Hometill Privacy Policy

1. Who we are

Hometill (“Hometill”, “we”, “us”) is made by DuoDevApps, the controller responsible for the processing described here. Contact: clarito@duodevapps.com · Website: duodevapps.com.

This policy covers the Hometill app for iPhone and iPad, its widget and controls, its Siri and Shortcuts actions, and the Hometill pages of duodevapps.com. Hometill is offered on the App Store in the United States, the United Kingdom, Canada, Australia, Spain and Mexico.

2. What you keep in Hometill, and where

When you use Hometill, you may enter:

• your household: its name, the people in it, its currency and time zone, when you get paid, and your answers when you set it up;
• your income: payslips and any other income, fixed or variable;
• your bills and expenses, with how often they repeat, your budgets, one-off payments and their notes;
• your loans and other debts: the amount, the payment, the dates, the interest and what's left to pay;
• your accounts and cards, and the balances you check;
• your categories and your settings.

Money information is personal. We built Hometill so that it stays with you:

• On your devices. Hometill keeps all of this in its own storage on your iPhone or iPad, protected by iOS data protection.
• In your iCloud. If you're signed in to iCloud, Hometill keeps your household in your own iCloud private database (Apple's CloudKit), so it's the same on your devices and comes back on a new iPhone. Everything you type is encrypted on your device before it's uploaded; with Advanced Data Protection turned on, only you and the people you share with hold the keys. What Apple can see is technical: how many records there are, their size, and when they changed. iCloud is Apple's service, under Apple's terms, and it uses your iCloud storage. Without iCloud, Hometill works fully on your device.
• The widget and controls. On the Home Screen, the widget shows an amount only when the app lock is off and “Amounts in widgets” is on, and iOS hides it while your iPhone is locked. On the Lock Screen, it never shows amounts or names. The control that opens Hometill to add an expense shows nothing.
• Reminders are scheduled on your iPhone; nothing is sent from a server. They show a bill's or loan's name and when it's due, never an amount; if a name has a number or a currency sign in it, the reminder says “A payment” instead. You can hide notification previews on the Lock Screen in your iPhone's settings.
• Backups. Your iPhone's backup, in iCloud or on a computer, includes Hometill's data, as it does for any app. Your backup settings and Apple's terms apply to it; we can't access it.

3. Sharing your household

• How it works. Hometill lets two or more people share one household through iCloud sharing, each with their own iPhone and their own Apple Account. Only the Apple Accounts that are invited can join: a forwarded link doesn't let anyone else in.
• What they see. The household is shared as a whole: the people in it see and can edit everything, and changes travel through iCloud, encrypted as in section 2. The shared household is kept in the iCloud of the person who shared it, and it uses their iCloud storage.
• Leaving. “Delete This Household” (Household › Your data) works for everyone. If you shared the household, it's deleted from your devices and from iCloud, and the people you shared it with stop seeing it. If you joined someone else's household, you stop seeing it on your iPhone, and they keep it.
• Honest limits. Nobody can erase what someone has already seen, exported or captured on screen, and a device that is offline keeps its copy until it connects again.

4. How Hometill understands what you type or say

• On your iPhone. When you write or say an expense, Hometill reads it with its own rules, on your iPhone, and the amounts always come from your own words. Nothing is saved until you confirm it.
• Apple Intelligence and Private Cloud Compute. In this version, Hometill doesn't use Apple Intelligence or any other language model. If a future version uses Apple's on-device model, it will run on your iPhone. If one ever offers Apple's Private Cloud Compute for a long task, such as reading a long document, it will be used only if you allow it, for the kind of data you allowed, with personal details such as names and account numbers removed first, and never for your household's figures. Apple processes such a request only to answer it and keeps nothing; we never receive it. We'll update this policy before any of this ships.
• Siri and Shortcuts. What you ask Siri is handled by Apple under its own terms, and Hometill receives the request on your iPhone to answer it. Siri answers with an amount only on an unlocked iPhone and only when the app lock is off; otherwise, Hometill asks you to open it.
• Not sent anywhere else. We don't send your figures, your words or your documents to any AI service of ours or of anyone else.

