Privacy Policy

Last updated: 7 November 2026.

Denarika is a shared family budget for iPhone, iPad and Android made by Andrei Parvatkin, trading as Badas Software, Alanya, Türkiye, one independent developer. This policy describes what the app and this website do with your data, in plain words. If anything here is unclear, write to support@denarika.app.

The short version

• Denarika needs no account, no email, no password to start. The app creates an anonymous ID on first launch. Signing in with Apple or Google happens only if you choose it, to sync your own devices or to share a household budget.
• Your accounts, categories, limits and entries are stored on your device and in an encrypted cloud copy under that ID, in the European Union. In a shared household, the members you invite see the shared budget.
• Denarika never connects to your bank and never asks for bank logins. You enter the amounts yourself.
• The app shows no ads, contains no advertising SDK, and does not track you across apps or websites. It counts anonymous usage statistics (which features get used) with Google Analytics for Firebase, without any advertising identifier, and you can switch that off in Settings.
• Nothing is sold, rented or shared with anyone for marketing.
• You can have everything deleted, in the app or by asking: see delete your account.

What the app stores

Apart from what you type yourself, such as an account name or a note, nothing in that list identifies you by name, email or phone number. The anonymous ID is a random string that means nothing outside Denarika.

Where the cloud copy lives

The cloud copy is stored in Google Firebase (Cloud Firestore), in the eur3 region (European Union). It is encrypted in transit and at rest, and access rules allow each ID to read and write only its own documents and those of a household it belongs to. Google’s privacy policy applies to its infrastructure: policies.google.com/privacy.

The app works offline. Changes made without a connection are written to the cloud copy when the connection returns.

To keep the cloud copy from being abused, the app uses Firebase App Check. When it talks to Firebase, it asks Apple (App Attest) or Google (Play Integrity) to confirm that the request comes from a genuine copy of Denarika on a real device, and sends the resulting token with the request. The token does not contain your budget, your name or your email address. Apple’s and Google’s policies apply to their attestation services.

Account and sync (optional)

Signing in ties your budget to an Apple or Google account, so it comes back on any phone where you sign in and stays the same on all your own devices. Sync between your own devices is free. Signing in is also needed to create or join a shared household. To sign in, the app asks you to sign in with Apple or Google. We then receive the identifier that Apple or Google gives us for your account and, if you choose to share it, an email address (with Apple this can be a private relay address); with Google also your profile name and photo link. They are used only to attach your data to the same account on your other devices and to show who is signed in. They are not used to contact you and are not shared. If you never sign in, none of this is collected.

You can delete the account at any time in the app: Settings → your account → Delete account and data. This deletes the account and all your data, on this phone too; for Apple, the app also revokes its access to your Apple ID.

Shared household (Denarika Family)

With Denarika Family, the owner of a household invites members by a QR code or a link. Each code works once, for about 10 minutes. Everyone in the household sees the same budget: its accounts, categories, limits and entries, and who added each entry. A household has up to 6 members. The owner can remove a member, and anyone can leave. Only people you invite, or who were invited to a household you joined, see the shared budget.

Exchange rates and household notifications

Denarika has one small server of its own, at api.denarika.app, run on Cloudflare:

• Exchange rates. The app downloads the day’s exchange rates from it. That request carries none of your accounts, amounts or entries.
• Purchases. When a Denarika Family subscription starts, renews or ends, RevenueCat notifies the server with the purchase status and the app user ID (your anonymous ID), and the server turns the household’s shared features on or off. No payment details reach it.
• Limit warnings in a household. When a shared limit is close or over, the server sends a push notification through Firebase Cloud Messaging (on iPhone, via Apple’s push service) to every member’s phone. For that, the app registers a push token for your phone and stores it with your household membership. Without a household, limit warnings are shown on your device only and no push token is stored. If you do not allow notifications, nothing is shown on your phone.

Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

Purchases

The optional Denarika Family subscription is bought through the Apple App Store or Google Play. Payment is handled entirely by Apple or Google; Denarika never sees your card or bank details. Purchase status is checked through RevenueCat, which receives the store receipt and an app user ID (your anonymous Firebase ID) so the subscription can be restored on a new device and shared with your household. RevenueCat’s privacy policy: revenuecat.com/privacy.

Crash reports

If the app crashes or hits an error, a report is sent to Sentry so it can be fixed, together with a sample of performance traces (how long screens and requests take). A report contains the device model, operating system version, app version, and the technical stack trace. It does not contain your amounts, account or category names, notes or any personal identifier, and personally identifying fields are switched off. Sentry’s privacy policy: sentry.io/privacy.

