Private by principle
What stays, stays. What leaves, you'll know.
Our apps have no account and no servers of their own. Your data lives on your device and, if you use iCloud, as a copy in your own iCloud. Whatever else leaves your device is listed here for each app: what, to whom, when and whether you can switch it off.
For both apps
Four promises.
-
No account
You never sign up: no registration, no login, in none of our apps.
-
No bank login
FinanzPilot connects to no bank, needs no bank login and never moves money. You read in your statements yourself.
-
On your device
Your financial data, your steps and your calm minutes live on your iPhone, not with us. If you use iCloud, a copy sits in your own iCloud, never your steps or minutes.
-
What leaves is listed
Every connection is listed below, with its recipient, timing and switch. We have no analytics or tracking tool of our own; the ads in the free versions come from Google and are non-personalised.
How to read the cards below:
- By itself runs without you doing anything, mostly with a switch
- If you switch it on off until you want it
- When you do it only on your action
FinanzPilot
For iPhone and iPad · As of 9 November 2026, app version 3.2.4 · Full privacy policy (Deutsch)
At a glance: what leaves your device
Every row leads to the details further down.
| What | To whom | When | Switch off |
|---|---|---|---|
| iCloud Backup | Apple, in the private database of your own iCloud account | If you allow it | Settings › iCloud Backup |
| The iOS device backup | Apple (the device's iCloud Backup) or your computer | By itself · as set in iOS | In the iOS Settings, under the device's iCloud Backup |
| Ads (Google AdMob) | By itself · free version only | Entirely with FinanzPilot Pro | |
| ECB exchange rates | European Central Bank, Frankfurt am Main | By itself · can be switched off | Settings › Exchange rates |
| Apple Watch | Your paired Apple Watch | By itself · only with the watch app | Remove the FinanzPilot app from the watch |
| iCloud Sync | Apple, in your private iCloud, to your devices | If you switch it on | Settings › iCloud Sync |
| AI with your own key | Anthropic, directly from your device | If you switch it on | Withdraw the permission or remove the key |
| Your own price source | The address you enter yourself | If you connect one | Settings › Advanced · Prices |
| Crash and usage data to Apple | Apple | If you allow it in iOS | iOS Settings › Privacy & Security › Analytics & Improvements |
| Looking up an ISIN (OpenFIGI) | OpenFIGI (Bloomberg Finance L.P., USA) | Only when you tap | Nothing to set |
| FinanzPilot Pro (App Store) | Apple (App Store) | When you buy | Not needed |
| What you send yourself | Us, wherever you send a file, and for Siri Apple | When you do it | Don't send it, don't share it |
What stays on your device
Everything you enter or read in.
Transactions, accounts, budgets, savings goals, assets, pillar 2 and 3a, tax and FIRE assumptions, your "About you" answers, notes and receipt photos: in a database on your device. We do not receive this data.
Everything the app works out and recognises.
Reading in CSV, camt and PDF, text recognition on receipts, categories, budget, taxes and FIRE, and the on-device AI (Apple Intelligence): all of it runs on your iPhone or iPad.
No bank login, no account, no server.
FinanzPilot connects to no bank and never moves money. There is no user account, no registration and no server of our own for the app.
No analytics or tracking tool of our own.
The app contains no analytics or crash-reporting services of our own. What Google's ad SDK collects in the free version is listed below under ads.
Only on this device.
The name and address you enter for a cancellation letter never go into the app's backup, sync or exports. Your Anthropic key sits in the iOS Keychain.
What leaves your device – only like this
-
If you allow it
iCloud Backup
- What
- A copy of the whole database with receipt photos. Apple stores it encrypted; end-to-end encrypted, with no keys at Apple, only with iCloud's Advanced Data Protection. We have no access.
- To whom
- Apple, in the private database of your own iCloud account.
- When
- About once a day, only after you chose «Yes, back up». The app asks you once; nothing is backed up before.
- Switch off
- Settings › iCloud Backup
-
By itself · as set in iOS
The iOS device backup
- What
- The normal iPhone or iPad backup includes FinanzPilot's database so it survives a device change. That is Apple's backup, not ours.
