Privacy Policy for SparFuchs Finanzplaner
SparFuchs Finanzplaner (“SparFuchs”) is an iPhone app for tracking income and expenses, planning budgets and savings goals, and comparing prices. This Privacy Policy explains what data the app processes, where it is stored, who receives it and what rights you have. It applies to the app, including its widget, and to this website. The German version is the primary version.
Summary
- Your finance data stays on your iPhone. Transactions, wallets, budgets, savings goals, subscriptions and bills are stored only in the app on your device. SparFuchs has no server of its own, no cloud sync and no analytics or crash-reporting tools. We, the developer, can’t see your data.
- An account is optional. You can use all of SparFuchs with “Continue as guest”. If you sign in with Apple or Google, the app only keeps your email address on your iPhone to show it in Profile.
- Ads in the free version, in the EU only with your consent. The free version may show ads from Google AdMob. In the EU and other regions where this is required, the app first asks you in Google’s consent dialog; without your consent it loads no ads and doesn’t start the ads SDK. The app only requests non-personalized ads, and Google can only access your iPhone’s advertising identifier if you also allow tracking in the iOS prompt. With Premium there are no ads.
- Some features use the internet. When you use them, the app turns your location into the name of your city (through OpenStreetMap Nominatim) or loads public offer pages of supermarkets. No finance data is sent.
- You stay in control. You can export your data, create an encrypted backup and delete everything (see “Deleting your data”).
Controller
The controller responsible for processing data in SparFuchs and on this website under the EU General Data Protection Regulation (GDPR) is:
Yunus Emre Coskun
Boxgraben 2, 52064 Aachen, Deutschland
Email: yunusecoskuninfo@gmail.com
In this Privacy Policy, “we” and “us” mean the controller, and “you” means the person using SparFuchs.
1. What is stored only on your iPhone
Everything you enter in SparFuchs is kept in the app’s own storage on your iPhone:
- transactions (amount, type, category, wallet, date and your note), and the categories and wallets you create;
- budgets, savings goals, recurring transactions, subscriptions, bills and the insights the app calculates from them;
- your savings profile (for example grocery budget, household size, shopping frequency, preferred supermarkets and, if you enter it, your city), your smart basket, your watchlist and the price index history;
- settings such as language, currency and savings alerts and, if you use the app lock, your PIN;
- how you are signed in (guest, Apple or Google) and, if applicable, your email address (see section 2);
- whether Premium is active and until when (see section 7), and the time and number of today’s ad breaks so the app can limit them (see section 3).
The widget on your Home Screen shows your total balance. To do this, the app passes only that amount and the app language to the widget through a shared storage area on your iPhone.
This data is not sent to us or to any SparFuchs server. It only leaves your iPhone when you share a backup or an export yourself (see section 9), or as part of your iPhone backup (iCloud Backup or a backup on a computer) if you use one.
Legal basis: the processing is necessary to provide the app you use (Art. 6(1)(b) GDPR). Storing data on your device and accessing it is strictly necessary for this (Section 25(2) no. 2 of the German TDDDG).
2. Signing in with Apple or Google (optional)
On first launch you can choose “Continue as guest”. In guest mode no account is linked, and every feature is available.
- Sign in with Apple: Apple confirms your identity. The app only asks for your email address, not your name. Apple usually only shares the address the first time you sign in, and you can choose an Apple relay address instead of your real one. SparFuchs keeps the email address only on your iPhone.
- Sign in with Google: Sign-in uses Google’s sign-in SDK in the app. Google receives the information needed for sign-in, for example that you are signing in to SparFuchs, and processes it under Google’s Privacy Policy. The SDK gives the app your name, email address and the address of your profile picture, and keeps the sign-in (with sign-in tokens) in your iPhone’s keychain until you log out. Of these, SparFuchs itself only stores your email address on your iPhone.
Signing in only serves to show your account in Profile. There is no user account on a server: we don’t receive your email address or any sign-in credentials, and your data is not synced with the account. If you log out in the app, your data on this iPhone is deleted (see “Deleting your data”).
Legal basis: providing the feature you chose (Art. 6(1)(b) GDPR).
3. Ads in the free version (Google AdMob)
To keep SparFuchs free, the free version may show ads through Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Banner ads appear on the “Subscriptions” and “Recurring Transactions” screens. After you calculate the cheapest split in the smart basket, a full-screen ad may appear, at most every 10 minutes and at most 6 times a day.
