Privacy Policy for Compound

Last updated: August 1, 2026 Effective: August 1, 2026

Compound is a household finance app for iPhone and Mac. This policy explains what happens to your information. The short version: it stays on your devices and in your own iCloud account. We never receive it, and we have no server that could.

Everything below describes how the app actually works. If any of it stops being true in a future version, this policy changes in the same release.

1. Who we are

Compound is published by WizKidSP ("we", "us"). You can reach us at aiexploration93@gmail.com.

2. We do not collect your information

We do not operate any server, database, or backend of any kind. There is no account to create, no sign-up, and no login. We never ask for your name, email address, phone number, or payment details, and the app has no field in which to give them to us.

Specifically, Compound contains:

• No analytics or telemetry. No usage tracking, no event logging, no session recording.
• No advertising and no ad identifiers. We do not use the Advertising Identifier (IDFA) and we never present the App Tracking Transparency prompt, because there is nothing to track.
• No third-party SDKs. No crash-reporting service, no attribution service, no analytics library. The app's own code has zero external dependencies; the only networking it performs is Apple's CloudKit.
• No tracking across apps or websites, as "tracking" is defined by Apple's App Tracking Transparency framework.

We do not sell your personal information, share it for cross-context behavioral advertising, or disclose it to anyone — because we never have it.

3. Where your information actually lives

On your device. What you enter — income, cash on hand, debts, mortgage details, property address, account balances, spending categories, recurring bills, purchases, payment history, goals, and saved scenarios — is stored in a database on the device, protected by iOS or macOS file encryption tied to your device passcode and Secure Enclave.

In your own iCloud. If you are signed in to iCloud, that same information syncs through Apple's CloudKit to your private iCloud database, so your devices stay in step. It is stored under your Apple Account, in space governed by your agreement with Apple. We cannot see it, query it, or retrieve it. We have no administrative access to your iCloud data and no way to request it.

End-to-end encryption. Every field that describes your finances syncs as a CloudKit end-to-end encrypted field, which means Apple cannot read it either. That covers every amount, label, date, balance, rate, and your property address — everything you type into Compound.

The only fields that sync without that encryption are structural bookkeeping, and none of them describes your finances: random record identifiers (UUIDs), the identifier linking a bill payment to its bill, integers recording the display order of lists, and the timestamp at which the household was first set up. There are no dollar amounts, names, labels, or addresses among them, and an automated test fails the build if a change would ever let something you entered sync unencrypted.

Imported bank statements. Statement files you import are parsed on the device and stored in a local archive there; account numbers and similar identifiers are removed at import and replaced with made-up labels, the original file is deleted after a successful import, and the archive is excluded from iCloud and device backups. By default it never leaves the device. If you turn on the archive's sync switch (History deck, off by default), the scrubbed archive syncs through your household's own iCloud as CloudKit end-to-end encrypted fields — unreadable by us and by Apple, shared only with a person who shares your household, and deletable from iCloud at any time with the REMOVE FROM iCLOUD button.

4. Face ID, Touch ID, and your passcode

Compound can lock itself behind Face ID, Touch ID, or your device passcode. This uses Apple's LocalAuthentication framework: the system performs the check and tells the app only whether it succeeded. Your biometric data never leaves the Secure Enclave, is never accessible to Compound, and is never transmitted anywhere. We do not store a password of our own.

Your chosen auto-lock delay is saved locally on that device only.

5. Sharing a household with another person

Compound lets two people share one household using Apple's iCloud Sharing. When you invite someone:

• The invitation is created and delivered by Apple's own sharing interface, not by us. We do not see, store, or transmit the invitation or the recipient's contact details.
• Apple may show you the name or Apple Account email of the people in the share, because that information comes from iCloud. Compound itself reads only how many participants there are and whether you are the owner or a member.
• Anyone you invite can see and change everything in that household. That is the purpose of the feature. Only invite someone you intend to share your complete financial picture with.
• You can stop sharing at any time through the same Apple interface.

6. Notifications

To keep devices in sync, Apple's servers send the app a silent, contentless notification when your data changes elsewhere. We operate no notification server and compose no notification content. This is standard CloudKit behavior between you and Apple.

7. Backups you export yourself

Settings ▸ BACKUP writes your household to a JSON file that you choose where to put. That file is not encrypted and contains your balances in plain text. Once you save, AirDrop, email, or otherwise move it, its security is entirely in your hands — and outside ours. We recommend deleting backups you no longer need. The app repeats this warning where the button lives.

8. What we do receive from Apple

For completeness, one thing does reach us, and it is not your data: if you choose to share diagnostics with developers, or where Apple provides developers with aggregate, anonymized App Store statistics — install counts, crash counts, and similar — we may see those. They are compiled by Apple, contain no financial information, and do not identify you. We cannot use them to see anything you entered. This is controlled by your iOS settings under Privacy & Security ▸ Analytics & Improvements, not by us.

9. How to delete everything

• Delete the household: Settings ▸ RESET ▸ DELETE HOUSEHOLD removes it from every device and every participant it was shared with.
• Delete the app: removes the on-device copy.
• Clear the iCloud copy: iOS Settings ▸ your name ▸ iCloud ▸ Manage Account Storage, or macOS System Settings ▸ Apple Account ▸ iCloud, where Compound's data can be removed.

Because we hold no copy, there is nothing for you to ask us to delete, and no retention period on our side — we retain nothing, for zero days.

10. Your rights, and where to exercise them

Privacy laws — including the EU and UK GDPR, and the California Consumer Privacy Act as amended — give you rights to access, correct, port, and delete personal information held by a company. We hold none of yours. There is no data for us to produce, export, correct, or erase, and no profiling or automated decision-making performed on our side. We do not discriminate against anyone for exercising any privacy right, and there is no financial incentive program.

For the copy stored in your iCloud account, Apple is the party with custody. See Apple's Privacy Policy at https://www.apple.com/legal/privacy/ and manage your data through your Apple Account settings or https://privacy.apple.com.

If you have a question about this policy, write to aiexploration93@gmail.com and we will answer.

11. Children

Compound is not directed to children under 13, and we do not knowingly collect information from children. Because we collect nothing from anyone, there is nothing to delete — but if you believe a child has used the app and you have a concern, contact us.

12. Security, honestly stated

The app relies on protections built into Apple's platforms: device encryption keyed to your passcode, the Secure Enclave, and CloudKit end-to-end encrypted fields for the data described in Section 3. We think that is a strong position, and it is deliberately stronger than storing your finances on a server of ours.

We cannot and do not promise that any system is impenetrable. No method of electronic storage or transmission is completely secure, and the security of your iCloud account also depends on your Apple Account password, your two-factor authentication, and your device passcode. We do not control Apple's infrastructure and cannot guarantee its performance or security. Choices you make — a weak device passcode, a shared Apple Account, an exported backup left in a shared folder, or inviting someone to your household — affect your data in ways outside our control.

13. Changes to this policy

If we change how the app handles information, we will update this page and revise the date at the top before or when the change ships. Continuing to use Compound after an update means you accept the revised policy. Material changes will be noted in the App Store release notes.

14. Contact

WizKidSP aiexploration93@gmail.com