Lutarea

Your Budgets/隱私權政策

隱私權政策

下方完整的法律文本為英文。

Last updated: 19 June 2026

This Privacy Policy describes how Lutarea ("we", "us", or "our") handles information in connection with the mobile application Your Budgets (the "App") for Apple iOS and iPadOS, including optional Apple Watch companion, home screen widgets, and Live Activities. The App uses the bundle identifier com.lutarea.yourbudget; the widget extension uses com.lutarea.yourbudget.widgets; the Watch app uses com.lutarea.yourbudget.watchkitapp; Watch complications use com.lutarea.yourbudget.watchkitapp.widgets.

1. Summary

Your Budgets stores your household budgeting data on your device using SwiftData. When you turn on iCloud sync in Settings and are signed into iCloud, the App also syncs your records through Apple CloudKit in your private iCloud account (container iCloud.com.lutarea.yourbudget). User JSON backups you export are stored separately in the shared Lutarea iCloud Documents container (iCloud.com.lutarea.backups, shown in Files as Lutarea BACKUPS / Your Budgets Backups) or in a folder you choose. Lutarea does not operate its own backend that receives your budget ledger for advertising or resale. We do not embed third-party advertising SDKs. The App may use limited third-party services for exchange rates and optional crash diagnostics as described below.

2. Data we process

Depending on how you use the App, categories of information may include:

  • Family and income — family member names, optional job titles, base salaries, salary history entries, and display colors you configure.
  • Expenses and income — amounts, currencies, dates, categories, notes, payer and recipient (family member or outsider), optional account links, loan links, split-bill groups, and import hashes for bank CSV deduplication.
  • Outsiders — names and notes for people outside your household who appear in transactions.
  • Categories, budgets, and goals — expense categories (including custom names, colors, and icons), monthly category budgets, savings goals, and recurring transaction rules.
  • Accounts, loans, and crypto — multi-currency account opening balances, loan terms and schedules, and optional crypto holdings with cached rate snapshots.
  • Year planner — planned income and expense lines per month, recurrence settings, paid flags, and optional reminders.
  • Receipt attachments (optional) — photos of receipts you attach to expenses, stored in the App sandbox. If you enable Encrypt receipt attachments in Settings, image files are encrypted on device with AES-GCM; the key is stored in the device Keychain.
  • Location (optional) — if you add location to an expense, the App may save coordinates and a place name after you grant location permission while using the App.
  • Preferences — theme, language, base currency, notification settings, iCloud sync toggle, app lock, privacy screen in the app switcher, Live Activities toggle, and similar options stored locally or synced via CloudKit where applicable.
  • Security settings — optional app passcode and Face ID / Touch ID; passcode material is stored in the device Keychain.
  • Bank CSV import — when you import a statement, the file is parsed on device. We do not upload your full bank file to Lutarea servers.
  • Exchange rates (network) — to convert currencies for display, the App may request public fiat rates from api.frankfurter.dev (Frankfurter, ECB-backed) and supplementary fiat rates from a public currency dataset hosted on cdn.jsdelivr.net. Requests include date and currency codes only, not your transactions or Apple ID. For crypto display, the App may request public market rates from CoinGecko (api.coingecko.com) using asset identifiers, not your household ledger.
  • CloudKit sync (optional) — when enabled and iCloud is available, SwiftData records listed above may sync through CloudKit in container iCloud.com.lutarea.yourbudget. Apple processes this data under your iCloud account. Lutarea does not receive a copy of your synced database on our servers.
  • User JSON backups — when you export a backup, the App writes your-budget-backup-….json files (and optionally a companion zip for receipt images) to the shared Lutarea backups container or a custom folder you choose. This is separate from CloudKit sync. Backup files are not encrypted by the App unless you protect them yourself; treat them as sensitive financial documents.
  • Widgets, Live Activity, and Watch — limited financial summaries (for example net balance, category totals, or budget progress) may be written to App Group group.com.lutarea.yourbudget for display on the home screen, Lock Screen, Dynamic Island, Apple Watch, or complications. Quick-add amounts queued on Apple Watch are transferred to the iPhone via Apple's Watch connectivity APIs. These snapshots are not sent to Lutarea servers but may be visible on your device surfaces without opening the App.
  • Siri Shortcuts and deep links — App Intents you add (for example "Add expense" or "What's my net this month?") run flows inside the App. Deep links such as yourbudget:// open specific screens you choose from widgets or external links.
  • Notifications — if enabled, local reminders (for example a monthly digest) are scheduled on your device; notification permission is requested when you turn the feature on.
  • Crash diagnostics (optional) — when configured for a given build, the App may send crash and error reports to Sentry (sentry.io) to help us fix stability issues. Reports are intended to contain technical diagnostics, not your full transaction history. If crash reporting is not configured, the App uses local no-op handling only.
  • Diagnostics visible to Apple — if you opt in to share analytics with Apple as part of your device settings, Apple may collect crash or usage diagnostics according to Apple's policies.

3. Purposes and legal bases (EEA, UK, and similar)

Where the GDPR or similar laws apply, we rely on appropriate bases such as:

  • Performance of a contract / steps at your request — providing the App and features you enable.
  • Legitimate interests — securing the App, maintaining exchange-rate caches, and improving stability, where not overridden by your rights.
  • Consent — where required for optional permissions (location, notifications, biometrics), as managed by iOS.

4. Storage and retention

Core data is stored on your device with SwiftData. Optional CloudKit sync keeps a copy in your private iCloud when enabled. Exchange-rate snapshots are cached locally. Widget, Live Activity, and Watch surfaces read summary snapshots from the App Group on the same device.

Retention is controlled by you: you can edit or delete entries in the App, export backups, reset data where offered, or uninstall the App. Exported JSON or zip backups in iCloud Drive or elsewhere are files you manage. CloudKit data in iCloud remains subject to your Apple ID until you delete it.

5. Sharing

We do not sell your personal information. Data may be processed by:

  • Apple — App Store, CloudKit sync, iCloud Drive for user backups, WidgetKit, Live Activities, WatchKit, App Groups, WatchConnectivity, Siri / App Intents, camera and photo pickers, Keychain, and device security.
  • Frankfurter and CoinGecko — public exchange-rate APIs as described above; only minimal request parameters leave your device.
  • Sentry — optional crash and error diagnostics when enabled for the build you use.
  • Law and safety — if we are legally required to disclose information, or to protect rights and safety, subject to applicable law.

When you export PDF reports or share data with system share sheets, you choose the recipient or app; Lutarea does not receive that share action.

6. International transfers

If you enable CloudKit sync or store backups in iCloud, Apple may process data in data centers governed by Apple's terms. Optional remote crash reporting through Sentry may involve processing in the United States or other regions where Sentry operates. Public rate APIs may be served from various regions. Those services are governed by their own terms.

7. Security

The App supports optional passcode and biometric lock, file protection on the SwiftData store, and optional AES-GCM encryption for receipt attachments. You are responsible for keeping your device, Apple ID, and exported backup files secure. Financial data you enter is only as accurate as the information you provide.

8. Your rights

Depending on your location, you may have rights to access, rectify, delete, restrict, port, or object to certain processing of your personal data. Many requests can be fulfilled directly in the App or by deleting exported files you control. You may also contact us using the email below.

9. Children

The App is not directed at children under the age where parental consent is required in your jurisdiction. Do not use the App for children below that age without appropriate parental authority and compliance with local rules.

10. Changes

We may update this Privacy Policy from time to time. We will adjust the "Last updated" date above. Where required by law, we will provide additional notice.

11. Contact

Privacy-related questions for Your Budgets: support@lutarea.com.