Privacy Policy

This is a translation provided for your convenience. If there is any difference between the two, the Italian version prevails.

Who the data controller is

Zenith Flow is developed and published by Alessio Trocchia, an independent developer based in Italy. For any question about privacy you can write to info@zenith-flow.app.

The data you enter in the app

Accounts, cards, transactions, fixed expenses, budgets, money boxes, goals, categories, tags and your profile photo, if you add one, are stored on your device. For each card the app keeps only the last 4 digits.

If you turn on sync, the same data is also stored in the private database of your iCloud account, an Apple service, to keep it up to date across your devices. That database belongs to your Apple Account. I cannot read it, and Apple handles it under its own privacy policy.

None of this data is sent to me or to servers run by me.

What the app doesn't do

• It doesn't require registration or an account.
• It doesn't connect to your bank and doesn't ask for bank credentials.
• It contains no advertising, analytics tools or third-party components.
• It doesn't track you across apps and websites owned by other companies.
• It doesn't access your location, contacts, microphone or camera.

Accordingly, the privacy section of the App Store listing says “Data Not Collected”.

The calendar of offers

To know whether Zenith Flow Plus is on sale, the app downloads from this website a small public file with the dates of the campaigns (zenith-flow.app/promozioni.json). It does so when you open the app and when you open the Plus page; on iPhone and iPad, if you have asked for the alerts, it may also do so in the background. With Zenith Flow Plus active, it no longer contacts the website.

It is a read-only request: it contains none of your data, no identifiers and no information about how you use the app. As with any visit to a website, the hosting provider records the IP address, the device language and the date of the request in its technical logs; I don't use those logs to identify anyone.

“Notify me about offers” is off until you turn it on. The notification is created on your device: nobody sends it to you from a server.

The permissions the app may ask for

• Notifications: for reminders about fixed expenses, card charges and card expiry and, if you ask for it, for the offers alert. They are created on the device.
• Face ID or Touch ID: to unlock the app, if you turn on protection. The system does the recognition. The app receives only the result, never the biometric data.
• Photos: only the image you choose as your profile photo.
• iCloud: only if you choose sync or backups on iCloud.

Every permission is optional and can be revoked in the Settings app (System Settings on Mac).

Purchases

Zenith Flow Plus is purchased through the App Store, and the purchase is handled by Apple. I receive neither your payment details nor your identity. Apple gives me only aggregate sales reports.

Diagnostics shared by Apple

If you have chosen in your device settings to share analytics data with developers, Apple may make available to me aggregate, anonymous statistics about app usage and crashes. They cannot be used to identify you, and you can turn them off at any time.

Backups and the files you export

Automatic backups stay in your iCloud Drive or on the device. Those on iCloud are encrypted with a key kept in your iCloud Keychain; those on the device are protected by the system and, when the Keychain is available, encrypted in the same way.

The files you export, that is, the full backup and the PDF reports, are created only when you ask for them and saved where you decide. The exported backup can be protected with a password: without one, anyone who opens the file can read it, so keeping it safe is your responsibility.

When you write to me

If you contact me for support, I process your email address and the content of your message for the sole purpose of replying to you. The legal basis is taking steps at your request and my legitimate interest in providing support (Art. 6(1)(b) and (f) GDPR). I keep the correspondence for up to 24 months from the last message, then I delete it. Email is handled by the provider of the domain's email service.

If you write to me from the app with “Contact the developer”, the email already contains the Zenith Flow version, the device model and the system version: you see them before sending it.

This website

The zenith-flow.app website is made of static pages. It doesn't use cookies, has no analytics tools, doesn't load fonts or content from third parties and contains no forms. To show the current price it reads the same public calendar of offers that the app reads.

Like every website, it is hosted by a hosting provider that records the IP address, the date and the page requested in its technical logs, for the security and operation of the service. I don't use those logs to identify visitors.

If you close the notice that suggests another language, your choice is remembered in your browser and is not sent to anyone.

Your rights

The GDPR gives you the right to access your data, correct it, erase it, restrict or object to its processing, and receive it in a portable format. For the data you have sent me by email, you can exercise these rights by writing to info@zenith-flow.app.

The data you enter in the app is under your control alone. You can edit, export and delete it directly in the app and in iCloud settings.

You also have the right to lodge a complaint with a supervisory authority. In Italy that is the Garante per la protezione dei dati personali. You can also contact the data protection authority of the country where you live.

Minors

The app collects no data from anyone, and so none from minors. If you are a parent and believe a minor has written to me, contact me and I will delete the message.

Changes to this policy

If the app or the website changes in ways that affect your data, I will update this page and the date at the top before the change takes effect.