Privacy Policy

1. Who We Are

Wallnut is provided by App Garage. For privacy questions, requests, or concerns, contact us at app-garage@appgarage.app.

2. Information Wallnut Processes

Financial records you enter

Wallnut may process the personal finance records you create in the app, including account names, account notes, balances, transactions, transfers, counterparties, categories, tags, budgets, repeating or scheduled items, goals, investment instruments, holdings, lots, trades, manual prices, currencies, dates, notes, and app activity history related to data export, restore, or deletion.

Receipt and image text

If you scan or import a receipt image, Wallnut uses Apple on-device Vision text recognition to create a transaction draft. Receipt drafts may include recognized text, possible amounts, dates, counterparty names, currencies, confidence values, and temporary attachment references. Wallnut lets you discard receipt images by default and review drafts before they become transactions.

Settings and local preferences

Wallnut may store settings such as display currency, iCloud Sync status, scheduled reminder settings, purchase amount entry preferences, app lock status, restore-copy selection, dashboard section preferences, and local personalization signals used to order dashboard content. Local personalization data stays on your device and is not used in Firebase market-data requests or direct exchange-rate provider requests.

Market data requests

Wallnut can request exchange rates directly from third-party exchange-rate providers. These requests may include the base currency, quote currencies, and requested date needed to return rates.

Exchange-rate requests are sent directly from the app to the applicable exchange-rate provider. Supported instrument search and Wallnut-managed quote refresh, when available, are requested through Firebase callable functions before any upstream provider response is returned.

If Wallnut-managed automatic quote refresh or instrument search is available and you use it, the app may send a search query, ticker symbol, and exchange MIC to Firebase callable functions. Wallnut does not send account IDs, holding IDs, quantities, lot data, cost basis, notes, or full account or holding records with quote refresh requests. A ticker or search query can still reveal securities you are interested in. The upstream market data provider behind Wallnut-managed Firebase functions may change.

When automatic quote features are enabled, Wallnut may also send stored instrument symbols and exchange MICs during portfolio valuation or other quote-dependent screens, even if you did not manually start a refresh action.

Instrument search may also perform a best-effort quote lookup to fill in a missing quote currency or recent price for a search result. That lookup uses the same limited symbol and exchange information described above.

Firebase and diagnostic information

Wallnut uses Firebase for app attestation, anonymous authentication, and callable market data functions when those features are enabled. Firebase and Google Cloud may process technical information needed to provide and secure those services, such as an anonymous Firebase user identifier, App Check tokens, app instance tokens, request metadata, IP address, device or app metadata, error information, and server logs. The callable region is us-central1, so market-data requests may be processed in the United States or other places where Google or its subprocessors operate. Where a Wallnut release includes or enables diagnostic or crash reporting, crash and stability information may also be processed to troubleshoot the app.

Purchases

Wallnut Plus purchases are handled through the App Store and StoreKit. Wallnut receives product, transaction, entitlement, renewal, expiration, grace-period, billing-issue, or revocation status needed to unlock paid features. App Garage does not receive your full payment card number from Apple.

Support messages

If you contact App Garage, we may process your email address, message contents, and any files or screenshots you choose to send. Please avoid sending unnecessary financial records, credentials, or full account numbers in support messages.

3. Where Your Data Is Stored

On your device

By default, Wallnut stores records in local app storage protected by Apple's data protection. Unless you disable Apple device backup features, some local app data may also be included in Apple-managed device backups or iCloud Backup. Wallnut excludes its receipt-draft directory from backup.

iCloud Sync

If you enable iCloud Sync, eligible Wallnut records may be stored in your private iCloud account using CloudKit so they can sync across your devices. Apple processes iCloud data under its own terms and privacy policy. Some local-only, temporary, or derived data may be excluded from iCloud Sync. Eligible synchronized records may include manual prices and locally persisted market-data snapshots, in addition to your other Wallnut records, subject to Wallnut's data model and Apple's CloudKit behavior.

Exported files

Wallnut lets you create local backup files and CSV exports. These files may include private financial data and are not encrypted by Wallnut. When you save or share them through Files, iCloud Drive, email, cloud storage, or another app, that location or provider controls the copy outside Wallnut's protected app storage. Export workflows may also create temporary local copies before you save, preview, or share a file.

Firebase market data cache

Wallnut-managed quote refresh may use a server-side Firebase cache to reduce upstream provider calls and enforce refresh windows. Cache records may use hashed document IDs and store normalized provider keys derived from symbol and exchange MIC, together with sanitized quote snapshots. The cache stores symbol-level provider keys and sanitized quote snapshots rather than account IDs, quantities, lot data, cost basis, or full account or holding records. However, requested symbols or queries can reveal securities you track or research, and operational systems may process authentication, app attestation, network, and log metadata needed to provide the service.

