Privacy Policy

Last updated: October 2026

WhereILostMyCash is a personal finance app that keeps your money data on your phone. There is no WhereILostMyCash account and no server that holds your data. The app sends anonymous crash reports and usage statistics, and never your financial data.

Data stored on your device

Your accounts, transactions, categories, recurring items, investment holdings and trades, price history and exchange rates are stored in a database on your device. Your settings (home currency, theme, auto-lock delay) are stored on your device too. None of this is sent to us, and we have no copy of it.

If you set a PIN, only a salted hash of it is stored, never the PIN itself. Fingerprint and face unlock are handled by your phone's operating system: the app only learns whether the check succeeded and never sees your biometric data.

No accounts or ads

You don't sign up or log in. The app contains no advertising or push-notification SDKs and does not track you. It works fully offline, except for the two optional data sources and the anonymous statistics described below.

Third-party services

To show exchange rates and investment prices, the app sends a few requests directly from your device to these services. Like any web request, each one reveals your device's IP address to that service. No account, name, balance, amount or transaction is ever sent.

Exchange rates (cdn.jsdelivr.net, and latest.currency-api.pages.dev if the first host does not answer) — daily rates published by the fawazahmed0 currency-api, with no API key. The request contains only your home currency code in the URL. No account name, balance, or transaction is sent.

Yahoo Finance (query1.finance.yahoo.com) — provides investment prices and symbol search. A price request contains the ticker symbol of a holding (for example AAPL or BTC-EUR). A search request contains the text you type in the asset search box. Subject to Yahoo's Privacy Policy.

If you use no foreign currencies and hold no investments, these requests carry nothing specific to you. If either service is unreachable, the app keeps working with the last rates and prices it stored.

Anonymous crash and usage statistics

WhereILostMyCash collects anonymous crash and usage statistics to find and fix problems. A random identifier is generated on first launch and stored on your device. It is never linked to your name, email or any personal information, and it is not derived from any device identifier. The app does not use the Advertising ID or other device identifiers. Firebase keeps its own installation identifier, which resets when you reinstall the app or clear its storage.

Firebase Crashlytics — records crash reports and the app screen you were on when a crash occurred, together with your random identifier, the app version, and your device model and Android version. No financial data, names, notes or file contents are attached to crash reports. Subject to Google's Privacy Policy.

Firebase Analytics — collects Firebase's automatic usage statistics: when the app is installed and opened, how long sessions last, the app version, and the device model and Android version. Firebase derives an approximate region from your IP address. The app sends no custom events, so nothing about which accounts, transactions or features you use, and nothing you type, is sent. Subject to Google's Privacy Policy.

Crash reports and statistics are sent over an encrypted connection to Google, which can see your device's IP address like any web service does. Erase all data in Settings also deletes the random identifier, and a new one is created the next time you open the app. Statistics already sent are kept by Google under its own retention rules.

Device backups

On Android, WhereILostMyCash turns off the operating system's automatic backup and device-to-device transfer for app data. Your SQLite database, settings, and encryption keys are not copied to Google's cloud backup or to another phone via Android's transfer tools. If you move to a new phone, use Settings → Export all data (CSV) on the old device and Import from CSV on the new one.

WhereILostMyCash is not offered on iOS at this time.

Files you export or import

Settings → Export all data (CSV) creates a file with all your data and opens your phone's share sheet. The file goes wherever you choose to send or save it, and it is not encrypted, so keep it somewhere safe.

Settings → Import from CSV reads a file you pick (a WhereILostMyCash backup, or your own file in the same CSV format). The file is read on your device only.

Permissions

On Android, the app declares these permissions:

• Internet, for the two services above and for the anonymous statistics.
• Biometric and fingerprint, only used if you turn on fingerprint or face unlock.
• Network state, wake lock and install referrer, added by the Firebase libraries so they can send the anonymous statistics. The app does not use them itself.
• Vibrate, a standard permission included by the app framework. The app does not currently use it.

It does not ask for your location, contacts, photos, files, camera or microphone, and does not send notifications. Files you import or export go through the system file picker and share sheet, which need no permission.

Deleting your data

Because all your data lives on your device, you control it completely. Open Settings → Erase all data to delete every account, transaction, recurring item and investment and reset the categories. Uninstalling the app deletes its data from your device too. Copies in your phone's backups or in files you exported are removed through those backups or files.

Children

WhereILostMyCash is not directed at children under 13 and collects no personal information from anyone.

This website

This website uses Cloudflare Web Analytics to count visits. It sends Cloudflare a record of each page view: the page address, the page that referred you, how long the page took to load, and your browser, operating system and device type. Cloudflare works out your country from your IP address, and says it does not use it to identify or fingerprint you; we see only aggregate counts. It sets no cookies and stores nothing on your device. Cloudflare says it does not follow you across other sites or build a profile of you. You can switch it off with a content blocker, and the site works the same without it. Subject to Cloudflare's Privacy Policy.

The WhereILostMyCash pages are part of bruneditolabs.com — see also the Brunedito Labs website privacy policy.

Changes to this policy

If the app starts to handle data differently, this page will be updated before the new version is released, and the date at the top will change.

Contact

Questions about this policy? Email privacy@bruneditolabs.com.