Zuko is designed to keep your data on your device. This policy explains exactly what we collect, what we don't, and why.
What stays on your device
Everything you enter into Zuko — subscriptions, payment cards, email accounts, budgets, notes, imported receipts, bank statements, and scanned receipts — is stored locally on your iPhone using Apple's SwiftData framework. If you enable iCloud Sync, data is synced through your personal iCloud account using Apple's CloudKit. Zuko cannot read or access iCloud data.
What we do not collect
No user accounts. You don't create one to use Zuko.
No personal identifiers sent to Zuko servers.
No subscription data, financial data, or imported statements leave your device.
No advertising trackers. No third-party analytics SDKs.
No contact list, location, photos, or microphone access unless you explicitly grant it for a specific feature (e.g. saving a share card to Photos).
What Apple handles on our behalf
Purchases: If you subscribe to Zuko Pro or redeem an offer code, Apple processes the transaction. We receive an anonymous transaction receipt to unlock Pro features on your device. Apple's privacy policy governs that data.
Notifications: Renewal and trial alerts are scheduled locally on your device using Apple's UserNotifications framework. No notification content is sent through our servers.
iCloud: Optional sync uses your private iCloud container. Governed by Apple's iCloud terms.
App Store Review Prompt: When you tap "Rate Zuko" or after a positive event, Apple's system prompt appears. Apple does not share your rating with us.
Permissions we ask for
Face ID: Optional. Used only to unlock Zuko when App Lock is enabled.
Photo Library (Add): Required only when you tap "Save to Photos" on a share card.
Camera: Required only when you use the receipt scan feature.
Notifications: Required to deliver renewal and trial alerts.
You can revoke any permission at any time in iOS Settings. Zuko will continue to function; affected features will be disabled.