Privacy Policy
Effective date: 17 October 2026
In short
- Your financial data stays on your phone. We, the developer, cannot see it.
- No ads, no analytics, no tracking and no accounts. We never sell or share your data.
- Data leaves your phone only for features you choose to use — each of them is listed below.
- Shared wishlists and support messages are stored with Google Firebase in the European Union.
1. About this policy
Chekly is an app for tracking expenses, receipts, budgets and wishlists on iPhone, Apple Watch and Android. It is made by an independent developer (“we”, “us”). This policy explains what information the app and this website (including the wishlist page and the support form) handle, why, and what choices you have.
You can contact us at any time through the support form.
2. Data that stays on your device
Everything you enter in Chekly — accounts, transactions, categories, budgets, savings goals, notes, receipt photos and settings — is stored in a database inside the app on your device (SwiftData on iPhone, Room on Android).
We do not have servers that receive this data, and we cannot see it.
Receipts, screenshots and bank notifications are read on your device. Images and their text are not uploaded anywhere for recognition. On Android, the document scanner and barcode scanner are Google ML Kit components that run on the device; Google Play services may collect limited technical diagnostics about these components under Google’s own policies.
If you lock the app with Face ID, Touch ID or a fingerprint, the check is done by your phone’s operating system. Chekly never receives biometric data.
3. iCloud sync (iPhone, optional)
If you turn on iCloud sync, your Chekly data is also stored in your private iCloud database (Apple CloudKit) so it can appear on your other Apple devices. This storage is provided by Apple under the Apple Privacy Policy. Only you can access it — we cannot.
4. Backups
A backup you create in Chekly is a file that you control: you decide where to save it and whom to share it with. It contains your Chekly data and the anonymous key that lets you keep editing your wishlists on a new phone, so keep it private.
On Android, if automatic device backup is turned on in your phone’s settings, Android may include Chekly’s data in your Google account backup. This is managed by Google and your device settings.
5. What we don’t do
- No advertising and no advertising identifiers.
- No analytics, no crash-reporting services and no tracking of any kind.
- No registration, no user accounts and no profiles.
- We never sell, rent or share your data with data brokers or advertisers.
6. Internet connections the app makes
Chekly works offline. It connects to the internet only in the following cases:
- monobank — only if you connect your monobank account. Your personal token is stored in the iOS Keychain or protected by the Android Keystore, and it is sent only to monobank’s official API (api.monobank.ua) to download your transactions and balances. You can disconnect at any time; the token is then deleted from your device.
- State Tax Service of Ukraine (cabinet.tax.gov.ua) — when you scan a Ukrainian fiscal receipt with a QR code or paste such a link, the app sends only the parameters printed in the QR code (receipt number, cash register number, date and time, amount) to get the official receipt. The photo and its text stay on your device.
- Electronic receipt links (for example Checkbox or Vchasno.Kasa) — only when you paste a link, the app downloads that receipt from the address in the link (for Checkbox also from its public receipt service api.checkbox.ua). Nothing from your phone is uploaded.
- Exchange rates — the app downloads public exchange rates from central banks (for example the National Bank of Ukraine, Narodowy Bank Polski, the Czech National Bank and the European Central Bank). No personal data is sent.
- Product links in wishlists — when you paste a link to a product, your device downloads that product page directly from the shop to fill in the name, photo and price.
- Wishlists — see section 7.
- Purchases — see section 9.
As with any internet request, the server you connect to can see your IP address and basic technical information about your device or browser. Those services are run by third parties under their own privacy policies.
7. Wishlists (Google Firebase)
Wishlists are the only feature where your content is stored online. They use Google Firebase, with Google acting as our service provider. If you never create or open a shared wishlist, no data is sent to Firebase.
- Anonymous account. When you first use wishlists, the app (or the wishlist web page) creates an anonymous Firebase account: a random ID with no name, email or phone number. The app keeps this ID on your device so that only you can edit your lists. The web page keeps it in your browser’s local storage so that you can cancel your own reservation.
- What is stored. The list title, the display name you enter as the owner, the event date, an optional note, and the items (title, link, image link, price, currency, shop name and note). When a friend reserves a gift, the name they enter, their anonymous ID and the time are stored with that item.
