Countey

Privacy Policy

Countey is a personal finance app that works with no account and no sign-up. This document explains, plainly, what stays on your phone, what leaves it, and why.

Last updated: 19 October 2026 · Effective from: 19 October 2026

01 Who is responsible

Data controller: César Alonso Sáez.

For any privacy matter, or to exercise your rights, write to support@countey.app.

02 What stays on your phone, and what doesn't

This is the important part, so it comes first. Countey has no servers holding your books: your transactions, accounts and balances live only on your device.

Never leaves your phone

  • Your saved transactions: amounts, dates and notes
  • Your accounts and their balances
  • Your categories and budgets
  • Your recurring payments
  • Your app settings

Leaves only when you ask

  • The photo you choose to capture
  • The audio you choose to dictate
  • The text you choose to type for the AI to read
  • The names of your categories and accounts, so the AI files the transaction in the right one
  • The merchants you’ve already put in a category (up to 40 merchant → category pairs, with no amounts or dates), so the AI files them the same way
  • With the automations you turn on (Apple Pay, bank notifications): the merchant and amount of a payment whose category the iPhone doesn’t recognise, or the text of a bank notification the iPhone can’t read
Your money data is never sent on its own. It leaves only if you’ve allowed Google’s AI, and only when you tap to capture an expense with the AI or when an automation you turned on logs a payment the iPhone can’t fully understand. If you enter a transaction by hand, nothing leaves at that moment; its merchant and category may go along with your next AI capture. Separately, the app checks your subscription with Apple and RevenueCat and sends the anonymous counts described in section 05.

03 What happens to what you send

When you capture an expense with the AI (or one of your automations needs it), the content travels encrypted to our own intermediate server and from there to Google's artificial intelligence service (Gemini), which reads it and returns the transaction details.

Your permission
The first time something is about to go to the AI, Countey asks whether it may send it. Without your permission nothing is sent to the AI: you log with what the iPhone reads on its own and by hand, and automations send nothing either. You can change it at any time in Settings → Privacy.
Purpose
Solely to extract the amount, date, merchant and category from what you captured or, in “Ask Countey”, to understand your question (the answer is worked out on your iPhone).
Retention
None. Neither the intermediate server nor Countey stores your captures: they are processed and discarded.
Why an intermediate
So the AI service access key never ships inside the app, where it could be extracted.
Google
Acts as a data processor under its API terms. The content is not used to train its models.

04 What the intermediate server stores

To stop anyone from using the service by impersonating the app, each installation identifies itself through Apple's App Attest. That means storing:

  • A random identifier generated by your device, which reveals nothing about who you are and cannot be used to locate you.
  • A public key tied to that identifier, to verify requests genuinely come from the app.
  • The date it was registered.
  • A usage counter, to cap how many captures each device may make and curb abuse.

None of this is linked to your name, your email or any personal data. The key on your iPhone stops working when you uninstall the app (if you reinstall it, the app creates a new one). On the server, all of this stays with no expiry date, with nothing that identifies you. If App Attest doesn’t work on your iPhone, the server can check it with Apple’s DeviceCheck instead; then it keeps only a usage counter, under an irreversible summary of the code Apple gives the app.

05 What Countey does not do

  • No advertising and no ad space.
  • No tracking: nothing follows you across other apps or websites. The only measurement is an anonymous count, by day, of how far people get through the welcome screens and the purchase screen: the name of the step and a few details (for example, how you chose to log an expense or why a purchase failed), which purchase screen you saw, the country (worked out from the connection, without storing the IP address) and, if you answer them, your age range and how you heard about Countey. It carries no identifier at all.
  • If Countey crashes or freezes, iOS prepares a technical report and the app sends it to our server so we can fix the problem: the app version, the iPhone model, the iOS version and where in the code it happened. Nothing you have entered goes with it, and it carries no identifier.
  • The only third-party SDK in the app is RevenueCat, used to manage subscriptions and to know which Apple Ads campaigns bring them (see section 07).
  • To convert your expenses between currencies, the app downloads public exchange rates from the European Central Bank and, for the currencies it doesn’t publish, from an open table (currency-api, served by jsDelivr and Cloudflare). Only figures are downloaded: nothing of yours is sent.
  • Your information is never sold or shared with anyone for commercial purposes.
  • No profiling and no automated decisions about you.

06 Permissions the app asks for

Camera
To photograph receipts. It activates only when you open the camera from the app.
Microphone
To dictate an expense out loud.
Speech recognition
To turn that dictation into text.
Photos
Only the specific image you pick is accessed; the app never sees the rest of your library.
Notifications
To tell you what got logged on its own and which payments are coming up, with buttons to fix it without opening the app.

You can revoke any of these in iOS settings. The app will keep working: you will only lose that particular way of capturing.

07 Subscriptions and purchases

Subscriptions are sold and charged by Apple. Countey never sees, receives or stores your payment details: your card, billing, renewals and cancellations are managed by the App Store through your Apple Account. With a Family plan (Apple Family Sharing, up to 6 people), each person uses Countey on their own iPhone with their own expenses and data, which no one else sees.

To know whether your subscription is active, Countey uses RevenueCat (RevenueCat, Inc., United States) as a data processor. It receives from Apple your purchase history for Countey (product, dates, price, country and renewal status) linked to a random identifier created by the app, never your name or email. If you answer the welcome questions, your age range and how you heard about Countey are stored there too, to understand which channels work. If you arrived through an Apple Ads ad, Apple tells us, without tracking and without personal data, which campaign and keyword you came from, and RevenueCat stores it with that random identifier to know which ads bring subscriptions. Transfers to the United States are covered by the safeguards required by the GDPR (standard contractual clauses).

The welcome offer is shown only once per device. To check it, the app asks Apple's DeviceCheck service, which stores two bits per device at Apple and nothing about you.

If you send us feedback from the app (Settings → Send feedback, or when it asks whether you’re enjoying Countey), we receive only what you write, the app version and its language. It reaches the developer and is kept to improve the app; it carries nothing that identifies you. If you turn on the Face ID lock, the check happens on your iPhone: Countey never sees your face or your passcode.

If you downloaded Countey before it had subscriptions, you keep it at no cost. The app checks this with Apple on your own device.

08 Your rights

Because your financial data is stored only on your device, you keep direct control: you can view it, correct it and delete it from within the app, and uninstalling removes all of it.

In addition, under the General Data Protection Regulation you have the right to access your data, rectify it, erase it, restrict or object to its processing, and request its portability. To exercise these rights, write to support@countey.app. If you believe they have not been honoured, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority in your own country.

09 Children

Countey is not directed at children under 14 and does not knowingly collect information from them.

10 Changes to this policy

If this policy changes, the updated version will be published here with its new date. Significant changes will also be announced inside the app.