Privacy
We Collect Nothing
The Actualist project and its developer do not collect, receive, keep, sell, or share your data. Actualist has no user accounts, cloud service, analytics, advertising, tracking, or developer-operated backend.
The project website is static. It does not set cookies or collect analytics.
Your Data Stays With You
Actualist keeps a local copy of your budget on your device and syncs directly with the Actual Budget server you choose. Your saved sign-in details and budget encryption keys stay in the system Keychain.
Optional connections run only when you choose them and contact only your server, a service you configure, or an Apple-provided system picker. The developer does not receive that data. App extensions use limited on-device data without your sign-in details, and notifications are generated locally.
Exports
Files you export leave the app only through the iOS share sheet, to the place you pick. An exported budget ZIP is not encrypted, so share it only with people and places you trust.
Services You Choose
Your server and any identity, financial-data, hosting, or other service you choose have their own privacy practices. Actualist does not operate them.
Apple may collect beta usage, crash, and diagnostic information when you use TestFlight. Information you submit in a GitHub report is handled by GitHub. Review attachments and never include passwords or financial details.
Backups and Deletion
Local budget data, changes waiting to upload, recovery copies, and shared extension data are excluded from device backups. Synced changes can be restored from your Actual server. Changes still waiting to upload cannot.
Use Disconnect and Erase Data in Actualist to remove local budgets, saved sign-in details, and shared extension data. Use it before uninstalling so nothing is left in the Keychain. Erasing data on this device does not delete anything from your server or revoke access at other services.
Contact
For a privacy question, open a GitHub issue that contains no sensitive information. For a security issue or a report containing sensitive details, follow SECURITY.md.