This is the TrueCash Privacy Policy, word for word the same document the app shows on its Privacy Policy screen. TrueCash is a budgeting and subscription-tracking app by MV Development Solutions LLC. Questions: mvdevelopmentsolutions@gmail.com.
TrueCash stores the financial data you enter on your device, not on a server of ours. You can use everything on the device without an account. A TrueCash account (email and password) exists only for the features whose data lives on our servers, and data you type in or import never comes to us.
Two features use our servers, and only when you ask for them. If you connect a bank account, the connection runs through Plaid, and the synced accounts, transactions and recurring payments are stored on our backend for your account so the app can keep them current; Section 6 explains exactly what is stored, how long we keep it, and how it is deleted. If you tap Analyze in AI Insights, the app sends a computed summary of your numbers to our AI service so it can write feedback about them; Section 5 explains exactly what that summary contains and what it never contains. The feedback form on the Account screen is the other thing you can choose to send us; Section 7 covers it.
The app also sends anonymous usage events (which screens and features are used) to our analytics provider, PostHog, so we can tell which parts of the app work. Those events never contain financial values, account or transaction details, or anything that identifies you; Section 8 covers them.
We do not sell personal information. We do not run ads.
Everything you enter or import into TrueCash is stored in the app’s local storage on your device: accounts and the balances you enter for them, transactions, category budgets, custom categories, merchant category rules, tracked subscriptions and bills, dismissals of subscription detections, app settings (appearance, payday, savings target, reminder preference), daily net worth snapshots, your acceptance of these documents, and (if the store is connected) a record of your subscription tier as reported by the store.
Your device and its operating system protect this storage. If you delete the app, or use Delete everything in the Account screen, this information is removed from the device. We keep no copy of anything stored only on your device.
If you create a TrueCash account, our backend stores your email address, your sign-in record (your password is stored only as a hashed credential by the authentication service; we never hold it in readable form), and a record of which device is currently signed in, so an account signs in on one device at a time. Your account session is kept in the device’s secure storage.
If you connect a bank account (Section 6), the synced data for that connection, accounts, balances, transactions, and recurring payments, is also stored on our backend, in a dedicated database in the United States, for your account, so the app can show it and keep it current. That stored copy is governed by Sections 6 and 10: it is kept only while the connection is active and is deleted when you disconnect, delete everything, or delete your account.
Only from you. You type accounts, transactions, budgets, subscriptions and bills in by hand; or you import a bank or card statement file (CSV) that you export from your financial institution and choose in the app. Statement parsing happens on the device; the file is not uploaded anywhere.
You can also connect a bank or card account. Connecting requires a TrueCash account, because the synced data lives on our servers and belongs to the account that connected it. The connection is made through Plaid, a service banks and finance apps use for this: you sign in on your bank’s own screens inside the connection flow, and we never see or store your bank username or password. Plaid then provides us the account, transaction and recurring payment data described in Section 6. Connecting is always your choice; everything else in the app works without an account and without a connection.
TrueCash can load a sample household so you can see how the app works before entering real data. The sample data is generated on your device, is labeled DEMO on every screen it touches, and is stored the same way as real data until you clear it. Clearing removes only the sample rows.
TrueCash Pro is sold through Apple’s App Store. Apple processes your payment; we never see or store your payment card details. The app uses RevenueCat to check whether your subscription is active. For that check, RevenueCat receives your subscription status from Apple and an app-generated customer identifier. The Account screen keeps that identifier hidden behind a tap-to-copy control, because it is the reference to quote if you ever need subscription support.
Managing or cancelling TrueCash Pro happens in your Apple ID subscription settings, which the Account screen links to. Deleting the app does not cancel a subscription; that is Apple’s rule, and the app says so where it matters.
AI Insights is optional and runs only when you tap Analyze. Each run needs its own tap; nothing is sent in the background, on a schedule, or when the app opens.
When you tap Analyze, the app first computes a summary from your data on the device, then sends that summary to our AI service (a function we operate, which passes the summary to our AI model provider) so it can write feedback. The summary contains: monthly income, spending and net totals; budget limits, amounts spent and pace figures per category; category totals and shares; subscription names with their prices, cadences and price changes; counts and totals of upcoming charges; and account totals grouped by account type.
The summary never contains: individual transaction rows, account names, account numbers, bank credentials, notes you typed, or your name or contact details. Subscription names are included because specific feedback needs them; this is stated in the consent copy shown above the Analyze button every time.
Before any AI-written text is shown to you, the app checks every dollar and percent figure in it against the summary that was sent, and discards text whose figures do not check out. We do not use the summary to train models, and we do not keep it after the run that produced your feedback.
