Privacy Policy
- Your financial data stays with you. It's stored on your devices and in your own iCloud account. Aloft has no servers, and the developer can't see your data.
- No accounts, no tracking, no ads. Aloft has no sign-up, no analytics, no advertising and no third-party tracking SDKs, and it never sells data.
- Apple Wallet data stays with you. Apple Card, Apple Cash and Apple Savings data that Aloft reads through Apple's FinanceKit is never sent to anyone, including AI services.
- Outside services get only what they need. AI answers use your own Anthropic key and are off until you add it. Logos send only the website or name of a merchant, bank or payment app, never anything about you, and can be turned off.
What Aloft keeps
To show your finances, Aloft keeps the information you connect or enter:
- Accounts and balances: names, institutions, the last digits of account numbers, balances, credit limits and payment due dates.
- Transactions: date, amount, merchant and description, category, notes, tags and splits.
- Things you set up: budgets, recurring bills, goals, account lists, IOUs and tabs, salary settings and rules.
- Settings, such as notification choices and display preferences.
Aloft doesn't collect your name, email address, contacts, location, advertising identifier or device identifiers, and it doesn't ask you to create an account.
Where it's stored
- On your device, in Aloft's private app storage.
- In your iCloud account, so your iPhone and Mac stay in sync. Aloft uses your private iCloud database, iCloud key-value storage for settings, and iCloud Keychain for connection credentials. Apple encrypts this data and controls who can access it. Only you can sign in to your iCloud account. The developer has no access, and Aloft runs no servers of its own.
- Home Screen widgets read a small summary (for example, net worth and this month's spending) that stays on your device.
Connecting your accounts
Banks and cards, through Plaid or SimpleFIN
When you connect a bank, you sign in on a page run by Plaid or SimpleFIN Bridge. Aloft never sees your bank password. Your accounts, balances and transactions travel straight from that service to your device. Aloft keeps the access token that lets it refresh them in your Keychain. Each service handles your data under its own privacy policy.
Apple Card, Apple Cash and Apple Savings, through FinanceKit
If you allow it, Aloft uses Apple's FinanceKit to read your Apple Wallet accounts on your device: balances, credit limits, statements and transactions, including new ones as they arrive. This data is used only to show you your own finances in Aloft (spending, budgets, bills, net worth and cash flow) and is stored only as described above, on your device and in your iCloud account.
- Aloft never sends FinanceKit data to any third party, including AI services. It never uses it for advertising or tracking, and never sells or rents it.
- Apple Wallet transactions are categorized on your device only.
- You can stop access at any time in iPhone Settings › Privacy & Security › Wallet, or in Aloft. Aloft then stops reading Wallet data.
Statements and screenshots you import
Statement files (CSV or OFX) and Wallet screenshots that you choose to import are read on your device. Text recognition and extraction use Apple's on-device Vision and Apple Intelligence. Nothing is uploaded.
Optional features that contact outside services
The Claude features are off until you add your own Anthropic API key. Logos (for merchants, banks and payment apps) are on by default and can be turned off in Settings. Investment prices are fetched only for holdings you track.
| Feature | What is sent | To |
|---|---|---|
| Ask Aloft with Claude (uses your own Anthropic API key) | Your question, and a summary of the finances it needs to answer: totals, categories, and the relevant accounts and transactions. Apple Wallet (FinanceKit) data is left out. | Anthropic, under its privacy policy and API terms |
| Smart categories (uses your own Anthropic API key) | For merchants Aloft can't place, the merchant name as it appears on your statement, a typical amount, and how often it appears, so the merchant can be identified (with a web search when needed). No account numbers, balances or Apple Wallet data. | Anthropic |
| Logos | The website domain or brand name of a merchant, bank or payment app (for example, netflix.com, chase.com or Venmo), to find its logo. Nothing about you, your accounts or your transactions. | That company's website, Google's public favicon service, or Apple's App Store search |
| Investment prices | Ticker symbols of holdings you track (for example, VTI). | Yahoo Finance's public quote service |
On-device intelligence (Apple Intelligence) runs on your device and doesn't send your data anywhere.
What Aloft never does
- It never sells, rents or shares your data for advertising or marketing.
- It never tracks you across apps or websites, and contains no analytics or advertising SDKs.
- It never moves money. Aloft only reads your financial information.
- It never sends Apple Wallet (FinanceKit) data off your device, except to your own iCloud account.
Your choices
- Disconnect any bank, Plaid login or SimpleFIN connection in Aloft's Settings, and remove FinanceKit access in iPhone Settings.
- Turn off Claude features, smart categories, logos or iCloud sync in Settings.
- Erase everything with Settings › Data › Erase all data. That removes your data from your devices and from your iCloud account. You can also manage Aloft's iCloud data in iPhone Settings › your name › iCloud. Deleting the app removes the data on that device.
Security
Aloft protects your data with Apple's built-in security. It's encrypted on your device and in iCloud, and credentials are kept in the Keychain. You can require Face ID or Touch ID to open the app. Connections to Plaid, SimpleFIN and other services use encrypted HTTPS.
Children
Aloft is meant for adults managing their own finances and isn't directed at children under 13.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new effective date. A change that affects how your data is used will also be explained in the app before it takes effect.