Privacy Policy

Last updated: 11 November 2026

العربية ↓

Pecora ("we", "the app") helps you plan your income, spending, savings and investments. Your financial information is personal, so we collect as little as possible and never sell it. This policy explains what we collect, why, and the choices you have.

1. Using Pecora without an account

Everything you enter (income, obligations, spending, savings goals, investments) is stored only on your phone. We cannot see it.

2. If you create an account

An account is optional. It lets you back up your data and sync it between your phones. When you sign in we process:

• Your email address, to send you a one-time sign-in code and identify your account.
• The data you enter in the app, copied to our database so it can be restored and synced. Each account can only access its own data.

3. Market prices

To show live prices, the app sends the ticker symbols of your holdings (for example "AAPL.US" or gold) and currency pairs to our server, which asks a market-data provider. Your quantities, amounts and identity are not sent to the provider.

If you connect your own Twelve Data API key (Settings → Live prices), the app sends those symbols directly to Twelve Data using your key. Your key is stored securely on your phone only and is never uploaded to our servers. Your use of Twelve Data is also covered by Twelve Data’s own terms and privacy policy.

4. Face ID / fingerprint

If you turn on App lock, your phone checks your face or fingerprint. Pecora never receives or stores biometric data.

5. What we don't do

• No advertising and no ad tracking.
• We don't sell or rent your data.
• We don't connect to your bank accounts.

6. Service providers

We use these companies only to run the service, under contracts that limit their use of your data:

• Supabase: account sign-in and the database for backup and sync.
• Resend: sending sign-in code emails.
• Twelve Data: market prices (receives ticker symbols only).
• Apple App Store / Google Play: app distribution and, for Pecora Pro, subscription payments. We do not receive your card details.

These providers may process data outside your country. Where required, appropriate safeguards are used.

7. How long we keep data

Account data is kept while your account exists. When you delete your account, your account and all synced data are deleted from our servers.

8. Your choices and rights

• Export: Settings → Export my data.
• Delete account: Settings → Account & sync → Delete account. This permanently deletes your account and synced data.
• Erase this phone: Settings → Erase all data.
• You can also ask us to access, correct or delete your data by emailing us (below).

9. Children

Pecora is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

10. Security

Data is encrypted in transit (HTTPS). Database access is restricted so each account can only read its own rows. No method is 100% secure, but we work to protect your data.

11. Changes

If we change this policy, we will update the date above and, for important changes, tell you in the app.

12. Contact

Questions or requests: support@pecora-app.com