Highgate Ledger — Privacy Policy

1. Introduction

This Privacy Policy explains how Hrdlicka Apps LLC, an Iowa limited liability company ("Hrdlicka Apps," "we," "us," or "our"), handles information in connection with the Highgate Ledger iOS application, including its widgets and Live Activities (collectively, the "App").

We built Highgate Ledger to work entirely on-device. We do not operate a backend server for the App, and we designed it so that your financial information never has to pass through infrastructure we control. This policy describes exactly what stays on your device, what optionally syncs through your own iCloud account, and what — if anything — is visible to us.

2. Information We Collect

All of the information below is provided directly by you and stored locally on your device (and, optionally, in your personal iCloud account). None of it is transmitted to Hrdlicka Apps.

• Financial information you enter: transactions, amounts, payees, categories, notes, accounts, balances, budgets, goals, recurring rules, and debt details you create within the App.
• Imported transaction data: transactions contained in CSV, OFX/QFX, or QIF files that you choose to import from your device's file system.
• Attachments: photos or images you optionally attach to a transaction (for example, a receipt), accessed only when you choose to attach one via your device's photo picker.
• App settings: preferences such as appearance mode (light/dark), stored using Apple's on-device UserDefaults and an App Group shared with the widget/Live Activity extension so your widgets can reflect current data.
• Device security state: whether App Lock (Face ID/Touch ID/passcode) is enabled, and a local "privacy blur" flag used to hide sensitive numbers when the app is backgrounded — stored on-device only.

3. Information We Do Not Collect

We do not collect, and the App does not contain code to collect:

• Your name, email address, or other account-registration information — the App does not require creating an account with us;
• Online banking usernames, passwords, or credentials of any kind — the App never asks for these and has no bank-login integration;
• Analytics or usage-tracking data (there is no analytics SDK of any kind in the App);
• Advertising identifiers or data used for cross-app/cross-site tracking (there is no ad SDK in the App, and the App does not engage in tracking as defined by Apple's App Tracking Transparency framework);
• Crash or diagnostic data sent to us directly (any crash reports you choose to share go through Apple's standard, user-controlled App Analytics settings, not to Hrdlicka Apps);
• Location data;
• Contacts, calendar, or microphone data.

4. How Your Information Is Used

Because your data lives on your device (and your own iCloud account), it is used only to power the App's own features for you:

• Displaying your transactions, budgets, accounts, and net worth;
• Calculating projections, budget pacing, debt payoff timelines, and emergency-fund estimates;
• Powering home screen widgets and the optional Spending Pace Live Activity;
• Syncing your data between your own devices, if you enable iCloud sync;
• Sharing data with another person, only if and to the extent you deliberately enable household sharing (see Section 6).

We do not use your financial data for advertising, profiling, or any purpose beyond operating the App's features on your own device(s).

5. Where Your Data Is Stored

By default, your data is stored locally on your device in an on-device database. If you enable iCloud sync in Settings, the App uses Apple's CloudKit framework to also store your data in the private CloudKit database associated with your personal iCloud account, so it can sync across your own devices signed into that same Apple ID.

This private CloudKit database is controlled by you through your Apple ID and is subject to Apple's own privacy and security practices, not ours. Hrdlicka Apps has no technical access to your private CloudKit database and cannot view, retrieve, or reconstruct your data from it.

If you never enable iCloud sync, your data exists only on the device(s) where you entered it, and only within local device backups you create yourself (e.g., via Finder/iTunes encrypted backup or iCloud device backup, which are separate from the App-specific CloudKit sync described above).

6. Household Sharing

The App includes an optional feature that lets you share a household's financial data with another person using Apple's CloudKit sharing tools. This feature is off unless you turn it on. If you enable it:

• You choose who to invite and what is shared;
• The data travels directly between your device, Apple's CloudKit servers, and the invited participant's device — it does not pass through any server operated by Hrdlicka Apps;
• The participant's name shown in the App is provided by Apple's CloudKit sharing system on a best-effort basis;
• You can revoke a participant's access at any time from within the App, which stops future sync to that person's device (it cannot retroactively remove information they already viewed or stored locally on their own device).

