Tinward

Privacy policy

Last updated 5 November 2026. This covers two separate things: the website (this site) and the Android app.

This website preview

Email signup, deletion forms and other account APIs are disabled on this static preview. We do not collect early-access email addresses or send emails from this deployment. Supabase and Resend are not connected.

The temporary HTTPS connection is provided by Cloudflare. Cloudflare and the hosting infrastructure process network requests, including IP addresses, to deliver and protect the website. There are no advertising trackers or financial-data uploads.

Downloading the APK takes you to GitHub, which handles that request under its own privacy policy.

The Android app

The app is open source and, at the time of writing, still in early development. In the current code:

  • transactions, the original SMS text and learned merchant categories are kept in a local database on your device;
  • the manifest requests READ_SMS and RECEIVE_SMS to import and capture financial messages, and does not declare the INTERNET permission;
  • there is no finance-data upload and no analytics integration;
  • Android application backup is disabled;
  • the local database is not currently encrypted by Tinward.

You can verify this in the source code. This section describes the code as of the date above and will be updated before any public release.

Contact

For questions that don't involve personal data, open an issue on GitHub. Do not post personal financial information in public issues.