- To whom
- Apple (the device's iCloud Backup) or your computer.
- When
- As you set it in iOS.
- Switch off
- In the iOS Settings, under the device's iCloud Backup.
-
By itself · free version only
Ads (Google AdMob)
- What
- What Google's ad SDK collects itself: IP address and the approximate location derived from it, device and system details, a device identifier, impressions and clicks, advertising data, the SDK's diagnostic, performance and crash data. Every request is flagged as non-personalised. The advertising identifier (IDFA) only if you allow tracking in the iOS prompt. Never your financial data.
- To whom
- Google (Google Ireland Limited; parent company Google LLC, USA).
- When
- Only in the free version, at the bottom of the app's pages; never over dialogs, menus or the introduction. Google's consent form asks first. If you decline there, Google may still show limited ads without personalisation, and the app does not ask about tracking.
- Switch off
- Entirely with FinanzPilot Pro: the ad SDK then never starts. Consent: Settings › FinanzPilot Pro › Ad consent. Tracking: iOS Settings › Privacy & Security › Tracking.
-
By itself · can be switched off
ECB exchange rates
- What
- A download of the public euro reference-rate file. Nothing about you is sent; like any website, the ECB sees your device's IP address.
- To whom
- European Central Bank, Frankfurt am Main.
- When
- At most once a day, only if you hold accounts or securities in a foreign currency.
- Switch off
- Settings › Exchange rates
-
By itself · only with the watch app
Apple Watch
- What
- A summary of your figures, such as what is left today, the fixed costs still due this month and the savings rate for the year (as a percentage). No transactions, no IBANs.
- To whom
- Your paired Apple Watch.
- When
- If you use the FinanzPilot app on the watch.
- Switch off
- Remove the FinanzPilot app from the watch.
-
If you switch it on
iCloud Sync
- What
- Every entry separately; the content in fields that are encrypted on the device, receipt photos as encrypted files. Technical details such as the table name, change time and size remain readable to Apple. Noted expenses are not synced.
- To whom
- Apple, in your private iCloud, to your devices.
- When
- Only if you switch the sync on.
- Switch off
- Settings › iCloud Sync; that is also where you delete the sync data in iCloud.
-
If you switch it on
AI with your own key
- What
- What the feature needs, for example your question, transaction descriptions, amounts, categories or monthly totals, and for the Copilot your canton, not your municipality. The app first replaces IBANs, account and card numbers with placeholders; card numbers keep at most their last four digits.
- To whom
- Anthropic (Anthropic Ireland, Limited; Anthropic PBC, USA), directly from your device. We are not in between and receive nothing.
- When
- Only if you add your own Anthropic key, explicitly allow the app to send data and use the Copilot, AI categorisation or the monthly briefing. The on-device AI (Apple Intelligence) sends nothing.
- Switch off
- In the AI section of the settings: withdraw the permission or remove the key.
-
If you connect one
Your own price source
- What
- A holding's symbol or ISIN, and your own key if you added one. Never amounts.
- To whom
- The address you enter yourself. We are not involved.
- When
- At most once a day per holding.
- Switch off
- Settings › Advanced · Prices
-
If you allow it in iOS
Crash and usage data to Apple
- What
- Crash reports and usage statistics from iOS, only if you allowed sharing with app developers in iOS. We only see what Apple shows us in App Store Connect, plus aggregated figures such as downloads and purchases.
- To whom
- Apple.
- When
- As set in iOS.
- Switch off
- iOS Settings › Privacy & Security › Analytics & Improvements
-
Only when you tap
Looking up an ISIN (OpenFIGI)
- What
- Exactly one ISIN, to get the name and ticker. No amounts, no holdings, no identifiers; OpenFIGI sees the IP address.
- To whom
- OpenFIGI (Bloomberg Finance L.P., USA).
- When
- Only when you tap "Look up online" for an unknown ISIN.
- Switch off
- Nothing to set: nothing goes without your tap.
-
When you buy
FinanzPilot Pro (App Store)
- What
- Purchase and "Restore purchases" run through Apple. The app checks on the device whether Pro is active. We receive no purchase or payment data.
