No server: what it costs us and what you get.

Our apps have no account and no servers of their own. Your data lives on your device and, if you use iCloud, as a copy in your own iCloud. That is a promise, but also a decision with consequences. Here we write down what it makes harder for us and what you get.

What it makes harder for us

Backup and sync only go through your iCloud. Because nothing sits with us, there is no account to bring your data to a new device. If you allow it, FinanzPilot puts a copy of the database in your private iCloud. The app asks you once; nothing is backed up before that. Sync between your devices only runs if you switch it on. In Katun the katun can come along in your own iCloud, to a new iPhone or an iPad. Apple stores this data encrypted, and we have no access.

We cannot look. If you report a problem, we do not see your data, because we have no access to it. In FinanzPilot's support we even ask you never to send bank statements, bank CSVs or backups with real data: a description of the problem, the app version and the iOS version almost always do. When FinanzPilot cannot read a file, "Report format" first shows you exactly what would be sent: details about the file and its column names, no transactions. For Katun we ask you not to send health data, including screenshots from Apple Health.

We have no usage statistics of our own. There is no analytics or tracking tool of our own in either app. We only see what Apple shows us in App Store Connect: summarised numbers such as downloads and purchases, plus crash reports and usage statistics from people who allowed sharing with app developers in iOS. So we can hardly tell which feature is used how often. We learn what you write to us.

What you get

Your data stays with you. Your financial data, your steps and your calm minutes live on your iPhone, not with us. In Katun, steps and calm minutes never go to iCloud, never to Game Center and never to the ads. Where nothing sits with us, there is no need for an account: no registration, no login, in none of our apps. FinanzPilot also connects to no bank, needs no bank login and never moves money. You read in your statements yourself.

What does leave is listed. The apps do not manage entirely without connections: Apple provides iCloud and the purchases, and in the free versions the ads come from Google. The page "Private by principle" lists each of these connections with its recipient, timing and switch. Since FinanzPilot 3.2, a page of its own, "What stays, what leaves", at the top of the settings, shows every connection with its state on your device, and before an AI request you can look at what would be sent.

This costs us comfort: the look into a problem, the statistics, the convenient account. We think that is the right price: you do not have to take anything on trust that you cannot read for yourself.

Nikola Marković · November 2026

Read Private by principle →