Skip to content

Privacy Policy

Effective November 4, 2026

What you log stays on your iPhone. The only thing on our server is your account: your name, your email and the Apple or Google ID you signed in with. If you buy Plus, a record of the purchase is kept too. We can’t see your entries, and we don’t sell or share anything.

Who we are

Ctrl Log is made by Mario Noriega, an individual established in Guatemala City, Guatemala, trading as Ctrl Log (“Ctrl Log”, “we”). We decide how the information below is used. Write to [email protected], or to 41 Avenida 15-49, Zona 5, Jardines de la Asunción Sur, Guatemala City, Guatemala.

What we collect

Your account. You sign in to Ctrl Log with Apple or Google. Our server keeps:

  • your name and email address, as Apple or Google gives them to us. If you choose Hide My Email with Apple, we only get Apple’s relay address;
  • the ID Apple or Google uses for you, and which of the two you signed in with;
  • if you use Sign in with Apple, a token from Apple that lets us cancel Ctrl Log’s access when you delete your account;
  • the date the account was made.

We use these only to sign you in and keep your account working. Your iPhone keeps a sign-in token in its Keychain. It lasts 30 days and renews while you use the app.

Purchases. If you buy Ctrl Log Plus, the app sends the purchase (which plan, when it started and renews, and its App Store transaction ID) to RevenueCat, which keeps it under your account’s ID so Plus follows you to any iPhone you sign in on. RevenueCat also sees your device’s system and app version and its IP address. Apple still handles the payment, and we never see your card.

Server logs. When the app talks to our server, our hosting provider records the request, including your IP address, so the service runs and can be protected from abuse.

Nothing else. No analytics, no advertising, no tracking and no crash-reporting code from anyone. We never receive your entries, budgets, accounts, jars, receipts, money chat or photos.

Where your entries live

On your iPhone, in Ctrl Log’s own storage. The Ctrl Log widget reads the same storage on the same phone. Signing out or deleting your account doesn’t touch them. Deleting an entry removes it, and deleting the app removes everything.

If you back up your iPhone to iCloud or a computer, Ctrl Log’s data is part of that backup, the same as any other app. Those backups are covered by Apple’s privacy policy, not by us.

What happens on the phone

  • Reading what you type and Ask about your money use Apple Intelligence on the device. Your words are not sent anywhere, and the chat history stays on the phone.
  • Speaking uses your iPhone keyboard’s dictation. Dictation is Apple’s, and Apple’s Siri and Dictation privacy notice covers it.
  • Apple Pay logging receives the amount and store name from your own Shortcuts automation, on the phone.
  • Receipt scans are read on the phone with Apple’s text recognition. The photo is not saved or sent.
  • Budget alerts and the free-trial reminder are notifications your phone creates itself.

Who else is involved

We don’t sell or share personal information, and we don’t use it for advertising. These providers help run Ctrl Log:

  • Apple runs Sign in with Apple, sells Ctrl Log Plus, and provides Apple Intelligence, dictation, Apple Pay and Shortcuts, under Apple’s privacy policy.
  • Google runs Sign in with Google, under Google’s privacy policy. We ask Google only for your basic profile: name, email and ID.
  • Vercel runs our server, in the United States.
  • Neon stores the account database, in the United States.
  • RevenueCat keeps the Plus purchase records, in the United States.
  • Cloudflare serves this website.
  • iCloud Mail receives the emails you send us.
  • Apple’s Share With App Developers. If you turned it on in iPhone Settings, Apple sends developers anonymous crash reports and usage numbers. You can turn it off in Settings › Privacy & Security › Analytics & Improvements.

We would only disclose account information if the law required it.

International transfers

Our server, our database and RevenueCat are in the United States, so if you live elsewhere your account information is transferred there. Our providers’ data processing terms, including the European Commission’s Standard Contractual Clauses, cover those transfers.

Why we’re allowed to use it

For people in Europe and the UK: we use your account information because it’s needed to give you the account you asked for (contract), and server logs because keeping the service secure is a legitimate interest. We keep emails you send us to answer them.

Purchases

Ctrl Log Plus is sold through the App Store. Apple handles the payment, and we never see your card. The app asks Apple and RevenueCat whether your subscription is active.

How long things are kept

  • Entries: on your iPhone until you delete them or the app.
  • Your account: until you delete it. It leaves our database at once, and our database provider’s restore history drops it within 7 days.
  • Purchase records: at RevenueCat until you delete your account. Apple keeps its own record of the subscription.
  • Server logs: up to 30 days.
  • Emails: while we help you, and deleted when you ask.

Deleting your account

In the app, open Settings › Account › Delete account. That deletes your name, email and IDs from our server and, if you used Sign in with Apple, cancels Ctrl Log’s access at Apple, and deletes your purchase record at RevenueCat. Your entries stay on your iPhone; delete the app to remove them. You can also ask at [email protected]. Deleting your account doesn’t cancel Ctrl Log Plus: Apple bills it, so cancel it in iPhone Settings › your name › Subscriptions.

Your rights

Wherever you live, you can ask what we hold about you, have it corrected or deleted, and get a copy. In Europe and the UK (GDPR) you can also restrict or object to how we use it, and complain to your local data protection authority. In California (CCPA/CPRA) you can know, delete, correct and get a copy of your information, and won’t be treated differently for asking; we don’t sell or share it. Your entries are already in your hands: edit, export or delete them in the app. For anything else, write to [email protected] and we’ll answer within 30 days.

Export

You can export your entries as a CSV file at any time, whether or not you pay for anything. You choose where it goes, through the iPhone share sheet.

Security

Your entries are protected by your iPhone’s built-in encryption, which is on whenever your iPhone has a passcode. The sign-in token sits in the iPhone’s Keychain, the app only talks to our server over HTTPS, and our database provider encrypts the account database.

Children

Ctrl Log is not directed at children under 13, or under the minimum age for digital services in your country. If a child made an account, write to us and we’ll delete it.

This website

ctrllog.app sets no cookies and runs no analytics or tracking pixels. Cloudflare, which serves the site, processes your IP address to deliver pages and block attacks, under Cloudflare’s privacy policy.

Changes and contact

If this policy changes, the new version will be posted here with a new date. If it changes what we collect, we’ll also email the address on your account. Questions go to [email protected].