If you connect an account, Plaid sends us, and we store: an identifier for the connection and the institution; for each account, its identifier, name, last four digits (mask), type and subtype, current and available balances, credit limit, and currency; for each transaction, its identifier, the account it belongs to, name and merchant name, amount, currency, date, pending status, and Plaid’s spending category; and for each recurring payment Plaid identifies, a record of the stream: its identifier, the account it belongs to, merchant name and description, how often it charges, whether it is active, its status, the average and most recent amounts, the first and most recent charge dates, the predicted next charge date, and Plaid’s spending category. The rest of Plaid’s response is discarded, not stored. We ask Plaid for transactions (which carries its recurring payments analysis), for institutions in the United States. We do not receive your bank username or password, full account numbers, or routing numbers.
Detection runs on your device. The app reads the synced accounts, transactions and recurring streams back and merges them with the data on your device: synced transactions run through the same subscription detection as your own entries, and Plaid’s recurring streams are combined with the detection results by merchant, so the same subscription is never counted twice. When you tap Refresh on the Connect screen, we ask Plaid to poll your bank for the latest data (at most one accepted refresh per connection per hour); the new data then arrives through the normal sync.
Your Plaid access token, the key that lets us sync the connection, is stored only on our server, in a table no app client can read; it is never sent to your device or shown in the app. Data is encrypted in transit and at rest.
We keep connected data only while the connection is active. Delete everything on the Account screen revokes the connection at Plaid, deletes the token, and permanently deletes the stored accounts, transactions and recurring streams, at the time of the request, and within 30 days in every case, as our Data Retention and Disposal Policy states. Your TrueCash account itself remains; Delete my account does all of that and also deletes your account and its sign-in record. If the revocation at Plaid cannot be completed, the app stops and tells you, and nothing is deleted, so a live connection is never left behind without its records; you can simply try again.
Plaid processes your information to provide the connection; Plaid’s own End User Privacy Policy (at plaid.com/legal) describes Plaid’s handling of it.
The Account screen has a feedback form. Sending feedback is optional and entirely yours to trigger. When you submit the form, we receive the message you typed, the name and version of the app, and your platform; if you are signed in, your account email is attached automatically so that we can reply. Your submission is stored on our backend so that we can read it and use it to improve the app; we use it for nothing else. The form never includes any transaction, account, budget, or other financial data.
The app sends anonymous usage events, screens opened, features used, a paywall viewed, a bank connection started or completed, to PostHog, our analytics provider, so we can see which parts of the app work and fix the ones that do not. Events carry no financial values, no account, transaction, budget, or subscription details, and no name or contact information; they are not attached to your TrueCash account or your email. This is the only analytics in the app.
We do not sell, rent, or trade personal information. We do not share your information with advertisers or data brokers. We do not use your financial data to market other products to you. Connected bank data is used only to run the features you asked for, syncing, subscription and bill detection, and the displays built from them, and is never shared with anyone except the service providers named in this policy, only as needed to operate those features.
The Account screen offers Export your data (the data TrueCash stores on your device, as a JSON file you can share or keep), Delete everything, and, when you are signed in, Delete my account. Delete everything permanently removes everything the app stores on the device and, if you connected a bank account, also runs the server deletion described in Section 6: revoking the connection at Plaid and permanently deleting the stored accounts, transactions and recurring streams. Your account itself remains. Delete my account does all of that and also deletes your account and its sign-in record. Neither action needs our permission or involvement, and neither is gated behind a subscription.
Data stored only on your device does not travel over a network. Connected bank data travels over encrypted (TLS) connections and is stored encrypted at rest on our backend; Plaid access tokens are kept server-side only, in a table with no client access, and access to our production systems is limited to the company’s owner, protected by phishing-resistant multi-factor authentication (a passkey).
No system is perfectly secure; protect your device with its passcode and biometric lock, since anyone who can unlock your device can open the app. The app’s own App Lock (Face ID or passcode) is on by default and also gates access to the bank-connection flow.
TrueCash is a personal finance tool for adults. It is not directed at children, and the Terms of Use require you to be at least 18 years old to use it. We do not knowingly collect information from children, and a bank connection can only be made by the account holder through their own bank’s sign-in.
Privacy laws in some places give you rights to know, access, correct, and delete personal information a company holds about you. For data on your device, you already hold it: it is exportable and deletable in the app. For connected bank data, disconnecting or using Delete everything deletes it, as Section 6 describes. For anything else we hold, a feedback message you sent, for example, contact us through the feedback form and we will act on your request and confirm when it is done.
If this policy changes, the new version is published in the app and on our policy page with a new version number and effective date. Continuing to use TrueCash after a new version takes effect means you accept it. The version in effect, and the date your acceptance was first recorded under it, are stored on your device.
Questions about privacy: use the feedback form on the Account screen, or write to mvdevelopmentsolutions@gmail.com. TrueCash is built by MV Development Solutions LLC.