5. Apple Pay payments that enter by themselves

• How it works. Hometill has a “Log Payment” action for the Shortcuts app. If you set up an automation that runs it when you pay with an Apple Pay card you choose, Shortcuts hands Hometill three things: the amount, the merchant and the card. Hometill places the payment on your iPhone: it confirms a bill you'd planned, or adds an expense in a category, so nothing is counted twice. With Hometill Premium this happens by itself; without it, the payment waits for you to confirm it in the app.
• What stays on your iPhone. To avoid counting a payment twice and to let you undo it, Hometill keeps a record of the last 14 days of payments on your iPhone. It isn't synced or sent anywhere. The expenses Hometill adds are part of your household like any other, so they sync to your iCloud and to the people you share it with.
• The notification. Each payment is confirmed with a notification you can undo. With the app lock off, it shows the amount, the merchant and the category of the payment you've just made, as Wallet shows the payment itself; with the app lock on, it says only that a payment was logged or needs a look. It never shows a balance.
• Stopping. Turn the automation off or delete it in the Shortcuts app.

6. FinanceKit, in the United States

In the United States, Apple's FinanceKit lets apps read Apple Card, Apple Cash and Apple Savings data on the iPhone, with your permission. Hometill is preparing to use it so that your Apple Card spending can enter your budget by itself. It isn't in Hometill yet: it needs Apple's approval first. This section says how it will work, and it applies from the version that includes it.

• Only with your permission. You turn it on in Hometill. Apple's own screen then asks you which accounts to share and from which date. Hometill reads only the accounts you choose, from the date you choose.
• What Hometill reads. For those Apple Card, Apple Cash and Apple Savings accounts: transactions (amount and currency, date, merchant name, description, merchant category, whether money went in or out, type and status), and the accounts and their balances, so a card's balance sits in the right place. Hometill never writes anything to your Apple accounts, and it can't make payments or move money.
• Only on your iPhone. FinanceKit data is processed on your iPhone by the same rules as the rest of Hometill. It's never sent to us, to Private Cloud Compute or to anyone else. Apple says FinanceKit data is never seen by Apple.
• What it becomes. Each purchase or refund becomes an expense or income in your budget, matched against your planned bills so nothing is counted twice, and confirmed with a notification you can undo. Those entries are part of your household like any other, so they sync to your iCloud and, if you share your household, to the people you share it with. Hometill doesn't keep a separate copy of your transactions, only a record on your iPhone of which ones it has already read, so it doesn't add them twice.
• Never sold, never for marketing. We don't sell FinanceKit data, share it, or use it for advertising, marketing, profiling or credit decisions. We use it only to enter your own spending in your own budget.
• Turning it off. Turn it off in Hometill, or in your iPhone's Settings, where Apple lets you stop sharing with Hometill. Hometill then stops reading, stops background updates, and deletes its record of what it read. The entries already in your budget stay, as your own entries: you can edit or delete them like any other, and deleting your household deletes them too.

7. Purchases and Hometill Premium

Hometill Premium is sold through the App Store, and Apple handles the payment. We never receive your card or bank details.

• On your iPhone, Hometill reads from the App Store what it needs to switch Premium on: your plan, its dates and status. Nothing is sent to us. Premium is read on each device from Apple; it is never read from a shared household.
• Family Sharing. If you share Premium with your Apple family, Apple manages who receives it.
• Sales reports. Apple sends us sales and subscription reports. They don't tell us who you are or anything about your money.
• Apple's privacy policy applies to the purchase itself.

8. Crash reports and App Store statistics

Hometill has no analytics or crash-reporting code of its own. If you've chosen, in your iPhone's settings, to share analytics with app developers, Apple may send us crash reports and statistics about how the app performs. They don't include your figures, your household or what you write. We use them only to fix problems. You can turn this off at any time in your iPhone's settings (Privacy & Security › Analytics & Improvements).

9. When you write to us

If you email clarito@duodevapps.com, we use your email address and what you tell us to answer you. Please don't send amounts, account numbers or screenshots of your figures unless they're needed; if you do, we use them only to help you. We keep support emails only as long as we need to answer you, and at most 12 months, and then delete them. Our email is handled by our email hosting provider.

