Privacy Policy
The short version
- Your financial data stays on your device. Every expense, account, budget, goal, bill, and loan you enter is stored only in a local database on your phone, and is never sent to us or to any server we control.
- There is no account. We never ask for your name, email address, or any sign-up.
- The little the app does transmit is anonymous — subscription receipts, crash reports, and feature-usage counts that cannot identify you and never contain your financial entries.
1. Who we are
Para (“the app”, “we”) is a budgeting and expense-tracking app for iOS and Android, operated by an independent developer. For anything in this policy, contact us at paraapp.support@proton.me.
2. Data stored on your device
Everything you record in Para — expenses, income, accounts, budgets, savings goals, bills, subscriptions, loans, categories, and your preferences — is stored in a local database on your device. We never upload it, never sync it, and have no way to access it.
- Your device backup includes it. Like other app data on your phone, Para’s database is part of your own device backup — iCloud Backup on iPhone, Google One backup on Android — if you have backups switched on. That backup belongs to your Apple or Google account and is encrypted by them; we have no access to it, and switching it off is a setting on your phone, not in Para.
- Backups are yours to make. The optional Backup & Restore feature creates a file on your device and hands it to the system share sheet. Where it goes from there — your email, your cloud drive, a cable — is entirely your choice; the app itself uploads nothing.
- Deleting the app deletes your data. Because everything lives on the device, removing the app removes your records (except backup files you exported yourself, and any copy already inside a device backup you have made).
3. Services that process limited data
Para uses a small number of third-party services to run the subscription, keep the app stable, and understand how the app as a whole is used. None of them receive your financial entries. In each case the app identifies itself with a random, anonymous identifier that is not linked to your name, email, or any account — we don't have those to begin with.
Purchases — RevenueCat
Hosted in the United States · their privacy policy
When you start the free trial or subscribe, the purchase itself is handled by Apple’s App Store or Google Play. RevenueCat receives the store’s receipt and subscription status (product, purchase and expiry dates) under a random anonymous ID, so the app knows your subscription is active — including after you reinstall. It never sees your payment details; those stay with Apple or Google.
Crash reports — Sentry
Hosted in the European Union · their privacy policy
If the app crashes, a technical report is sent so we can fix the bug: the error, the code location it happened in, and device context such as OS version and device model. Alongside crashes it also reports basic stability and performance signals — when the app froze or was killed by the system, and how long it took to start. Personally identifying information is explicitly switched off, and none of these reports include your financial entries.
Product analytics — PostHog
Hosted in the European Union · their privacy policy
We record a short, fixed list of anonymous usage events — for example “onboarding step 5 viewed”, “a first budget was created”, “app opened” — with device context such as app version and OS version. This tells us where the app confuses people and which features matter. Location lookup from your IP address is switched off, so these events carry no country, city, or coordinates.
What these events can contain is deliberately restricted: no amounts, no account or goal names, no notes, no text you type — the app’s code only permits a fixed set of event names with yes/no and numeric values. Screen recording and session replay are disabled and not even installed.
App updates — Expo Updates
Content delivery network · their privacy policy
On launch, the app may check a content-delivery server for minor app updates (bug fixes delivered between store releases). Like any web request, this necessarily involves your IP address; no personal or app data is sent with it.
The stores — Apple App Store / Google Play
Apple’s privacy policy · Google’s privacy policy
Payment, billing details, and subscription management happen inside Apple’s or Google’s own systems under their policies. We never see your payment method.
4. What we never collect
- No name, email address, phone number, or contacts
- No location data
- No advertising identifiers — the app contains no ads and no ad SDKs
- No cross-app or cross-site tracking
- No sale or sharing of data for marketing — to anyone, ever
- And again, because it is the point of the app: none of your financial entries
5. Notifications
Reminders (upcoming bills, subscription due dates, a daily logging nudge) are optional and generated entirely on your device. Enabling them asks only the operating system’s permission; nothing about your reminders is sent to any server.
6. Data retention
Your records stay on your device until you delete them or the app. The anonymous service data above is retained by each provider under its own policy — typically 90 days for crash reports and analytics events; subscription records for as long as required to operate your subscription. Because these identifiers are anonymous, they cannot be traced back to you as a person.
7. Deleting your data
To delete the records you created in Para: Budget & Expense Tracker — expenses, income, accounts, budgets, savings goals, bills, subscriptions and loans — delete them inside the app, or uninstall the app. All of it lives in a database on your own device, so removing the app removes it. There is no copy on a server for us to delete on your behalf. Backup files you exported yourself, and any copy inside a device backup you made, are separate and yours to delete.
To request deletion of the anonymous service data described in section 3, email paraapp.support@proton.me with the subject “Data deletion request”. Include the approximate date you used the app and your device model, so the records can be located — we hold no name, email or account that would let us identify you otherwise. We will action the request with the providers concerned and reply once it is done.
What is deleted, and what is kept. Crash reports and analytics events are deleted, and are in any case retained only about 90 days by default. Subscription records held by Apple, Google and RevenueCat are kept for as long as is required to operate and account for your subscription, and afterwards for whatever period those companies and applicable tax law require — a purchase record is not ours alone to erase.
8. Your rights
If you are in the EU/EEA, UK, or a region with similar privacy laws, you have rights over personal data — access, correction, deletion, and objection among them. Para’s design answers most of these directly: your financial data is on your device, under your control, and we hold nothing that identifies you — which also means we are genuinely unable to look up “your” records among the anonymous data. For any question or request, contact paraapp.support@proton.me and we will do our best to help, including pointing you to the relevant provider’s own deletion process.
9. Children
Para is not directed at children under 13, and we do not knowingly collect personal data from anyone — children included.
10. Changes to this policy
If the app’s data practices change — for example, a new service is added — this policy will be updated at this same address with a new effective date. Meaningful changes will also be noted in the app’s store release notes.