In short: we collect nothing. Your financial data goes from your bank to your device through Plaid, using your own Plaid keys, and moves only between your own devices. None of it ever reaches us.
FinWright (App Store and Google Play: com.blazingpepper.finwright) is published on the App Store (Mac, iPhone, iPad) and Google Play (Android) by Blazing Pepper Productions LLC, 3400 Cottage Way Ste G236814, Sacramento, CA 95825-1474, United States.
On both stores the developer is listed as Jonathan Dale. Questions about this
policy can go to support@blazing-pepper.com or jonathan.dale@blazing-pepper.com. This page covers FinWright on its own; our
privacy overview covers everything we publish.
What we collect
Nothing. FinWright does not ask for your name, email address, location, contacts, or any other personal information. We run no servers and no accounts, and the app contains no analytics, advertising, crash reporting or tracking of any kind.
What stays on your device
Your ledger — accounts, balances, holdings, transactions and your plans — in a database encrypted with a key kept in the system keychain (Apple) or the hardware-backed Keystore (Android). Your Plaid credentials, each institution’s access token, and your authenticator secret are kept in the keychain or Keystore too, never in a file. It stays on your device, is never sent to us, and is removed when you uninstall the app.
What leaves your device
- To Plaid, when you connect or refresh an institution: the request goes from your device to Plaid directly, using a Plaid client ID and secret that belong to your own Plaid account, and Plaid returns your balances, holdings and transactions. We are not a party to it. Plaid’s handling is governed by Plaid’s End User Privacy Policy.
- To your own iCloud, if you turn on Sync with iCloud: the ledger travels between your Apple devices through your iCloud account, and your Plaid credentials, tokens and authenticator secret through your iCloud Keychain. That is Apple’s service, under Apple’s Privacy Policy, and we have no access to it.
- To your own paired devices, over your local network: after you pair two devices with a six-digit code, they exchange the ledger directly, encrypted, with no server in between. This is how Android devices take part.
Permissions
- Face ID, Touch ID or your device’s biometrics — to unlock the app, if you turn the lock on.
- Local network — to find and sync with your own paired devices.
- Camera (iPhone and iPad) — only to scan a tax form or statement you are importing; it is read on your device.
- Files you choose — to import statements (CSV, OFX, QFX) or export your data.
Buying it, and what the stores say
It is a paid app, bought once from the store; it carries no ads and no in-app purchases. The purchase is handled entirely by Apple or Google, and we receive no payment details or personal information from it.
On the App Store its privacy label reads “Data Not Collected”. On Google Play its Data safety section says it collects and shares no data. Both say the same as this page; if you think a store listing and this page disagree, tell us and we will fix whichever is wrong.
Children
FinWright is made for the adult whose accounts it holds, and is rated accordingly on each store. It collects no personal information from anyone, including children.
Deleting your data
We hold no data about you, so there is nothing for us to delete on request. To remove what FinWright stored:
- Use Erase Everything in FinWright’s settings to delete your ledger and its key. On the device that holds your Plaid connection, this also revokes each institution at Plaid and removes the copy in your iCloud.
- Uninstalling removes what the app stored on that device. A copy in your iCloud, if you turned sync on, stays until you erase it or remove it in your iCloud settings.
- Revoke FinWright’s access at Plaid, or at your bank, to end a connection entirely.
Changes to this policy
If this policy changes, the revised version will be posted at this address with a new effective date.
Contact
support@blazing-pepper.com or jonathan.dale@blazing-pepper.com, or the support form — Blazing Pepper Productions LLC, 3400 Cottage Way Ste G236814, Sacramento, CA 95825-1474, United States.