Privacy Policy

Last updated: October 14, 2026

Cairn Harmony ("the App") helps you keep track of your money, time, relationships, goals and well-being. It is built local-first: your data lives on your device, and we, the developer of Cairn Harmony, do not run any server that receives it. This policy explains what the App does with your data.

In short

• No account and no sign-up.
• Your data is stored on your device in an encrypted database.
• We operate no servers and collect none of your content.
• No analytics, no advertising, no tracking and no third-party SDKs.
• Optional iCloud sync is end-to-end encrypted. We cannot read it.
• Data imported from Apple Health stays on your device.

1. Data stored on your device

Everything you enter, such as transactions, accounts, budgets, activities and schedules, people and interactions, goals, mood check-ins, notes and settings, is stored in a database on your device. The database is encrypted at rest with SQLCipher. The encryption key is created on the device and kept in the iOS Keychain with "this device only" protection, so the key never leaves the device.

2. What we collect

Nothing. The App has no account system, contains no analytics, advertising or tracking code, and includes no third-party SDKs. We do not receive your content, your identity, or information about how you use the App.

If you have chosen in iOS to share analytics with app developers, Apple may give us anonymous crash reports and aggregate App Store statistics. Apple controls this, and you can turn it off in Settings › Privacy & Security › Analytics & Improvements.

3. Optional iCloud sync and iCloud backup (Plus)

iCloud sync and iCloud backup are part of Cairn Harmony Plus (subscription or Lifetime). They stay off until you turn them on. When they are on:

• Your records are encrypted on your device with AES-GCM before they are uploaded.
• The encryption key is kept in your iCloud Keychain and can also be protected with a passphrase you choose.
• The encrypted records are stored in your own private CloudKit database in your iCloud account. We have no access to it and cannot read it.
• Apple stores this data under the iCloud Terms and Conditions and the Apple Privacy Policy. It counts toward your iCloud storage.
• Data imported from Apple Health is never included (see section 4).

If you lose both your iCloud Keychain and your passphrase, the synced copy cannot be decrypted, by you or by us.

4. Apple Health

If you allow it, the App reads data from Apple Health, such as sleep, workouts, active minutes and similar daily metrics. It reads only the types you grant, and it never writes to Apple Health. You can change access at any time in Settings › Health › Data Access & Devices.

Data imported from Apple Health:

• stays on your device and is never uploaded to iCloud, neither through sync nor through iCloud backup;
• is never shared with third parties and never used for advertising, marketing or data mining;
• is used only to show the health and well-being features of the App to you.

Sleep or workout entries you type in yourself, and your mood check-ins, are your own journal entries rather than Apple Health data. They are included in iCloud sync (encrypted as described above) only if you turn sync on.

A backup file you export yourself (section 7) can include data imported from Apple Health. You decide where that file is stored and who you share it with.

5. Other permissions

Each permission is optional and is requested only when you use the related feature. Processing happens on your device.

• Location: to save places and detect visits, for example to remind you to log spending when you leave a place. Your location, places and visits are never uploaded. When you search for a place or pick one on the map, the search text and map position are sent to Apple Maps to return results and an address; Apple handles this under its own privacy policy and we do not receive it.
• Calendar: read-only access to your events, to suggest activities for your day.
• Motion & Fitness: to recognize walking and travel for your daily timeline.
• Contacts: the App uses the iOS contact picker, so it receives only the contact you pick. It has no access to your full address book.
• Camera: used only when you tap the scan button in an amount field, to scan a receipt with the iOS document camera. The photo is kept in memory only while the App reads its text with Apple's on-device text recognition. It is not saved in the App, in your photo library or in iCloud, and it is never uploaded. The App keeps only what you then save: the amount it read and, in "Add transaction", the store name as the note if the note is empty.
• Microphone & Speech Recognition: used only when you tap the mic button on Today’s activity timeline to log an activity by voice. What you say is turned into text by Apple’s speech recognition: on your iPhone when it supports that language, otherwise (for example Vietnamese) the audio is sent to Apple’s servers to be recognized, like Dictation, and Apple handles it under its own privacy policy. We never receive your voice or the transcript, and the App does not keep the audio; it keeps only the activity you then save. You can hide the mic button in Settings › Privacy.
• Notifications: reminders are scheduled locally on your device.

Meditation ambient sounds are generated on your device; nothing is streamed. Apart from iCloud sync (if you turn it on), Apple Maps, and purchases through the App Store, the App's features work without a network connection.

6. Purchases

Purchases are processed by Apple through the App Store. We do not receive your name, Apple ID or payment information. The App checks what you have purchased on the device, using Apple's signed transaction information.

7. Export and deletion

• Export: in Settings › Data & backup you can export a backup file to a location you choose. If you set a password, the file is encrypted. The file can contain all of your data, including data imported from Apple Health, so keep it somewhere safe.
• Delete all data: Settings › Data & backup › "Delete all data" erases everything on the device and, if you used iCloud sync, deletes the App's records from your iCloud.
• Deleting the App removes all data stored on the device. Copies in iCloud are removed with "Delete all data" (before deleting the App) or in iOS Settings › [your name] › iCloud › Manage Storage.

Because we hold none of your data, we cannot recover it for you or delete it on your behalf.

8. Children

The App is not directed at children under 13 and we do not knowingly collect data from children.

9. Changes

If we change this policy, we will update the date above and publish the new version in the App and at cairnharmony.app.

10. Contact

Questions about privacy: [email protected]