Version 1.0 · Updated 1 November 2026
Your budget stays yours.
Budgeting, statement reading and spending analysis happen on your device. No Payday Loom servers receive your bank data. No ads, tracking or analytics service.
No Payday Loom data server
Payday Loom has no application backend, advertising network, tracking SDK or analytics service. We do not receive your bank records, budget data or assistant conversations. Support email is separate: we receive only what you choose to send us. Never email bank passwords, PINs or authentication codes.
Local records and private iCloud
The app stores balances, accounts, income schedules, bills, transactions, categories, merchant rules, limits, savings allocations, scenarios and preferences on your device. A local SwiftData copy supports offline use. Budget revisions sync using encrypted fields in the private CloudKit database associated with your Apple Account. We cannot view or recover those private records. Apple operates iCloud; encryption, key availability, recovery and backups follow your Apple Account and device settings. We do not promise identical end-to-end encryption guarantees for every account configuration.
Direct bank connections
Optional connections use compatible FinTS 3.0 PIN/TAN access. Your device sends the bank login and required approval responses directly to the selected bank over HTTPS, and receives account information, balances and transactions. No Payday Loom server or banking aggregator handles that exchange. Bank connections, banking login names, account identifiers and saved PINs are stored in iCloud Keychain: end-to-end encrypted, readable only while your device is unlocked, and available on your other devices signed in to the same Apple Account with iCloud Keychain on. If iCloud Keychain is off, they stay in this device’s Keychain. Each device keeps its own FinTS session state in a device-only Keychain item. Bank credentials never enter the synced budget payload, Payday Loom’s CloudKit records or logs; we cannot see them. Payday Loom does not initiate payments. Your bank processes connection information under its own privacy terms.
Bank statement PDFs
Supported German- and English-language text PDFs are read on your device. Payday Loom does not upload or retain the original PDF. Only the transactions you choose to import become budget records and follow private iCloud synchronization. Your original document remains wherever you stored it, under that file provider’s controls. Scans, password-protected documents and unsupported layouts may require manual records.
On-device intelligence
Optional Apple Intelligence interprets assistant questions and suggests expense categories using Apple’s on-device Foundation Models model. No Private Cloud Compute or external AI provider is used. Financial amounts come from the app’s deterministic calculation engine. Assistant questions and answers stay in memory and clear when dismissed or backgrounded; they are not saved or synced. Category assignments, learned merchant rules and cached category suggestions are budget preferences. Apple controls model availability and system-managed model downloads.
App lock and notifications
Optional Face ID, Touch ID or device-passcode protection uses Apple’s LocalAuthentication framework. Payday Loom receives an authentication result, not biometric data. The preference syncs to your other devices inside your encrypted budget revision, together with reminder, alert and automatic bank-update preferences. Bill reminders and optional spending alerts are scheduled on each device, which asks for notification permission itself; previews omit financial details. Silent iCloud change notifications use Apple’s push service to prompt synchronization without including your bank records in the notification.
Retention, export and deletion
Records remain until you edit or delete them. JSON export uses the system share sheet; exports contain financial information and are controlled by the destination you select. Delete all budget data removes records from the active budget and queues an empty revision for private iCloud. Local synchronization metadata may retain the previous revision until the change successfully synchronizes. Other devices receive the deletion after successful synchronization. Offline changes or unresolved conflicts may remain pending. A small empty revision and sync metadata prevent older records being silently restored. Disconnecting a bank removes its saved PIN from iCloud Keychain, and therefore from your other devices. Delete all budget data also removes every bank connection and saved PIN. Existing exports, shared copies, original PDFs and device backups are outside the app’s deletion control.
Network access, website and contact
Network access is used for Apple’s iCloud synchronization and change notifications, direct optional FinTS bank requests and links you choose to open. The app does not request contacts, location, camera or microphone permissions. This support website has no analytics scripts, advertising, forms or cookies; its hosting provider may process standard connection data to serve and secure it. Publisher and privacy contact: Elie Bitar, info@eb-net.org.