Everything you enter — accounts, balances, transactions, tasks, goals, savings, assets, debts, habits and notes — is stored locally on your device (in the app's storage). We do not collect it, and it is not uploaded to our servers.
If you choose to create an account or sign in, your email address and password are processed by our authentication provider (Supabase) only to authenticate you.
Cloud backup is optional and off until you enable it or tap "Back up". When enabled, a copy of your app data is stored in your own private record on our backend (Supabase) so you can restore it on another device. It is linked only to your account, encrypted in transit, and not sold or shared with anyone else. Your device PIN and biometric settings are never uploaded. You can delete this backup and your account at any time from Account in the app.
The app fetches currency exchange rates from a public rates service so it can convert values. No personal or financial data is sent with that request.
AI features are optional and run only when you tap them. When you use AI financial analysis, smart expense recognition, PDF statement import, or import from a photo, the relevant data — an aggregated summary of your finances, the expense phrase you enter, the text extracted from the statement you choose, or the image itself when you import from a photo or screenshot — is sent through our backend to our AI processing provider (polza.ai), which in turn uses a large language model provider (currently Google Gemini) to produce the result. A screenshot of a bank app can contain amounts, merchant names and balances, so the app asks for your confirmation before sending it. The data is used only to fulfil your request, is not used for advertising, and is not sold. If you never use these features, none of this data leaves your device.
Family sharing is optional and off until you accept an invitation. Each person keeps their own data and their own sign-in; nobody's transactions are moved anywhere. When you accept an invitation, the app publishes a summary of your spending — monthly income and expense totals and amounts per category for the last three months — to our backend, where the person who invited you can see it. Individual transactions, notes, merchant names, account names and dates are not included.
This means another person sees financial figures that belong to you, and you should only accept an invitation from someone you trust. You can stop at any time from Family → Family sharing: the stored summary is deleted from our backend, and it is also deleted automatically if the other person removes you from their family.
Because your data lives on your device, you are in control. You can erase everything at any time via Account → Start fresh in the app, or by uninstalling the app. If you created a sign-in account, you can delete it together with everything stored for it — cloud backup, family links and the shared summary — from Account → Delete account in the app. You can also write to the address below.
Data is stored in your device's app storage. We recommend enabling your device lock and the in-app PIN / biometric lock for additional protection.
CAPITOR is not directed to children under 16 and we do not knowingly collect data from them.
We may update this policy. The "last updated" date above reflects the latest version.
Questions about privacy? Email a9036732817@gmail.com.
CAPITOR · capitor.cloud · Terms of Use · Русская версия