10. What we never do

• No advertising, no ad networks and no advertising identifiers. No tracking across other companies' apps or websites.
• We don't sell or rent your data, or share it for advertising or marketing.
• We never ask for your bank passwords, and we don't connect to your bank through an aggregator.
• Hometill never moves money: it can't make payments or transfers.
• We don't use your data to assess your creditworthiness, or for automated decisions that have legal or similarly significant effects on you.

11. Why we use data (legal bases)

Your household's information stays on your devices and in your iCloud; we don't receive or store it. For the little we do process:

• Answering support emails: the contract with you, or our legitimate interest in helping you (Article 6(1)(b) and (f) GDPR).
• Crash reports and App Store statistics you allow Apple to share: your consent, given in your iPhone's settings (Article 6(1)(a)).
• Records we must keep by law, for example about requests to exercise your rights: our legal obligations (Article 6(1)(c)).
• Keeping our website secure: our legitimate interest (Article 6(1)(f)).

12. Who receives data, and where

• Apple, for iCloud and iCloud sharing, Siri and Shortcuts, App Store purchases, Family Sharing, FinanceKit once it's in Hometill and only if you turn it on, and the crash reports and statistics you allow it to share with us, under its own terms and privacy policy.
• The people you share your household with, who see and edit it.
• Our email hosting provider, for support email.
• Google, as the host of our website (Google App Engine).
• Public authorities, when the law requires it.

Some of these services may process data in the United States or other countries. When that happens, the transfer relies on the EU-U.S. Data Privacy Framework, where the recipient is certified, or on the European Commission's Standard Contractual Clauses.

13. How long we keep data

• On your devices and in your iCloud: until you delete it in Hometill or delete the app. Copies in your device backups follow your backup settings. You can also delete Hometill's iCloud data in your iPhone's Settings (your name › iCloud).
• Support emails: only as long as needed to answer you, and at most 12 months.
• Website server logs: up to 30 days.

14. Your choices and rights

• In the app:
  • Export (CSV and JSON) (Household › Your data): your transactions and your regular items as CSV files for Excel or Numbers, and a full backup of your household as a readable JSON file. It works offline and never needs Premium.
  • Delete This Household (Household › Your data): if you shared the household, it's deleted from your devices and from iCloud, and the people you shared it with stop seeing it; if you joined someone else's, you leave it and they keep it. Your iPhone's copy is erased, together with its reminders and the widget's data.
  • App lock (Household › Settings › Privacy): Face ID, Touch ID or Optic ID, with your device passcode as the fallback, and a cover that hides your figures in the app switcher.
  • Amounts in widgets (Household › Settings › Privacy), Hide amounts on screen (Month › More), and Reminders (Household › Settings).
• Your rights: you can ask us for access to the data we hold about you, and to correct, delete, restrict or port it, and you can object to its use. You can withdraw your consent at any time, without affecting what happened before. Write to clarito@duodevapps.com; we answer within one month. Because we can't see the data that stays on your devices and in your iCloud, the in-app tools are the way to manage it.
• Complaints: you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the authority where you live.

15. If you live in the United States

We don't sell or share your personal information, as those words are used in U.S. state privacy laws, and we don't use it for targeted advertising. Your household's information stays on your devices and in your iCloud, and only you decide whom to share it with. You can use the rights in section 14, and we won't treat you differently for using them.

16. Age

Hometill is for people aged 16 or over. It is not directed at children under 16. We don't knowingly collect personal information from children; if you think a child has written to us, tell us and we will delete it.

17. This website

The Hometill pages of duodevapps.com use no cookies, analytics or advertising, and load nothing from other companies. If you choose a language, your browser remembers the choice locally. Our hosting provider (Google App Engine) keeps standard server logs (IP address, time and page requested) for security, for up to 30 days.

18. Security

Your data in Hometill is protected by iOS data protection on your devices and, in iCloud, by encryption on your device before upload. The app lock and the app switcher cover protect it on an unlocked iPhone. Because Hometill doesn't send your data to us, there is no copy of it on our side to protect or to lose. No system is completely secure: if a breach ever affects data we hold, we will tell you and the authorities as the law requires.

19. Changes to this policy

If we change this policy, we will update the date at the top. For important changes, such as anything new leaving your iPhone, we will tell you in the app before they apply, and ask for your consent where needed.

20. Contact

Questions about your data or this policy: clarito@duodevapps.com.