Binder Privacy Policy

Last updated: September 26, 2026

Summary

Binder is a local-first manual bill record. It does not link bank accounts, scan email, verify balances, pay bills, or sell data. You choose what to enter in notes. Optional iCloud sync is off unless you turn it on or accept an invitation.

What stays on this device

• Bill names, owner labels, amounts, due dates, paid status, reminder choices, and notes you enter.

• App settings such as onboarding completion, default reminder time, first handoff PDF state, and last known subscription status.

• Generated handoff PDFs and local JSON exports until you delete them, delete the app, or share them through iOS.

• If you turn on iCloud sync, Binder stores the binder record in your private iCloud database. If you create a household invite, the shared binder record is available to the people you invite through Apple’s CloudKit sharing.

What we do not collect

• We do not receive bill names, notes, exact amounts, exact due dates, PDF contents, local export contents, Apple Account details, contacts, or share recipients.

• We do not access your bank, payment cards, email, photos, calendars, location, or other apps’ data.

• We do not use your bill data for advertising, tracking, credit scoring, financial advice, or model training.

Sharing and exports

Show contact names is optional. With your permission, Binder matches the invitation email or phone number Apple provides against contacts you allow. Matching and display happen only on this device. Contact names are kept in memory, are not added to the shared household or exports, and are never sent to our analytics or servers. You can limit or revoke Contacts access in iOS Settings. Invitations work without contact access.

When you tap Share or Export, iOS may send the PDF, local export, or iCloud household invitation to the destination you choose, such as Messages, Mail, Files, or another app. Binder does not record your share recipients. New invitations are private. Apple verifies invited participants, and the organizer chooses view or edit access. Shared records include bills, bill notes, shared lists and items, shared notes and their saved revisions, amounts, history, and activity attributed to the name you choose and an opaque iCloud identifier. Joining opens a separate binder; it does not share your other binders. Removing access cannot erase a copy someone previously saved or exported. Manage participants through People & access.

Reminders

If you allow notifications, reminders are scheduled locally through Apple’s notification system. Binder reminders can include the bill name, due timing, and amount you entered, but do not include notes, account numbers, or bank credentials. You can change notification access in iOS Settings.

Analytics and diagnostics

Pseudonymous product analytics and diagnostics help us understand whether the app works. Events include event timestamps and may include screen names, button taps, offer experiment assignment, subscription status, and coarse buckets such as bill-count bucket or amount bucket. They do not include bill names, notes, exact amounts, bill dates, list items, note contents, PDF contents, export contents, or recipients.

Third-party services

• Apple In-App Purchase handles payment and subscription management. Family Bill Organizer does not receive or store payment card details.

• RevenueCat helps read subscription entitlement state from Apple’s signed purchase receipt.

• Superwall may present the paywall when configured and may receive anonymous paywall interaction events.

• PostHog receives product analytics tagged for Binder. An opaque analytics identifier links subscription events from RevenueCat, including purchases, renewals, and cancellations, to the product funnel. No household content is sent.

• Apple CloudKit stores binder data only when you turn on iCloud sync or create a household share. Binder does not use iCloud for advertising or analytics.

Your choices

• Archive bills to stop reminders while keeping their history. Export a household backup, payment CSV, or saved PDF from Settings. Backups include activity and are scoped to the selected binder.

• Deleting the app removes its local data from that device; it does not automatically delete copies already shared or stored in iCloud. Keep a backup before removing the app.

• Manage or cancel subscriptions in Apple’s subscription settings.

• Manage or leave a shared binder through Apple’s People & access controls. Local copies are retained for recovery and export.

• Email support to ask for deletion of analytics data tied to an approximate install date or anonymous device record.

Contact

Questions, complaints, or data-deletion requests: harshp.build@gmail.com

Support · Privacy · Terms