Privacy Policy

Effective date: 30 August 2026

Whole (the “App”) is a personal net-worth tracker provided by Gianmarco David (“we”, “us”, or “our”). This Privacy Policy explains how we handle information when you use the App.

At a glance

Your financial records, categories, notes, and settings are stored primarily on your device. We do not operate a server that receives or stores this content. Depending on your Android backup settings, Android may include eligible App data in its automatic system backup. The App also sends content to a cloud provider when you choose to create, restore, or schedule an in-app cloud backup.

The App includes advertising for users without Premium. Its advertising and consent components, together with crash reporting and remote configuration services, may process limited device, diagnostic, and advertising information as described below.

Information the App handles

Financial and app-content data

You may enter category names, asset and liability amounts, dates, notes, and other net-worth records. This information is stored locally in the App’s database on your device. We do not receive it.

The App also stores settings locally, such as your selected currency, reminder preferences, passcode settings, and backup preferences.

Android system backup

On supported devices, Android may automatically back up eligible App data when device backup is enabled. Depending on the Android version, device manufacturer, and the App’s backup rules, that backup may include the App database, files, and settings, and therefore may contain financial and app-content data. Android may later restore that data when you reinstall the App or set up another device.

Android system backup is separate from Whole’s in-app Google Drive and Dropbox backup. It is controlled by Android and your device or Google-account backup settings, and the backup is stored in a private area managed by Google or the backup service selected by the device manufacturer. We do not receive a copy. You can turn device backup off or manage available backups through your device and Google-account settings. See Google’s Android backup help for more information.

Cloud backup data (optional)

If you choose Google Drive or Dropbox backup, the App asks you to sign in to that provider and transfers the backup file you choose to create, restore, or automatically back up. Backup files can contain your financial and app-content data.

For Google Drive, the App requests your email address and the drive.file permission, which permits it to access files it creates or that you select through the App. For Dropbox, it receives OAuth credentials and the email address associated with the Dropbox account. The App stores the account email and backup connection information on your device so it can provide the backup feature.

Google Drive and Dropbox process backup data under their own privacy terms. We do not receive or store a copy of your backup on our servers. You can disconnect a backup provider in the App and delete backup files directly from the relevant provider.

Unless you have Premium, the App may display Google AdMob banner advertisements. Google and its advertising partners may process device and online identifiers (including advertising identifiers where available), IP address, approximate location inferred from IP address, ad interactions, and diagnostic information to provide, measure, limit, and—in jurisdictions where you consent—personalize ads. We do not use your financial records, notes, or cloud-backup content to target ads.

The App uses Google’s User Messaging Platform to request and manage consent where required. When Google indicates that a privacy-options form is required, users of the advertising-supported version can revisit their choices from the App’s settings. Premium users are not shown App advertising. You can also reset your device advertising identifier or adjust ad personalization in your device or Google settings.

Diagnostics and remote configuration

The App uses Firebase Crashlytics to receive crash reports and diagnostic information, such as device model, operating-system version, app version, timestamps, and crash traces, so we can diagnose and fix faults. The App also uses Firebase Remote Config to retrieve configuration values, such as feature or service settings. Remote Config uses a Firebase installation identifier to select configuration values for the device. These services are provided by Google and may process device and network information necessary to deliver them.

We do not intentionally include your financial records, backup-file contents, email address, access tokens, passcode, or biometric information in Crashlytics reports.

Purchases

In-app purchases are processed by the applicable app-store provider (currently Google Play). We do not receive or store your payment-card details. The App communicates with that provider to determine the Premium entitlement associated with the account used for purchase.

Notifications and biometrics

If you enable reminders, the App requests notification permission and schedules reminders on your device. Notification permission is not used to collect data.

If you enable biometric unlock, authentication is performed by your device’s biometric system. The App receives only the authentication result; it does not receive, collect, or store biometric templates.

How we use information

We use information only to provide and improve the App’s functionality: to store and display your records locally, create and restore backups you request, deliver ads where applicable, manage consent, confirm Premium purchases, provide reminders, and diagnose technical problems.

