BankerYour data belongs to you.
Last updated: 12 October 2026
In short. Banker requires no developer-managed account, shows no ads, and includes no tracking or analytics. The raw connected-account feed stays on your device; only expenses you approve can join your budget in your own iCloud. The developer operates no server that receives this data.
1. Developer and contact
Banker is an iOS app developed by Enzo Casella. For privacy questions, email meteore.provenant1f@icloud.com.
2. Data collected by the developer
No automatic collection by the app. The app does not send your personal or financial data to the developer. There is no sign-up, developer-managed account, or first-party server. Third-party providers still receive the minimum data required for requested features, as described below. If you voluntarily contact support by email, the developer receives your message and the information you choose to include.
3. Local and iCloud storage
- On your device: budget data in the local database, the raw FinanceKit feed (accounts, balances, and transactions) in a dedicated App Group container, and broker secrets in the iOS Keychain.
- In your iCloud: private CloudKit budget data and, when a household is shared, data in the CloudKit shared database governed by the relevant Apple Accounts. A bank transaction enters it only after you approve it as a budget expense.
Broker credentials are protected by Apple Keychain with the protection class that makes them available only while the device is unlocked. They are never stored in Banker CloudKit. When iCloud Keychain is enabled for your Apple Account, these synchronizable Keychain items may sync to your other approved devices; iCloud Keychain synchronization is end-to-end encrypted. The Banker developer cannot access these credentials.
The raw FinanceKit feed is never copied to CloudKit or widget storage. Apple processes iCloud data under its own terms. The developer cannot access your iCloud database.
Expense groups are stored locally and can use their own CloudKit share, separate from the household share. Linking a group to the budget can create expenses in the selected household. Controls that hide personal expenses, assets or loans apply within Banker’s displays; they do not create separate encryption between members of the same shared household.
Apple Pay import through Shortcuts is separate from FinanceKit: a personal automation sends purchases that trigger it after setup, including the amount and selected fields such as merchant, date, currency or payment method. It does not read Wallet history. The expenses it creates can sync to the receiving household through your iCloud.
4. Third-party services
FinanceKit reads authorized data from the on-device Wallet store through the system API; Apple states that the shared information is not seen by Apple. For the other services below, the app contacts the provider directly over HTTPS. Requests contain no name, email, Apple ID, advertising identifier, or account identifier managed by the developer. A contacted provider may still observe the originating IP address.
| Service | Purpose | Data transmitted |
|---|---|---|
| Apple Wallet / FinanceKit | Read-only synchronization of selected eligible accounts | The system API makes authorized account metadata, balances, and transactions available on device; Banker receives no bank username, password, verification code, or authentication token |
| Yahoo Finance | Quotes, symbol search, and historical FX | Tickers and currency pairs |
| CoinGecko | Crypto pricing and identification | Coin ids, symbols, and ERC-20 contracts |
| Logo.dev | Bank, broker, listed-company, and ETF logos | Official institution domain or displayed stock ticker |
| Google Favicon | Secondary listed-company and ETF logo after a Logo.dev failure | Derived public domain of the displayed company or ETF |
| Ethplorer, Blockstream, Solana RPC | Public wallet balances | Public address entered by the user |
| Binance | Read-only balance import | API key and signed request; the secret is not sent to Binance and may sync between your approved devices through iCloud Keychain |
| Trading 212 | Read-only portfolio import | API key and, with the beta API, secret sent to Trading 212 over HTTPS |
Bank sync is offered only when FinanceKit reports that financial data is available. It covers Apple Card, Apple Cash, and Savings with Apple Card in the United States from iOS 17.4, and supported accounts connected in Apple Wallet in the United Kingdom from iOS 18.4. Banker supports iOS 18 and later. In the current version, this synchronization runs while the app is open; delivery of FinanceKit changes through a background extension is not enabled. The iOS version, country, institution, Wallet setup, and your consent may limit availability.
The BAN and DVF real-estate services present in the code are not used by currently shipping screens. This policy will be updated if they are enabled later.
5. Artificial intelligence
The Banker Plus assistant’s AI chat uses Apple Intelligence and on-device Foundation Models. It requires iOS or iPadOS 26 or later and an available model on a compatible device. The assistant’s quick actions use local calculations and remain available without this model. Questions and financial data are sent neither to the developer nor to a third-party AI server.
6. Camera, photos, and documents
The camera and selected files are used only to scan or import the receipts, statements, and positions you request. OCR runs on device. Banker does not access your contacts, microphone, or location.
7. System surfaces
Approved budget amounts may appear in widgets, on the Lock Screen, in a Live Activity, Spotlight, Siri/Shortcuts, or notifications. Raw FinanceKit accounts, balances, and transactions are never sent to widgets or these surfaces. They can be disabled in iOS Settings or removed from the relevant screen. When App Lock is enabled, notifications are redacted and Spotlight indexing is disabled.
8. Security
The app can be protected by Face ID, Touch ID, or the device passcode. Broker credentials are stored in Apple Keychain with the protection class that makes them available only while the device is unlocked. They may sync to your approved devices through iCloud Keychain, but are never stored in Banker CloudKit and are never accessible to the developer. Banker never knows your bank credentials; the raw FinanceKit feed is isolated in a dedicated local App Group container separate from widget storage. The current version does not enable the FinanceKit background extension. No method guarantees absolute security; keep your device and Apple Account protected.
9. Deletion and retention
The raw FinanceKit feed is local and does not follow CloudKit retention: deleting it in Banker removes the corresponding local ledger. For budget data, including a previously approved bank expense, deleted data immediately disappears and is synchronized as a logical deletion. To prevent it from reappearing on a device that stayed offline, final purging occurs after synchronization is confirmed and a safety period of at least 90 days. This period can be extended until synchronization has been confirmed. Backups exported by the user remain under their control until deleted.
When an expense group is deleted, Banker removes the group locally and clears participant, expense and repayment details from the deletion marker used to propagate deletion through iCloud. If the group’s expenses were linked to the budget, those budget entries follow their own retention cycle.
10. Children and changes
Banker is not directed at children and does not knowingly collect data about them. Material changes to this policy will include an updated revision date.