7. Imported Bank Files

When you import a CSV, OFX/QFX, or QIF file, the App reads that file directly from your device's file system and parses it locally. The file and the transactions inside it are not uploaded to Hrdlicka Apps or to any third party as part of this process. If iCloud sync is enabled, the resulting transactions sync the same way any other transaction does, as described in Section 5.

8. Third-Party Services

The App relies on the following services, each governed by its own privacy policy:

We do not use any third-party analytics, advertising, or crash-reporting SDKs. No data is sold or shared with data brokers.

9. App Store "Privacy Nutrition Label" Summary

Consistent with the App's privacy manifest submitted to Apple, the data types below are the only categories collected by the App, and they are used solely for app functionality — never for tracking, and never linked to advertising:

"Linked to you" here refers to association with your on-device profile and your own iCloud account — not to any identity known to Hrdlicka Apps, since we have no server-side account system.

10. Security

The App supports optional App Lock using Face ID, Touch ID, or your device passcode, implemented via a dedicated on-device security module. Sensitive values can also be blurred automatically when the App is backgrounded. The App includes jailbreak-detection logic used to warn on compromised devices, since a jailbroken device weakens the OS-level protections your locally stored data relies on.

Because your data is stored using Apple's standard on-device and CloudKit storage mechanisms, it benefits from Apple's platform-level encryption (including encryption at rest and, for iCloud, Apple's account-level protections). No method of storage is 100% guaranteed secure, and we encourage you to keep your device's operating system up to date and to enable a strong device passcode.

11. Data Retention & Deletion

Your data is retained on your device for as long as you keep the App installed, and in your private iCloud database for as long as iCloud sync remains enabled. You can delete individual transactions, accounts, or attachments at any time within the App.

To delete all data:

• Delete the App from your device to remove all locally stored data;
• Turn off iCloud sync and/or delete the App's data from iCloud via your device's Settings > [Your Name] > iCloud > Manage Storage, to remove data from your private CloudKit database;
• If you accepted a household share, leaving the share from within the App stops further sync of that shared data to your device.

Because we do not hold your data on any server, we have no copy to delete on our end once you delete it from your device(s) and iCloud — there is nothing further for us to purge.

12. Your Privacy Rights

Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), the EU/UK General Data Protection Regulation (GDPR), or similar state and national privacy laws, including the right to know what personal information is collected, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information.

Hrdlicka Apps does not sell or share your personal information, and because the App stores your data on-device and in your own iCloud account rather than on our servers, most of these rights are already exercised directly by you through the App itself (viewing, editing, or deleting your data) or through your Apple ID/iCloud settings. If you have a request we can help with — for example, a question about what the App stores — you can reach us using the contact information in Section 16.

We do not knowingly sell or share personal information as those terms are defined under the CCPA, and we honor Global Privacy Control signals as a matter of policy, though as noted above we do not engage in tracking or selling of data in the first place.

13. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Because the App collects no information on any server operated by us, there is no server-side data about a child for us to hold in any event. If you believe a child has used the App in a way that concerns you, you can manage or delete that data directly within the App or by deleting the App.

14. International Users

The App is developed in the United States. If you use the App outside the United States, your data (when synced) is stored in Apple's iCloud infrastructure according to the region and account settings associated with your Apple ID, subject to Apple's own data-residency and transfer practices. We do not separately transfer your data internationally, since we do not operate servers that receive it.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App's features or in applicable law. If we make a material change, we will update the "Last updated" date above and, where appropriate, notify you within the App. Your continued use of the App after a material change takes effect constitutes acceptance of the revised policy.

16. Contact

Questions about this Privacy Policy or the App's data practices can be sent to:

Hrdlicka Apps LLC
Iowa, United States
Email: support@hrdlickaapps.com

Update the contact email above to your actual support address before publishing this document, and keep this policy in sync with the App's PrivacyInfo.xcprivacy manifest as features change.