Legal bases for processing

If European Economic Area, United Kingdom, or similar data-protection law applies, we rely on the following legal bases:

Performance of a contract: to provide features you request, connect and operate an in-app backup, process or restore a Premium entitlement, and respond to a support request.
Consent: for personalized advertising and the related access to or storage of identifiers where consent is required. Where Google makes a privacy-options form available, you can revisit your choices through the App’s settings. Withdrawal does not affect processing that occurred before it.
Legitimate interests: to process the limited technical and advertising data described above for crash diagnosis, remote configuration, App security, and non-personalized or contextual advertising where the law permits. This does not cover financial records stored only on your device. Our interests are keeping the App reliable, secure, and available, including funding the free version. You may email us to object to processing based on legitimate interests; we will assess the request under applicable law.
Legal obligations: when processing is necessary to comply with tax, accounting, consumer-protection, law-enforcement, or other legal requirements.

Financial and app-content data that remains only on your device is not collected or processed by us. Where local law requires consent for diagnostics, advertising, or similar device access, we rely on consent instead of legitimate interests.

You are not legally required to provide personal data to us. Backup-provider authorization and account information are necessary only if you choose an in-app cloud backup; app-store information is necessary only to purchase or restore Premium; and notification or biometric permission is necessary only for the corresponding optional feature. Refusing personalized-advertising consent does not prevent you from recording financial information, although the ads shown may not be personalized.

We do not sell your personal information or financial information. We share information only as follows:

Google: AdMob, User Messaging Platform, Firebase Crashlytics, Firebase Remote Config, Google Play Billing, Android system backup when enabled at device level, and—if you select it—Whole’s in-app Google Drive backup.
Dropbox: only if you select Dropbox for backup.
Your chosen recipients: when you use export, share, or backup features, data is sent to the destination you choose.
Legal and safety reasons: if required by applicable law or a valid legal process, or to protect rights, safety, and security.

Each third party processes information under its own terms and privacy policy. In particular, see Google’s Privacy Policy and Dropbox’s Privacy Policy.

International data transfers

Google, Firebase, and Dropbox operate internationally, so information they process may be transferred to or accessed from countries outside your country or the European Economic Area. Where required, transfers are protected by an adequacy decision, the EU-US Data Privacy Framework where applicable, or approved Standard Contractual Clauses. See Google’s data-transfer frameworks and Dropbox’s Privacy Policy for details about their transfer safeguards.

Data retention and deletion

We do not maintain an account or a central copy of your financial records. Local records remain until you delete them or clear the App’s data. Uninstalling the App removes its local data, but Android may retain a separate system backup and restore it later; you can manage that through your device or Google-account backup settings. In-app backups remain with Google Drive or Dropbox until you delete them there.

Firebase Crashlytics retains crash traces and associated identifiers for 90 days before beginning removal from live and backup systems. Firebase retains the installation identifier used by Remote Config until we request its deletion through Firebase’s API, as described in Firebase’s privacy and security documentation. Advertising data, Android system backups, and purchase records are retained by Google under the settings and retention periods for those services. Dropbox retains in-app backups until you delete them or close the relevant account, subject to its deletion and backup-retention practices.

We keep support correspondence only as long as needed to respond to and follow up on your request, and then delete it, unless longer retention is necessary to establish or defend legal claims or comply with law. Google’s User Messaging Platform stores and reads consent choices on your device; we do not maintain a separate server-side database of those choices. Google may retain related consent and advertising information under its own retention practices.

Security

The App relies on platform protections for local storage and on the security measures of app-store providers, Firebase, Google Drive, and Dropbox for their respective services. No method of storage or transmission is completely secure. Protect your device, account credentials, and backup-provider accounts, and consider enabling the App’s passcode or biometric lock.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a portable copy of your personal data, and to withdraw consent. Because financial records are held on your device or in your chosen cloud account, you can usually exercise these rights directly in the App, through its export features, or through Google Drive or Dropbox. For requests relating to information we control, contact us below.

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects. You may lodge a complaint with your local data-protection authority. In Italy, this is the Garante per la protezione dei dati personali.

Children

The App is intended only for adults. You must be at least 18 years old and have reached the age of legal majority where you live to use it. If you do not meet both requirements, do not use the App.

Changes to this policy

We may update this policy when the App or applicable law changes. We will post the updated policy here and revise its effective date. If a change requires consent, we will request it where required.

Contact

Data controller: Gianmarco David

Address: Via Leopoldo Nicotra 11, Messina, Italy

Email: [email protected]