytics — which screens are used, not what's in them — is tied to a random identifier generated on install, with no name, email or profile attached, and no cross-app or cross-company tracking of any kind. Payments are handled entirely by the App Store and our payments provider; we never see your card details.

What we don't do

• We don't use advertising trackers, and Fenn has no advertising SDK.
• We don't sell or share your data with data brokers.
• We don't read the contents of your ledger for any purpose other than showing it back to you.

Your choices

You can use Fenn fully without ever creating an account. Deleting the app deletes everything stored on your phone. If you've signed in and want your account data deleted, write to us at eng.ahmedosman00@gmail.com and we'll take care of it.

Children

Fenn is not directed at children and we don't knowingly collect data from anyone under 13.

Changes to this policy

If how Fenn handles your data changes, this page will change with it, and the date above will move.

Contact

Questions about this policy or your data can go to eng.ahmedosman00@gmail.com.