On your device, provider quote snapshots are cached with source, price, currency, as-of time, fetched-at time, stale-after time, and attribution metadata. Wallnut's local cache policy may prune older provider snapshots by age and per-instrument count while preserving usable stale fallback data when appropriate. Manual prices remain under your control until you edit, delete, export, restore, or clear local data.

Provider-derived quote snapshots may be retained only for limited periods and may be marked stale, hidden from refresh, or removed when provider rights, entitlement state, retention rules, or backend policy require it. Wallnut backup export includes user-entered manual prices, but excludes provider quote cache and exchange-rate cache snapshots.

4. How We Use Information

We use information only as needed to:

• Provide ledger, budgeting, portfolio, goals, dashboard, receipt draft, export, restore, deletion, and app lock features.
• Calculate balances, conversions, freshness states, and portfolio valuations.
• Provide optional iCloud Sync, scheduled reminders, and App Store subscription access.
• Request exchange rates, instrument search results, and supported quote snapshots.
• Protect Firebase functions from abuse, manage quotas, debug failures, and improve app reliability.
• Respond to support requests and comply with legal obligations.

5. What We Do Not Do

• We do not sell your personal information.
• We do not use your financial records for third-party advertising.
• We do not use the Apple advertising identifier (IDFA).
• Wallnut does not ask for bank passwords, card PINs, provider access tokens, or full payment card numbers as part of its normal product flows. You should not enter credentials or full account numbers into notes, attachments, exports, or support messages.
• We do not currently provide bank or credit-card aggregation. If that changes, this policy will be updated before release of that feature.

6. Sharing and Third-Party Services

We share or make information available only where needed for the app, support, security, or legal compliance. Relevant service providers can include:

• Apple, for App Store distribution, StoreKit purchases, iCloud, CloudKit, device permissions, local notifications, and on-device frameworks.
• Google Firebase and Google Cloud, for Firebase App Check, anonymous authentication, Cloud Functions, Firestore quote refresh cache, and related logs or diagnostics.
• Exchange-rate providers (such as Frankfurter, fawazahmed0/exchange-api, or ExchangeRate-API Open Access) and Wallnut-managed market data providers, when the app requests rates, instrument search, or quote data. Provider attribution requirements may apply.
• Support and legal providers, if needed to respond to your request or comply with law.

Third-party services may process data in countries other than your country of residence and may have their own privacy terms.

7. Retention and Deletion

Local records stay on your device until you edit them, delete them, clear local data, remove the app, or replace them through restore. Deleting data in Wallnut removes it from the active local app store, including accounts, transactions, transfers, scheduled items, portfolio records, manual prices, goals, market data cache, receipt drafts, draft attachments, and activity history.

If iCloud Sync is enabled, changes and deletions may sync through your private iCloud database under Apple's timing, iCloud behavior, and your account settings. Exported files, screenshots, emails, iCloud Drive files, and copies saved to other apps or providers are separate copies and must be deleted from those places separately.

Firebase server logs, quote refresh cache records, and support messages are retained as long as reasonably needed for security, operation, troubleshooting, legal compliance, or the purpose for which you contacted us. Wallnut may not provide an immediate in-app deletion control for Firebase anonymous authentication records, server logs, or server-side quote refresh cache records, so immediate complete deletion of remote operational data is not guaranteed.

8. Your Choices and Rights

• You can use core manual finance features without creating an App Garage account.
• You can export a Wallnut backup or CSV files from the app.
• You can delete local data from the app.
• You can choose whether to enable iCloud Sync, scheduled reminders, App Lock, receipt scanning, and paid subscription features.
• You can manage or cancel App Store subscriptions through Apple Billing and Subscriptions, and request App Store refunds through Apple's report a problem service.
• You can contact us to request access, correction, deletion, or other privacy assistance where applicable law gives you those rights.

9. Security

Wallnut uses platform protections such as the iOS app sandbox, local file protection, Keychain storage for the app lock sentinel, App Check for Firebase callable functions, and HTTPS network requests. App Lock is a convenience privacy control for this device, not a substitute for keeping your device, Apple account, backups, and exported files secure.

10. Children

Wallnut is not directed to children and is intended for personal finance record keeping by users who are old enough to manage their own financial information under applicable law.

11. Changes to This Policy

We may update this policy when Wallnut's features, providers, legal requirements, or release state change. If a change materially affects how we process personal information, we will update the effective date and provide notice in an appropriate way.