app-policies

Privacy Policy — Tuppence

Last updated: September 30, 2026

Overview

Tuppence (“the App”) is an expense tracker maintained by Simone Ruggiero. This Privacy Policy explains how your information is handled when you use the App.

Data Collection

Tuppence does not collect, receive or store any personal data on our servers. There is no account and no sign-in. The only network requests the App makes are to Apple’s own services and to RevenueCat, our subscription provider, both described below.

Everything you record — transactions, amounts, categories, budgets, recurring entries, notes and settings — is stored on your device in the App’s own database.

iCloud Sync

The App synchronises your data through your own private iCloud database (CloudKit), so your transactions and budgets are available on your other Apple devices. Some preferences (such as your currency) are synced through iCloud key-value storage. This happens between your device and your iCloud account: we have no access to that data and cannot read it. The processing is governed by the Apple Privacy Policy. If no iCloud account is configured, the data stays on the device.

Face ID / Touch ID

If you enable the App lock, Tuppence asks the system to authenticate you with Face ID, Touch ID or your device passcode. The check is performed by iOS: the App only receives a success or failure result and never sees your biometric data.

Data Export

You can export your archive to a file. The file is written where you choose through the system share sheet and never passes through us.

Widgets and Siri

Widgets and Siri/Shortcuts intents read data already stored on your device through a shared App Group. Nothing leaves the device for these features.

Notifications

Reminders are scheduled and shown locally on your device. We do not send push notifications from any server.

In-App Purchases

The App offers auto-renewable subscriptions (weekly and yearly) that unlock the Premium features; recording expenses stays free. Purchases are processed by Apple StoreKit through the App Store. All payment data is handled directly by Apple under its privacy policy; we never see or store your payment information, and we receive no personal data from Apple about the purchase.

Subscription Management (RevenueCat)

Purchases are validated and kept in sync through RevenueCat, a subscription infrastructure provider. The App sends RevenueCat the App Store transaction receipt and a randomly generated identifier that is not linked to your name, email or Apple Account, and receives back whether Premium is active. RevenueCat also receives technical data sent by the SDK, such as the device model, the operating system version and the App version.

If you installed the App after tapping an Apple Ads advertisement, the App also passes RevenueCat the attribution token provided by Apple’s AdServices framework. It only tells us which ad campaign led to the install, contains no personal data and does not require tracking permission.

No transactions, amounts, categories or budgets — that is, none of the data you record in the App — are ever sent to RevenueCat or to anyone else. RevenueCat processes this data as our processor, under its Privacy Policy.

What the App Does NOT Do

Children’s Privacy

The App does not knowingly collect data from children under 13.

Changes

We may update this Privacy Policy from time to time. Changes will be reflected in the “Last updated” date above.

Contact

simone.ruggiero97@gmail.com