Last updated: 8 July 2026
pfolio ("we", "the app") is a personal net-worth and asset tracker. This policy explains what we collect and how we protect it. In short: your financial data is end-to-end encrypted and we cannot read it.
We do not collect contacts, location, advertising identifiers, or bank credentials.
Solely to provide the service: authenticate you, store and sync your encrypted vault, show live prices, and keep the service secure. We do not use your data for advertising or profiling.
The receipt-scan feature uses your camera only when you choose to scan a receipt. Photos are processed to extract transaction details; we do not store the raw image beyond what is needed to create your draft transaction, which is itself encrypted.
We do not sell or rent your data. Encrypted data is stored with our infrastructure provider (Google Cloud Firestore). AI-assisted receipt parsing may send the receipt image to our AI provider solely to return the extracted fields. We share data only when legally required.
We keep your data while your account is active. You can permanently delete your account and all associated data at any time in Settings → Delete account, or by emailing us. Deletion is immediate and irreversible.
End-to-end encryption (libsodium), encrypted transport (HTTPS), and optional biometric unlock. Because we never hold your key, no one — including us — can read your vault.
pfolio is not directed to children under 18 and we do not knowingly collect their data.
Questions or requests: [email protected].