# Privacy Policy
**Last updated:** July 6, 2026
## Overview
Riven ("we", "our", or "the app") is a fully offline expense manager. Your privacy is built into the app's architecture — all your financial data stays on your device and is never transmitted to our servers.
## Data Collection and Storage
### Information Stored Locally
Riven stores the following data exclusively on your device using local SQLite databases and SharedPreferences:
- **Personal information:** Your name (optional, used for local personalisation)
- **Financial data:** Account names, balances, transaction history, budgets, savings goals, and categories
- **Preferences:** Theme selection, accent colour, currency, language, week start day
- **App settings:** Onboarding completion status, feature usage counters
### Information NOT Collected
Riven does **not** collect, transmit, or share:
- Your name, email address, or any contact information
- Your financial data or transaction history
- Device identifiers, IP addresses, or location data
- Usage analytics or crash logs
- Any biometric or sensitive personal data
## Internet Permissions and Network Communication
Riven is designed as an offline-first app. Network communication is limited to:
1. **In-app purchases:** Purchase verification is handled through the platform's billing service (Google Play or Apple App Store). No purchase details are sent to our servers.
2. **Subscription validation:** A one-time request to a Cloudflare Worker is made solely to verify subscription status. No personal or financial data is included in this request.
3. **Future ad serving (planned):** If ad support is added in a future version (V13+), ad requests will be handled by the Google Mobile Ads SDK. No financial data is shared with ad providers.
## Third-Party Services
| Service | Purpose | Data Shared |
|---------|---------|-------------|
| Google Play Billing / Apple StoreKit | In-app purchase processing | Purchase token (platform-managed) |
| Cloudflare Worker | Subscription status validation | None (anonymous request) |
| Google AdMob (future) | Ad serving | Non-personal ad identifiers only |
## Data Security
Since all data is stored locally on your device, Riven relies on your device's built-in security (screen lock, encryption). We recommend enabling device-level security to protect your financial data.
## Data Export and Deletion
You can export all your data at any time via the app's backup feature (CSV/Excel format). To delete all data, simply uninstall the app — this removes all locally stored information permanently.
## Children's Privacy
Riven is not directed at children under 13. We do not knowingly collect any data from children.
## Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.
## Contact
If you have questions about this privacy policy, please open an issue at our repository.