← Uang

Privacy Policy

Uang is a household finance app for Mac, iPhone and iPad, built by Stijn Hanegraaf (The Netherlands). It reads bank statements you export yourself and turns them into a ledger. Your financial data is the most sensitive thing an app can hold, so the design starts from a rule: it stays on your devices and in your own iCloud, and the developer cannot see any of it.

What data Uang collects

None. Uang has no account, no sign-up, no analytics, no telemetry and no crash reporting. Nothing about your household, your accounts, your balances or your transactions is ever sent to the developer or to any third party for the developer's benefit. There is no server that belongs to Uang.

Where your ledger lives

Two places, both yours:

  • On your device. A database inside the app's own sandboxed container. Deleting the app deletes it.
  • In your iCloud, if you are signed in. Uang uses Apple's CloudKit to sync between your own devices and, if you choose to share a household, with one other person you invite. The data sits in your private iCloud database under your Apple Account, governed by Apple's privacy policy. The developer has no access to it and no way to obtain it.

Your bank statements

Uang deliberately has no bank connections. It never asks for bank credentials, never uses an aggregator such as Plaid or Tink, and never logs in to anything on your behalf. You export a file from your own bank and open it in the app. The file is read on your device and is never uploaded anywhere.

When Uang uses the network

Outbound only, to a fixed list of hosts, and never with anything about your household in the request:

  • Exchange rates, so a foreign transaction can be shown in euros: api.frankfurter.dev, the European Central Bank's own feeds at www.ecb.europa.eu, and open.er-api.com as a last resort. A request carries a date range and a list of currency codes. Nothing else.
  • Crypto prices, only if you switch them on in Settings, which ships off: api.coinbase.com and api.kraken.com. A request is a ticker symbol, such as BTC. It does not say how much you hold.

These are public, keyless endpoints. No identifier, no account, no amount and no counterparty is included. The legal basis is legitimate interest (GDPR Article 6(1)(f)): the request is what the feature needs and is the minimum that will do.

The optional assistant, and the one case where data leaves your device

Uang can suggest a category for transactions you have not filed yet. It is off by default and you choose the engine per device:

  • Apple's on-device model or a local Ollama server. Nothing leaves your machine.
  • A cloud model you configure yourself (OpenAI or Anthropic), using an API key you supply. If and only if you choose this, the descriptions, amounts and dates of the transactions being categorised are sent to that provider, under their terms and their privacy policy, using your own account with them. The developer is not a party to it and receives nothing.

If that trade is not one you want to make, leave the assistant off or pick one of the on-device options. The app works fully without it.

Merchant logos

Logos shown beside transactions are bundled inside the app and drawn from disk. Uang never fetches a logo at runtime, because a request for a logo would tell a server which shops you use.

Widgets

The widgets read a single small file in a shared container on your own device, holding a handful of figures. It never leaves the device and the widget has no network access of its own.

Purchases and advertising

There are none. No in-app purchases, no subscriptions, no ads, no advertising identifiers, no tracking across apps or websites. Uang requests no App Tracking Transparency permission because it has nothing to track you with.

Data retention

The developer retains nothing, because the developer receives nothing. Your data is retained by you, on your devices and in your iCloud, for as long as you keep it. Deleting the app removes the local copy; deleting the data from iCloud is done in your own Apple Account settings. Uang can also export your whole household to a file you keep yourself.

International data transfers

Uang transfers no personal data. Apple (iCloud), the rate providers listed above, and any AI provider you configure yourself may process requests outside the EEA under the safeguards in their own privacy policies.

Your rights under the GDPR

You have the right to access, rectify, erase, restrict, object to, and port personal data, and to lodge a complaint with a supervisory authority (in the Netherlands: the Autoriteit Persoonsgegevens). In practice there is nothing to exercise these rights against, because Uang holds no personal data about you.

Children's privacy

Uang collects no data from anyone, including children under 16.

Changes to this policy

Updates will be posted at this URL with a new date below. Anything material will be called out in the app's release notes.

Contact

Questions about privacy or anything else: Email Stijn. Uang is made by one person, so your mail lands straight with the developer.

Last modified: September 3, 2026