- To whom
- Apple (App Store).
- When
- When you buy Pro or restore purchases.
- Switch off
- Not needed: the app sends no purchase data to us or to anyone else.
-
When you do it
What you send yourself
- What
- E-mails to us that the app prepares ("Report a problem", "Report format", "Report ad"): app and iOS version, the current view, and for "Report format" details of the file and its column names, no transactions. Files and images you export or share. Siri requests.
- To whom
- Us (support@komovi.ch, mailbox at hosttech in Switzerland), wherever you send a file, and for Siri Apple, under Apple's rules.
- When
- Only when you send the e-mail from your mail app, pick a destination in the share sheet or ask Siri.
- Switch off
- Don't send it, don't share it.
Check it in the app: since FinanzPilot 3.2, a page of its own, «What stays, what leaves» (at the top of Settings), shows every one of these connections with its state on your device, and before an AI request you can look at what would be sent.
At a glance: what leaves your iPhone
Every row leads to the details further down.
| What | To whom | When | Switch off |
|---|---|---|---|
| iCloud: your katun | Apple, in the key-value store of your own iCloud account | By itself · can be switched off | "The katun" page › "Keep the katun in iCloud" |
| Ads (Google AdMob) | By itself · only without Pro | Entirely with Katun Pro or the purchase that removes ads | |
| Neighbours | Only the people who are invited and accept | If you invite or accept | Leave the neighbourhood; your entry is then deleted from it |
| Game Center | Apple (Game Center) | Optional | In the iOS Settings under Game Center |
| Real weather | Apple Weather | If you choose it | Switch off "Weather like yours" (tap the sun or the moon) |
| Crash and usage data to Apple | Apple | If you allow it in iOS | iOS Settings › Privacy & Security › Analytics & Improvements |
| Katun Pro and purchases (App Store) | Apple (App Store) | When you buy | Not needed |
| E-mail to us | Us (support@komovi.ch) | When you write | Don't send it |
What stays on your iPhone
What Katun reads from Apple Health.
Only if you connect Apple Health and allow it in iOS: your total steps per day, whether you use a wheelchair (only to offer the wheelchair distance once) and, if you choose "Wheelchair", wheelchair distance and pushes per day. No routes with locations, no heart rate.
What Katun writes to Apple Health.
Your calm time by the fire, at the spring and on the stone as Mindful Minutes, if you allow it. Switch it off with "Save calm minutes to Apple Health" on "The walk" page.
Your health data never leaves your iPhone.
Not to iCloud, not to your neighbours, not to Game Center, not to the ads, not to us. Katun's own record of your daily steps and calm minutes is left out of even the iPhone backup. If you choose "Calm minutes carry the herd", Katun reads no steps, and that choice stays on the iPhone too. (Apple Health itself can sync its data through your iCloud if you switched that on in iOS; that is Apple's service, not Katun's.)
Your katun, your chest, your settings.
In files on your iPhone, encrypted by iOS; we do not receive them. A copy of the katun and the chest sits in your own iCloud (see below). The widget and the Live Activity get a small summary on the device, without step counts.
No account, no tracking of our own.
No registration, no user account, no servers of our own, no analytics or tracking tool of our own. Katun doesn't ask for permission to track: Google never receives your iPhone's advertising identifier (IDFA).
What leaves your iPhone – only like this
-
By itself · can be switched off
iCloud: your katun
- What
- Your katun without steps or calm minutes: herd, buildings, cellar, level and care, how far the herd has come on the first ascent, the year's blanket and the days whose steps have already been counted (dates only, no numbers). Plus how far you have heard Baba's tales, and your chest. Apple transfers and stores iCloud data encrypted; we have no access.
- To whom
- Apple, in the key-value store of your own iCloud account.
- When
- As long as the "Keep the katun in iCloud" switch is on. It is on until you switch it off.
- Switch off
- "The katun" page › "Keep the katun in iCloud"
-
By itself · only without Pro
Ads (Google AdMob)
- What
- What Google's ad SDK collects itself: IP address and the approximate location derived from it, device and system details, device identifiers limited to one app or developer, impressions and clicks, advertising data, the SDK's diagnostic, performance and crash data. Every request is flagged as non-personalised. Never health data, nothing from your chest, never the advertising identifier (IDFA).