- Where. In Cloud Firestore, in the European multi-region “eur3” (data centres in the EU).
- Who can see it. Anyone who has the link to a list can view it. Links are long and random, and lists cannot be searched or browsed, but anyone you send the link to can forward it. Don’t put sensitive personal information in a wishlist. To keep the surprise, the app hides from the owner who reserved which gift.
- Deleting. You can edit or delete your list at any time in the app. Deleting a list removes the list, its items and all reservations from Firestore. A friend can remove their own reservation at any time. If you no longer have access to the app, contact us through the support form with the link to your list and we will delete it.
Learn more in Firebase’s privacy information and the Google Privacy Policy.
8. Support form
When you send a message through the support form, we store: your message, the contact you choose to give (optional), the topic, your device type, the page language, the time, and an anonymous Firebase ID. This is stored in Google Firebase (Cloud Firestore, EU). It cannot be read through the public website, and we use it only to answer you and improve Chekly.
We keep support messages only as long as needed to handle your request. You can ask us to delete your message at any time.
9. Purchases and subscriptions
Chekly Pro is sold through the Apple App Store and Google Play. Apple or Google processes your payment under their own terms and privacy policies. We never receive your name, card details or billing address — the app only receives confirmation from the store that your subscription is active.
10. Permissions
Chekly asks for a permission only when you use the feature that needs it. You can turn any permission off in your phone’s settings.
- Camera and photos — to scan or attach receipts.
- Notifications — for reminders and alerts you set up.
- Notification access (Android) — only if you turn on automatic import. Chekly reads only notifications from supported banking apps to create transactions. They are processed on your device and are never sent anywhere.
- Shortcuts automations (iPhone) — if you set up automatic import from Apple Pay or bank SMS, these automations run on your device in Apple’s Shortcuts app.
- Face ID, Touch ID or fingerprint — to lock the app, if you turn this on.
11. This website
This website uses no cookies, no analytics and no trackers, and it loads nothing from third-party sites. It is hosted on Firebase Hosting (Google), which processes standard technical data such as your IP address and browser type to deliver the pages and protect against abuse.
The wishlist page and the support form use your browser’s local storage to remember your anonymous ID, the name you entered and when you last sent a message. This information stays in your browser, and you can clear it in your browser settings.
12. Legal bases and your rights
If you are in the European Economic Area, the United Kingdom or a country with similar laws, we process personal data in order to provide the features you ask for (performance of a contract), to answer your requests and keep the service secure (legitimate interests), and with your consent where it is required (for example notification access).
You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to lodge a complaint with your local data protection authority. Because Chekly has no accounts, most of your data exists only on your device and is fully under your control. For wishlists or support messages, contact us through the support form; we may ask for the list link to find the data.
13. International transfers
Wishlist and support data is stored in the European Union. Google may process limited data in other countries; such transfers are protected by safeguards such as the European Commission’s Standard Contractual Clauses. iCloud data is handled by Apple under its own terms.
14. Children
Chekly is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has sent us personal information through a wishlist or the support form, contact us and we will delete it.
15. Data retention and deletion
- On your device: until you delete it in the app or delete the app.
- iCloud: until you delete it. Open the Settings app → your name → iCloud → manage storage → Chekly.
- Wishlists and reservations: until the owner deletes the list (or a friend cancels their reservation).
- Support messages: only as long as needed to handle your request, or until you ask us to delete them.
- monobank token: until you disconnect monobank or delete the app.
16. Security
All connections use encryption (HTTPS). Secrets such as the monobank token and the anonymous wishlist key are kept in the iOS Keychain or encrypted with a key from the Android Keystore. Firebase security rules allow only the owner to change a wishlist, allow friends to change nothing but their own reservation, and make support messages unreadable from the outside. No system is perfectly secure, but we work to protect your information.
17. Changes to this policy
If we change this policy, we will publish the new version on this page and update the effective date. If the changes are significant, we will also let you know in the app.
18. Contact
Questions or requests about privacy? Write to us through the support form — choose the topic “Question”. We usually reply within a few days.