Usage statistics

To learn which parts of Denarika people actually use, the app sends anonymous usage statistics to Google Analytics for Firebase. You can switch this off at any time: Settings → Share anonymous usage statistics. When it is off, nothing is sent.

What is sent:

• Events such as “an entry was added”, “the Denarika Family screen was shown”, “a purchase or restore finished”, “a backup file was saved”, “onboarding was skipped”, and which screen was opened. Events carry only small technical details (which screen, which plan, a count), never your amounts, account or category names, notes or any text you typed.
• Three settings, as user properties: whether you have Denarika Family (free or Family), the theme (light, dark or system) and the app’s language. They let us count, for example, how many people use dark mode; they say nothing about who you are.
• Technical and session data Google Analytics collects on its own: a random app-instance ID created on install, device model, operating system, language, app version, when a session starts and how long it lasts, and, on Android, which store link the app was installed from. Purchases made through the App Store or Google Play are recorded with the product and price, not with any payment details.
• Approximate location (country and region), which Google derives from the connection’s IP address; the IP address itself is not stored by Google Analytics.

What is not sent: no advertising ID (IDFA, Android Advertising ID), no vendor ID, no user ID or account identifier, no email. The app-instance ID is not linked to your anonymous account ID, and usage statistics are not combined with data from other apps or used for advertising. Usage statistics are kept for 14 months and then deleted by Google Analytics; a daily copy is exported to Google BigQuery (United States) for analysis and deleted there after 60 days. Google’s policy: policies.google.com/privacy; how Google uses data from apps: policies.google.com/technologies/partner-sites.

Reminders

The daily reminder is off by default. If you turn it on, it is scheduled by your phone’s own notification system, on the device, and nothing about it leaves your phone. The only other notifications are the household limit warnings described above.

Backup file and export

Save a backup file and Export as CSV build a file on your device and hand it to the system share sheet. Where that file goes is entirely your choice; Denarika does not receive a copy. Restore from a backup file reads a file you pick and adds its data to the app; nothing on the phone is deleted. All three are free.

Home-screen widget

The widget, the iPhone shortcut and the Android Quick Settings tile open the app to add an entry. Anything a widget shows is read from a storage area on your device shared between the app and the widget, and does not leave the device.

Emails to support

If you write to support@denarika.app, we receive your email address and your message and use them only to answer you. Send feedback in Settings starts an email to feedback@denarika.app that already contains the app version, your plan, your device model and your anonymous user ID, so we can find your data; you can delete those lines before sending. The same user ID is shown at the foot of Settings.

What the app does not do

• No bank connections and no bank logins.
• No advertising, no ad networks, no ad identifiers.
• No tracking across apps or websites, and no usage statistics at all if you switch them off in Settings.
• No access to your contacts, photos, location, microphone or health data. The camera is used only if you scan a household invite code, and the image stays on your device.
• No selling, renting or sharing of data with third parties for their own purposes.

Third-party services, all of them

Plus Cloudflare, which runs the app’s server at api.denarika.app (exchange rates, purchase status, household notifications) and serves this website: policy.

Retention and deletion

Your data is kept for as long as the anonymous account exists. Uninstalling the app removes the data on that device, not the cloud copy. If you signed in, you can delete the account and everything in it yourself, in the app (see above). If you never signed in, write to support@denarika.app with the User ID shown at the foot of Settings (or use Send feedback, which includes it); we delete everything under that ID within 30 days and confirm by reply. No justification is needed. Crash reports are retained by Sentry for 90 days and usage statistics by Google Analytics for 14 months, then discarded. Step by step: delete your account.

Your rights

If you are in the European Union, United Kingdom or another place with data-protection law, you have the right to access, correct, export and erase your data, and to object to or restrict its processing. Export is built into the app; for the rest, email support@denarika.app. You may also complain to your local data-protection authority.

Children

Denarika is not directed at children under 13 and does not knowingly collect data from them. If you believe a child has used the app and you want the data removed, contact us and it will be deleted.

Security

Data travels over TLS and is protected by the services listed above. Data rests encrypted on Google’s infrastructure and access rules limit every ID to its own records and its household’s. No system is perfectly secure, but Denarika stores as little as it can.

This website

denarika.app is a static site served by Cloudflare. It sets no cookies and runs no analytics script. It has no forms. Cloudflare keeps short-lived request logs (IP address, user agent, page) for reliability and abuse prevention; see Cloudflare's privacy policy.

Changes

When this policy changes, the new version is published here with a new date at the top. Material changes to what the app collects will also be mentioned in the app’s release notes.

Contact

Andrei Parvatkin, trading as Badas Software, Alanya, Türkiye · support@denarika.app

The full postal address and phone number are on the app’s store listing.

← Back to Denarika