Privacy Policy

Last updated: February 28, 2026

Strata ("we", "our", "the app") is a personal finance application for iOS. We take your privacy seriously. This policy explains how your data is handled and your rights.

All Data Is Local

Strata is local-first. All your data — accounts, transactions, budgets, rules, and preferences — is stored on your device. Nothing is sent to our servers.

• On-device storage — All data is stored locally using Apple's SwiftData framework.
• iCloud sync — If you have iCloud enabled, your data is encrypted and synced via Apple's private CloudKit container. This is end-to-end encrypted and managed by Apple. We cannot access it.
• Bank sync — Transaction data flows directly from SimpleFIN Bridge to your device. Your SimpleFIN access token is stored in Apple's iCloud Keychain. We do not store your bank credentials or intermediate the connection.
• Purchases — Subscriptions are handled by Apple via StoreKit. We do not process payments or receive payment details.

AI Categorization (Opt-In Only)

The only feature that sends any data off your device is AI-assisted transaction categorization. This is optional and off by default.

If you choose to enable it:

• Only merchant names are sent (e.g., "Whole Foods") — no amounts, account numbers, balances, or personal information.
• The request is stateless — no data is persisted on any external server.
• The resulting categorization rules are stored locally on your device.

If you do not enable AI categorization, no data ever leaves your device (aside from iCloud sync managed by Apple).

What We Do Not Do

• We do not store your financial data on our servers.
• We do not collect analytics or usage data.
• We do not use tracking or advertising SDKs.
• We do not sell, share, or transfer your data to third parties.

Data Retention

Your financial data remains on your device (and in your private iCloud container, if enabled) until you delete the app or use the "Reset App" function in Settings. We do not retain any user data on our infrastructure.

Children's Privacy

Strata is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions about this policy? Contact us at [email protected].