Privacy Policy
Last updated 22 August 2026
Your costs stay on your phone. There is no account, and nothing you enter about what you pay is ever sent anywhere. DueFlow does collect a small amount of anonymous usage data, and the section below explains exactly what that is and how to turn it off.
Thank you for taking the time to read this. It covers the DueFlow app for iOS, and it tries to be specific rather than reassuring — you should be able to tell from it precisely what happens to your information.
What stays on your phone
The costs you add — their names, amounts, currencies, billing cycles, due dates, categories, notes and reminder settings — are stored in the app's own storage on your device, along with your settings. None of it is transmitted anywhere, and there is no DueFlow account or login of any kind.
DueFlow also does not connect to your bank or to any financial institution, so it never sees a balance, a card number, or a transaction.
Anonymous usage statistics
To understand whether the app is actually useful — whether people come back, and whether the core features get used — DueFlow records a small number of anonymous events. This is worth being precise about, so here is the whole picture.
Where it goes
The statistics are handled by Umami, an open-source analytics tool running on a server we operate ourselves. It is not Google Analytics and not a third-party service: no advertising network, data broker, or analytics company receives your information, because nobody else is involved.
What is sent
Three events, and nothing more:
- App opened — that a session started.
- Cost added — that a cost was created.
- Marked paid — that a charge was marked as paid.
The events carry no detail about the cost itself. No name, no amount, no currency, no due date, no category, no note. The server learns that something was added, not what it was.
What the server can see from the request
Like any server receiving a request from the internet, ours can see the IP address the request came from, and the technical details your device includes with it. From those it works out two things and then discards the rest:
- An approximate location — country, region and city — looked up from the IP address using a database stored on our own server. No outside service is asked.
- A session number, so a handful of events in one sitting can be counted as one visit rather than three. It is produced by a one-way calculation over the IP address, your device's technical details, and a secret value that changes at least once a month. It cannot be reversed to recover the IP address, and it changes when that secret does, so the same person is not recognisable over time.
Your IP address is never stored. It exists only for the moment the request is being handled, and is not written to the database in any form we can read back.
What is not sent, and not stored
- No account identifier or user ID, because there are no accounts — so the events cannot be attached to a person.
- No cookies, no advertising identifier, and no App Tracking Transparency prompt, since there is nothing here that tracks you.
- Nothing is combined with data from any other app, site or company, and nothing is sold or shared.
Turning it off
If you would rather not take part, you are very welcome to opt out: Settings → Privacy → Share anonymous usage data. Turning it off stops the events immediately, and everything else in the app works exactly as before.
How long it is kept
Usage statistics are kept for up to 12 months and then deleted. Because they are anonymous and not linked to you, we cannot pick out an individual person's events on request — which is also, we think, rather the point.
Notifications
If you turn on reminders, DueFlow asks iOS for permission to send notifications and then schedules them on your device, using the dates and offsets you chose. They are local notifications: they are not pushed from a server, and no information about your costs leaves your phone in order to deliver them. You can withdraw the permission at any time in the iOS Settings app.
Backups you create
DueFlow can export your data as a JSON file. When you do, iOS opens the standard share sheet and you choose where the file goes — Files, iCloud Drive, email, or anywhere else. DueFlow does not upload it and cannot see where you sent it. Once the file leaves the app it is covered by whatever terms apply wherever you saved it.
Restoring reads a file you pick and writes it back into the app's local storage. Nothing is sent anywhere during a restore either.
iCloud and device backups
If you have iCloud Backup or an encrypted local backup switched on, iOS may include DueFlow's data in that backup, as it does for other apps. That part is handled entirely by Apple under Apple's terms rather than by us.
Information Apple receives
Downloading DueFlow from the App Store is a transaction between you and Apple. Apple receives information about that download and, if you have chosen to share analytics with developers, may pass on aggregate anonymised statistics and crash reports. That happens through Apple's systems under Apple's Privacy Policy, separately from anything in the app.
Your data, and deleting it
Everything you enter stays on your device, so there is no account to close and no copy on our side to send you or erase. You already hold the only one.
To remove it all, delete the app. Removing DueFlow from your device removes its stored data with it. Any backup file you exported earlier is a separate file under your control, so do delete that too if you would like it gone.
One thing worth knowing, and we would rather say it plainly than leave it as a surprise: because there is no copy on a server, we have no way to restore your costs if the app is deleted without a backup. If your list matters to you, exporting one every so often is a kindness to your future self.
Children
DueFlow is a general-audience utility rated 4+. It is not directed at children, and it does not knowingly collect personal information from anyone, of any age.
Changes to this policy
If a future version of DueFlow changes what it collects, this page will be updated before that version ships, and the change will be described in the app's release notes. The date at the top always reflects the current version.
Getting in touch
If anything here is unclear, or you would like to ask about your privacy in DueFlow, please write to abduvohid1996@gmail.com — you are very welcome to, and we will do our best to answer properly.