Consent before the first ad
For consent, SparFuchs uses Google’s User Messaging Platform, a consent management platform certified by Google. After the free version starts (after unlocking, if the app lock is on), the app uses it to ask Google whether consent is required in your region; Google receives your IP address and technical details of the request. Where consent is required, for example in the EU, the EEA, the United Kingdom and Switzerland, the app shows Google’s consent dialog. Your choice is stored on your iPhone.
- If you consent, in particular to storing and accessing information on your device, the app starts Google’s ads SDK and loads ads.
- If you don’t consent, the app doesn’t start the ads SDK and loads no ads. The ad spaces then only show a note from the app itself, and every feature of the free version stays available.
In Profile → Privacy options you can open the dialog again at any time to change your choice or withdraw your consent. After you withdraw it, the app loads no more ads. Where consent isn’t required in your region, the app loads ads without this dialog, and the “Privacy options” entry doesn’t appear.
What Google processes
SparFuchs only requests non-personalized ads. These are based on context, such as the app and the approximate location derived from your IP address, not on a profile of your interests. Even so, to deliver ads, limit how often they are shown, measure them, prevent fraud and create aggregated reports, Google processes technical data from your device, such as IP address, device type, operating system, language, information about the app, and ad impressions and clicks, and may store and read information on your iPhone (in regions with the consent dialog, only as far as your choice allows). SparFuchs doesn’t share any of your finance data with Google.
Advertising identifier and App Tracking Transparency
Once the app may load ads, iOS asks once whether SparFuchs may track your activity across other companies’ apps and websites. iOS only provides your iPhone’s advertising identifier (IDFA) if you allow this. Google AdMob may then use it to deliver and measure ads, for example how often an ad is shown, and to prevent fraud; the ads stay non-personalized. In Profile → App Tracking you can see your choice and open the prompt. You can withdraw permission at any time in Settings → Privacy & Security → Tracking.
Premium
If Premium is active when the app starts, the app shows no ads consent dialog, doesn’t start the ads SDK and loads no ads. If you buy Premium while using the app, it loads no more ads from the moment of purchase.
Responsibility, transfers and legal bases
For the ads, Google processes this data as an independent controller under its Privacy Policy. Google explains how it uses data for advertising at policies.google.com/technologies/ads. Google may also process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR).
Legal bases: for the ads SDK storing and reading information on your iPhone and for delivering and measuring ads, your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR); for the advertising identifier, additionally your permission in the iOS tracking prompt (also Section 25(1) TDDDG, Art. 6(1)(a) GDPR). For the request to the consent platform and storing your choice, our legal obligation to obtain consent and be able to prove it (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR); storing your choice is strictly necessary for this (Section 25(2) no. 2 TDDDG). Where consent isn’t required, our legitimate interest in funding the free version through non-personalized ads (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with effect for the future, as described above. Premium lets you use SparFuchs without ads.
4. Location (optional)
For the supermarket and tariff comparisons you can enter your city. Instead of typing it, you can tap “Set city from location”. The first time, iOS asks whether SparFuchs may use your location while you use the app. The app only determines your location when you tap this button, never by itself when you open a comparison.
To do this, the app determines your approximate location, rounds the coordinates to about 100 meters and sends them to the Nominatim service of OpenStreetMap, operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Nominatim receives your IP address, the rounded coordinates, the app language and an identifier of the app, and returns the name of the city. SparFuchs doesn’t store the coordinates; at most the city name is stored, and only on your iPhone. The city is for orientation only, because prices are nationwide estimates for Germany.
The OpenStreetMap Foundation processes the request under its Privacy Policy. The United Kingdom is covered by an adequacy decision of the European Commission (Art. 45 GDPR).
Legal basis: your consent, given through the iOS location permission (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time in Settings → Privacy & Security → Location Services → SparFuchs Finanzplaner. Without location access you can type your city or leave it empty.
5. Supermarket prices and offers
When you refresh the supermarket price comparison, load weekly deals or calculate the cheapest split in the smart basket, the app requests public offer pages directly from your iPhone: from edeka.de, rewe.de and lidl.de, and from meinprospekt.de. If a page doesn’t answer, doesn’t answer quickly enough (after about 2.5 seconds) or returns too few prices, the app also requests the next address on its list. This includes the same public page through the r.jina.ai reader service of Jina AI, which loads the page for the app and returns its text. Product images in the offers are loaded directly from the servers given on those pages.
