Zenith Privacy Policy

Last updated: August 22, 2026

Zenith ("the app", "we", "us") is a personal finance app for iOS. This policy explains what data the app collects, how it is used, and where it is stored.

1. Data We Collect

Zenith is local-first: by default, all data you enter (accounts, transactions, categories, budgets, goals, investment holdings) is stored only on your device, in a local database. We do not see or collect this data unless you explicitly enable a sync feature described below.

1.1 iCloud Sync (Plus and Premium tiers)

If you enable iCloud sync, your financial data is stored in your own private iCloud account, using Apple's CloudKit. Apple, not Zenith, hosts this data. We have no access to it. See Apple's Privacy Policy for how iCloud handles your data.

1.2 Zenith Account Sync (Ultimate tier only)

If you subscribe to Ultimate and choose to sync via a Zenith account instead of iCloud, the following is sent to and stored on our servers:

• Your email address (used to identify your account and for password-reset email)
• A securely hashed password (we never store your password in plain text)
• If you enable two-factor authentication: an encrypted TOTP secret and hashed recovery codes
• Your financial data (accounts, transactions, categories, budgets, goals, holdings) — this is what makes web access and cross-device sync work for this tier

This data is used solely to provide the sync and web-access service to you. We do not sell, rent, or share your financial data with any third party for advertising or marketing purposes.

1.3 Purchase Data

Subscription purchases are handled entirely by Apple via StoreKit/In-App Purchase. We receive only a signed entitlement confirming your subscription tier, not your payment details. We never see your credit card number or Apple ID password.

1.4 Stock and ETF Prices

If you track investment holdings, Zenith looks up market prices from a third-party financial data provider (Yahoo Finance) using only the ticker symbol you enter — no personal or account information is sent with these requests.

2. Third-Party Services

Zenith uses the following third-party services, limited to the purposes below:

• Apple (iCloud, StoreKit) — sync storage (Plus/Premium) and subscription purchase processing
• Render — hosts our backend server and database (Ultimate tier sync only)
• Resend — sends transactional email (e.g. password-reset emails) for Zenith account holders
• Yahoo Finance — provides stock/ETF price data (ticker symbol only, no personal data)

We do not use third-party advertising networks, and we do not sell or share your data with data brokers.

3. Data Retention and Deletion

Local and iCloud-synced data remains under your control at all times — deleting the app or turning off iCloud sync removes it from our reach entirely (we never had access to it).

For Zenith account (Ultimate) data: you may request deletion of your account and all associated server-stored data at any time by contacting us at the email below. We will delete your account, financial data, and credentials from our servers within a reasonable time after your request.

4. Security

Passwords are hashed, never stored in plain text. Two-factor recovery codes are stored as irreversible hashes. All network traffic between the app and our servers is encrypted (HTTPS/TLS).

5. Children's Privacy

Zenith is not directed at children under 13, and we do not knowingly collect data from children under 13.

6. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

7. Contact

Questions about this policy or your data can be sent to zenithfinancialtracking@gmail.com.