Privacy Policy

FireFlow for Firefly III · Last updated 29 August 2026

FireFlow collects nothing. There is no account, no server of ours, no analytics, and no third-party code in the app. The only computer FireFlow sends your information to is the Firefly III server whose address you typed in yourself.

What is collected about you

Nothing. No usage data, no diagnostics, no crash reports, no advertising or device identifiers, no contact details, no location. The developer has no servers involved in running this app and therefore receives nothing — not in aggregate, not anonymised, not at all.

Where your information goes

To your Firefly III instance, and nowhere else. FireFlow makes network requests to exactly one destination: the scheme, host, port and path you entered when adding a server. If that instance is on your home network, the requests never leave it.

There are no other network calls. No fonts, scripts or images are fetched at runtime; nothing is loaded from a CDN; there is no telemetry endpoint to disable because there isn't one.

What is stored on your device

• Your server addresses and preferences — in the app's own storage.
• Your access token — in the iOS Keychain, which is encrypted by the system and not readable by other apps.
• A cache of the last successful response for each request, so the app can still show you something when the server is unreachable.
• Any changes you made while offline, held until they can be sent. These are stored as instructions — "create this transaction" — in the app's own container.

All of it stays on the device. None of it is backed up to a service of ours, because there is no service of ours.

Removing it

Settings → Delete all local data removes every server, every token, the cache and the offline queue. If there are unsent changes, the app tells you how many will be lost before it does anything. Deleting the app removes the same things. Neither touches anything on your Firefly III server.

Face ID and Touch ID

If you turn on the optional lock, FireFlow asks iOS whether it's you. iOS answers yes or no; your biometric data never reaches the app, and Apple does not share it with anyone. The lock hides what is on screen — it is not an additional layer of encryption, and your token is protected by the Keychain whether the lock is on or off.

Children

FireFlow is a tool for managing your own accounting server and is not directed at children. It collects nothing from anyone, of any age.

Changes to this policy

If this ever changes, the date at the top changes with it and the previous versions remain in the public history of this page's repository. Given that the policy is "nothing is collected", any change would be a significant one and would come with a new version of the app.

Contact

fireflow@rhouse.mx