As with any website visit, the operators of these websites, services and image servers receive your IP address and technical details of the request (for example the time, the page requested and an identifier of iOS and the app). They don’t receive any finance data, your basket or your location; the app evaluates the prices on your iPhone. The operators process this data as independent controllers under their own privacy policies.
Legal basis: providing the feature you use (Art. 6(1)(b) GDPR).
6. Tariff comparisons and calculators
The comparisons for electricity, internet, mobile plans and insurance, the cashback comparison and the tax calculator work with reference values built into the app. Your input, for example usage, data volume, household size or salary, is only used on your iPhone and is not sent anywhere.
7. Premium subscription through Apple
You buy the “SparFuchs Finanzplaner Premium” subscription through the App Store. Apple handles purchase, payment, renewal and cancellation and processes your payment and account data under Apple’s Privacy Policy. We don’t receive your payment details or your Apple Account. To check whether your subscription is active, the app asks Apple through StoreKit on your iPhone when it starts and when you return to it, and stores the result (active and until when) only on your device. There is no server of our own that checks purchases. Apple only gives us aggregated sales and subscription reports without your name or contact details.
Legal basis: performance of the subscription contract (Art. 6(1)(b) GDPR).
8. Notifications
If you allow notifications, SparFuchs schedules a daily reminder at 12 noon (German time) on your iPhone and shows savings alerts, for example when your basket has become cheaper after a refresh. These are local notifications: they are created on your device and not sent through a server. You set up savings alerts in Profile → Savings alerts; you turn off all notifications in Settings → Notifications → SparFuchs Finanzplaner.
Legal basis: your consent through the iOS notification prompt (Art. 6(1)(a) GDPR).
9. App lock, backup and export
- App lock: The PIN you set in Profile → Security & Backup is stored only on your iPhone. We can’t reset it.
- Encrypted backup: The app creates a text file on your iPhone with your app data, including your app lock settings, and encrypts it with the backup password you choose (ChaCha20, with the key derived from your password using PBKDF2-HMAC-SHA256 and protected by HMAC-SHA256). In the iOS share sheet you decide where to save the file or whom to send it to. We never receive the file or your password. Your Premium status and your sign-in are not part of the backup.
- Export: Profile → Export data creates an unencrypted file in JSON format (transactions, categories, wallets, budgets, savings goals and subscriptions) or CSV format (transactions). You share this file yourself through the share sheet, too.
Once you share a file, it is with the app, service or person you chose. Please keep it somewhere safe.
10. Information Apple may share with us
Like every App Store developer, we see aggregated App Store statistics from Apple, such as the number of downloads. If you have chosen to share analytics with app developers in your iPhone settings (Settings → Privacy & Security → Analytics & Improvements → Share With App Developers), Apple may also give us crash reports and basic usage statistics. Apple collects this data under its own privacy policy and provides it in a form that doesn’t identify you; it contains no finance data. The legal basis is your consent in Apple’s settings (Art. 6(1)(a) GDPR), which you can withdraw there at any time.
Who receives data
- Apple for the App Store, the subscription, Sign in with Apple (if used) and iPhone backups (if used).
- Google for the consent dialog and ads in the free version, and for Google sign-in (if used).
- The OpenStreetMap Foundation, only when the app turns your location into a city.
- edeka.de, rewe.de, lidl.de, meinprospekt.de, Jina AI and the servers product images are loaded from, only when you load supermarket prices or offers; they receive no finance data.
- Cloudflare when you visit this website, and our email provider when you write to us.
- Apps, services and people of your choice with whom you share a backup or an export.
We don’t sell your data or pass it on to data brokers.
When you contact us
When you email us, we process your email address, your message and any attachments in order to reply. We keep them only as long as needed to handle your request, unless the law requires us to keep them longer. Our email provider processes the message on our behalf. Legal basis: Art. 6(1)(b) GDPR if your message is about the app, otherwise our legitimate interest in answering messages (Art. 6(1)(f) GDPR). Please don’t send us bank statements, PINs or backup passwords; we never need them to help you.
This website
This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc. (USA). When you visit it, Cloudflare processes your IP address and technical data of your request, such as browser type, the page requested and the time, on our behalf to deliver the pages and protect them from attacks. Legal basis: our legitimate interest in providing the website securely (Art. 6(1)(f) GDPR). Cloudflare may also process this data outside the EU, including in the United States. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). This website sets no cookies and uses no analytics and no tracking. For more information, see Cloudflare’s Privacy Policy.
