Privacy Policy
Mixiclsh Flow Intellige
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Mixiclsh Flow Intellige is a personal finance planning tool without user accounts. The app stores the information you enter on your iPhone: current balance, an optional local profile name, income and expense names, amounts, dates and recurrence, loan terms, remaining debt and recorded payments, savings goals, simulated changes, currency, language and reminder preferences. Financial records are saved in a local JSON file and sync preferences and revision numbers in app preferences. If you enable optional sync, the app obtains a random installation secret, stores it in the device Keychain and sends a copy of those records and preferences to our backend. The server stores a hash of the installation secret, a revision number and an encrypted latest snapshot. It does not receive a bank login or connect to your bank. When the app or a browser contacts our Railway-hosted service, hosting infrastructure necessarily processes network request information such as IP address, request path, time and status. The application does not add analytics, advertising or third-party crash reporting SDKs.
How we use information
Local information is used to estimate spending capacity, forecast cash flow, calculate loans, display planned payments and goals, and model decisions. Reminders are scheduled locally when you choose to enable them. Optional server sync preserves a latest snapshot for this installation and lets you explicitly restore that copy using the same installation secret. Authorization hashes and revisions isolate installations and prevent conflicting snapshot writes. Network and operational information supports hosting, security and diagnosis. The public website and privacy page work without accounts or cookies. We do not use your financial information for advertising.
Service providers and sharing
Railway hosts the backend and persistent storage and processes the service's infrastructure and network traffic. The server application can decrypt synced snapshots to return them to the authorized installation; this is server-side encryption, not end-to-end encryption. App access logs are disabled and the application does not intentionally log financial payloads, bearer secrets, IP addresses or user agents. Railway may maintain separate infrastructure, request and operational logs under its own practices. Apple provides iOS storage, Keychain, local notification delivery and any device backup services you enable. The app has no bank, email delivery, advertising, analytics, social sign-in or other external data integration. We do not sell personal information. Information may be disclosed if required by applicable law.
Data retention
Local financial records remain until you delete them in the app or remove the app's local data. An installation secret may persist in Keychain beyond app removal under iOS behavior, so use the app's Delete all data action when you want to revoke it. The server retains only the latest snapshot and its installation authorization record until an authorized deletion request succeeds; there is no automatic expiry or application snapshot history. The app schedules up to 60 upcoming local payment reminders when it is used. The backend has no application-configured backup or export job. Hosting logs, provider storage snapshots and device or cloud backups may follow provider-controlled retention and are not assigned a verified fixed deletion period by this policy.
Deleting your information
In Settings, Delete all data clears local financial records and pending notifications, disables sync and removes the active installation secret from Keychain. If a server copy exists, a deletion request removes its active database row and revokes that installation's access. If the network is unavailable, only a deletion credential is retained securely in Keychain so the app can retry removal when connectivity returns or you choose Retry; financial records are not retained for that retry. The deletion credential is removed after success. Keep the app available and reconnect to complete a pending server deletion. Turning sync off alone does not delete an existing server copy. Deletion does not directly erase provider backups or copies in device backups; those follow provider processes. Losing the secret prevents server recovery and may prevent us from locating the corresponding private snapshot. No account-based recovery or transfer to another device is offered.
Permissions and your choices
Notification permission is requested only when you switch on payment reminders. You can turn reminders off in app Settings or withdraw notification permission in iOS Settings at any time. Reminders contain the payment name, amount and date, which may be visible on your lock screen according to your iOS notification settings. The app does not request location, contacts, camera, photo library or microphone permissions. Optional synchronization can be turned off in Settings without preventing local planning. You control device backup permissions and settings through iOS and your Apple services.
Your privacy rights
For privacy questions or requests about access, correction or deletion, contact Dunmore2002@icloud.com. You can review and correct financial entries within the app, restore an existing authorized server snapshot, and delete data through Settings. Depending on where you live, applicable law may provide additional rights to access, correct, delete, restrict or object to processing, request portability or complain to a relevant supervisory authority. We may need enough information to verify a request and identify an installation without requesting unnecessary financial details. Do not email your installation secret. There is no email address or account identity attached to an installation, and we cannot promise recovery after its secret is lost.
Security
The app uses HTTPS for backend requests and an installation-specific random bearer secret kept in the device-only Keychain. Each private request is authorized on the server, and one installation cannot list or retrieve another installation's records. The server stores secret hashes rather than raw secrets, uses revision checks for updates, and encrypts snapshots at rest with AES-256-GCM using a server-side key. The local financial file uses iOS file protection. Request size limits and an installation-creation throttle reduce abuse. No security mechanism guarantees absolute protection. Protect your device and backups, and avoid exposing sensitive financial text in payment titles or notifications.
Children’s privacy
This tool is designed for adults managing personal finances and is not directed at children. We do not knowingly solicit children's information or provide child profiles. If you believe a child has submitted personal information to the optional service, contact Dunmore2002@icloud.com so we can consider an appropriate response with the available installation identification.
Changes to this policy
We may update this policy to reflect changes to the app, hosting or processing. The current policy is available through the app's Privacy Policy link and this public page, with its effective date shown above. Material changes will be described in the updated policy and, when appropriate, in the application. Review the policy when enabling optional synchronization or after an update.