Privacy policy

SCOPEWhat this policy covers

This policy covers the iOS app Worth / 眼下家底 (Bundle ID com.karowang.worth) and this website, worth.karowang.com. The developer is an individual, Karo Wang.

⚠️ The WeChat Mini Program of the same name is a separate, earlier version. It stores data in WeChat Cloud, where account names, amounts and notes are end-to-end encrypted on the client before upload, with the key derived from your password and never held by the developer. That version is outside the scope of this policy and is governed by its own notice.

01What information we collect

None. Specifically:

• No sign-up, no accounts — no phone number, email, social handle or any identifier is collected
• No device identifiers, no advertising identifier (IDFA), no IP address
• No location, contacts, photos, camera, microphone or clipboard access
• No telemetry, behavioural analytics or crash reporting
• No third-party SDKs, ad networks or analytics services

The app contains no code that issues a network request. It is fully functional entirely offline.

02Where your data lives

The account names, balances, change records, snapshots and settings you enter are all kept inside the app's sandbox on your device, protected by iOS Data Protection. None of it leaves your device unless you actively export or back it up.

03Backups and exports

At your request, the app writes a complete copy of your data as a JSON file into a folder you choose — an iCloud Drive folder, for instance. The point is that the backup exists independently of the app: delete the app or change device and the file is still there.

To be explicit: once you choose to put backups in iCloud Drive, that file is handled by Apple's iCloud service under Apple's terms and privacy policy. The developer has no access to it and cannot manage it on your behalf. You may also choose "On My iPhone" instead, in which case it syncs nowhere.

The same applies to exports: where they go is your decision. The file itself is plain JSON — treat it as you would any file containing your personal financial figures.

04Face ID and device unlock

You can enable Face ID, Touch ID or your device passcode as a gate into the app. Biometric information is handled by iOS itself and kept in the device's Secure Enclave. The app neither touches nor stores any biometric data; it receives only a pass or fail result from the system.

05Notifications

With your permission the app sends local notifications — a stale-account reminder, a repayment date. These are generated and triggered entirely on your device. They never pass through a push server, and their contents never leave the device. You can turn them off in system settings at any time.

06Third-party sharing

There is no third-party sharing, because there is no data to share. The app transmits, sells, rents or exchanges nothing to anyone, and participates in no form of data brokerage.

07Your rights and control

• Access — all your data is in the app and visible at any time
• Export — Settings → Export produces a complete JSON you can take anywhere
• Deletion — delete individual records or accounts in the app; uninstalling removes all of its data from your device. Any backup or export files you placed elsewhere are yours to delete

Since the developer holds none of your data, there is no "request access or deletion from the developer" step to go through.

08Children's privacy

This app is not designed for children under 14, and it does not knowingly collect personal information from anyone — children included.

09About this website

This site is a set of static pages hosted on Cloudflare Pages. It sets no tracking cookies, runs no analytics, and embeds no third-party scripts, fonts or images — the fonts it uses are self-hosted subsets. Your language and theme choices are kept in your browser's local storage purely so you return to the same version next visit; they never leave your browser. The hosting provider may keep routine access logs (IP, user agent) for security and operations; that is governed by Cloudflare's privacy policy, and the developer does not retrieve or analyse those logs.

10Changes to this policy

This policy describes what the current version actually does. If a future version introduces anything that changes where data flows — multi-device sync, for example — this policy will be updated before that version ships, with a new effective date shown on this page. No such change is planned.

11Contact

If you have a question about this policy, or find that it doesn't match actual behaviour, get in touch:
hello@karowang.com