How long data is kept
- Data in the app: until you delete it. SparFuchs doesn’t delete your transactions on its own.
- iPhone backups: may contain SparFuchs data until they are replaced or deleted.
- Backups and exports you shared: wherever you saved them, until you delete them.
- Your choice in the ads consent dialog: on your iPhone until you change it in Profile → Privacy options or delete the app.
- Apple, Google, the OpenStreetMap Foundation, supermarket websites, Jina AI, the product image servers and Cloudflare: under their own rules.
- Support emails: as described under “When you contact us”.
Deleting your data
Because your data is only on your iPhone, you delete it right there:
- Log out: Profile → Log Out, after you confirm, deletes your transactions, wallets, categories, budgets, savings goals, subscriptions, bills, savings profile, basket and settings on this iPhone, ends a Google sign-in in the app and resets the widget. This also works in guest mode.
- Delete account & data: Profile → Delete account & data deletes the same data. If you are signed in with Google, the app also revokes its access to your Google Account.
- Forgot PIN: “Forgot PIN?” → “Reset app” on the lock screen deletes the data in the same way.
- Delete the app: deleting SparFuchs from your iPhone removes all of the app’s data from the device.
Create a backup first if you want to keep your data. This doesn’t cover backups and exports you have shared, your iPhone backups, your choice in the ads consent dialog (see section 3), or data that Apple or Google keep about your sign-in or purchase. You can remove the Sign in with Apple link in your Apple Account settings, and the Google link with “Delete account & data” or in your Google Account. Deleting the app doesn’t end a subscription: cancel it in your Apple Account’s subscription settings.
Your rights
Under the GDPR you have the following rights against the controller. Because we don’t store your app data, you can exercise most of them directly in the app:
- Access and data portability (Art. 15 and 20 GDPR): Profile → Export data gives you your finance data in a machine-readable file (JSON or CSV).
- Rectification (Art. 16 GDPR): you can change your entries in the app at any time.
- Erasure (Art. 17 GDPR): see “Deleting your data”.
- Restriction (Art. 18 GDPR): you can turn off location, tracking and notifications in iOS Settings, and your consent to ads in Profile → Privacy options, at any time, and simply not use the features that go online.
- Withdrawing consent (Art. 7(3) GDPR): for ads in Profile → Privacy options, otherwise in iOS Settings (Location Services, Tracking, Notifications, Analytics). Withdrawal doesn’t affect the lawfulness of processing before it.
- Objection (Art. 21 GDPR): see “Your right to object”.
- Complaint (Art. 77 GDPR): you can complain to a data protection supervisory authority, in particular in the EU member state where you live or work. In Germany, this is usually the data protection authority of your federal state.
- If you live in Türkiye: you also have rights under Personal Data Protection Law No. 6698 (KVKK). See the Turkish version of this policy.
For data that Apple, Google or other providers process as independent controllers, please contact those providers directly. We are happy to help with any question: yunusecoskuninfo@gmail.com.
Your right to object
Right to object (Art. 21 GDPR): Where data is processed on the basis of our legitimate interest (ads in regions where consent isn’t required, answering emails, providing this website), you have the right to object to this processing at any time on grounds relating to your particular situation. To object, email yunusecoskuninfo@gmail.com.
No automated decisions
Budget suggestions, savings alerts and comparisons are calculated by the app on your iPhone. They are suggestions for you, have no legal effect on you and don’t affect you in a similarly significant way (Art. 22 GDPR).
Do you have to provide data?
No. You have no legal or contractual obligation to provide data. Without entries, however, SparFuchs has nothing to analyze for you. An account, location, consent to ads, tracking and notifications are optional; the app keeps working without them.
Security
iOS protects the data on your iPhone when you use a device passcode; you can also turn on the app lock. All of the app’s internet connections are encrypted (HTTPS); the app doesn’t allow unencrypted connections. To keep your data out of the app switcher, the app covers its content when it goes to the background. No system is completely secure, so please keep backups and exports somewhere safe, too.
Children
SparFuchs is a finance app for adults and is not directed at children.
Changes to this Privacy Policy
We update this Privacy Policy when the app or the law changes. The date at the top shows when it was last changed.
Contact
Questions about this Privacy Policy or your data? Email yunusecoskuninfo@gmail.com.
Yunus Emre Coskun, Boxgraben 2, 52064 Aachen, Deutschland