- To whom
- Google (Google Ireland Limited; parent company Google LLC, USA).
- When
- Only without Katun Pro and without the purchase that removes ads: one small banner at the foot of the app's pages, from 6:00 to 21:00. Never at launch, never late at night, never with Baba's tales, never during calm time or in the two minutes after, never while you write in the chest. Google's consent form asks first; if you decline, Google may still show limited ads without personalisation. No rewarded ads.
- Switch off
- Entirely with Katun Pro or the purchase that removes ads. Consent: Google's privacy options on "The katun" page.
-
If you invite or accept
Neighbours
- What
- The first name you enter for your neighbours, your herd's names (lambs included), your katun's level and buildings, when you were last there, and the help you bring each other (deleted once it has arrived). Never steps, calm minutes, your chest, Baba's tales, weather or location. Depending on how you invite, the person you invite sees your e-mail address or phone number.
- To whom
- Only the people who are invited and accept. The neighbourhood is kept in the iCloud of the person who invited; Apple provides it, we have no access.
- When
- When you invite someone under "Neighbours over the ridge" or accept an invitation.
- Switch off
- Leave the neighbourhood; your entry is then deleted from it.
-
Optional
Game Center
- What
- Your progress on the achievements and three leaderboard values: care this week, care in all, Lutalica's finds. Never a step count, a distance or calm minutes.
- To whom
- Apple (Game Center).
- When
- If you are signed in to Game Center on your iPhone, or after you tap "Sign in to Game Center" in Katun.
- Switch off
- In the iOS Settings under Game Center; that is also where you choose who sees your profile.
-
If you choose it
Real weather
- What
- "Weather like yours": your approximate location; Katun doesn't store it. "Weather on Kom": only the fixed coordinates of the peak, nothing about you. Apple sees the IP address.
- To whom
- Apple Weather.
- When
- Only if you choose real weather instead of the mountain weather Katun makes up; with "Weather like yours" at most once an hour.
- Switch off
- Switch off "Weather like yours" (tap the sun or the moon) or withdraw the location permission in the iOS Settings.
-
If you allow it in iOS
Crash and usage data to Apple
- What
- Crash reports and usage statistics from iOS, only if you allowed sharing with app developers in iOS. We only see what Apple shows us in App Store Connect, plus aggregated figures such as downloads and purchases.
- To whom
- Apple.
- When
- As set in iOS.
- Switch off
- iOS Settings › Privacy & Security › Analytics & Improvements
-
When you buy
Katun Pro and purchases (App Store)
- What
- Purchases and "Restore purchases" run through Apple. The app checks on the iPhone whether a purchase is active. We receive no purchase or payment data.
- To whom
- Apple (App Store).
- When
- When you buy or restore purchases.
- Switch off
- Not needed: the app sends no purchase data to us or to anyone else.
-
When you write
E-mail to us
- What
- Your e-mail address, your name if you give it, and what you write. Please don't send us health data, including screenshots from Apple Health.
- To whom
- Us (support@komovi.ch, mailbox at hosttech in Switzerland).
- When
- Only when you write to us.
- Switch off
- Don't send it.
komovi.ch
This website.
No cookies, nothing from third parties.
This website sets no cookies, uses no analytics or tracking scripts and loads no fonts, images or videos from third parties. There are no forms, accounts or newsletter here.
Server logs in Switzerland.
The web server at hosttech (servers in Switzerland) stores technically necessary details on every visit: IP address, date and time, the page visited, the referring page, browser and operating system. They are usually deleted after a few days to weeks.
Access statistics, no profiles.
From the logs, the hosting creates access statistics (Webalizer), without cookies or scripts. They may list the IP addresses or host names of the most frequent visitors; we link them to nothing and build no profiles.
Google Search Console, without Google code.
There is no Google code on this website; Google receives no data from us when you visit. Google only shows us aggregated figures about Google Search.
Binding
The full texts.
This page summarises the privacy policies; the policies themselves are binding. Questions, access or deletion: support@komovi.ch.