In short: Tino is built so that your financial data
never leaves your device. Transactions, goals, bill reminders
and budgets are stored locally on your iPhone. All of the app's intelligence
(receipt reading, expense classification, AI features) runs
on the device itself — none of it is sent to a server.
1. Who we are
Tino is a personal finance organization and education app developed by
Gustavo Barra ("we", "us"). This policy describes how we handle your data. It is
written to comply with Brazil's General Data Protection Law (LGPD — Law No.
13.709/2018), and we apply the same standard to every user, wherever you live.
2. Data that stays only on your device
Transactions and expenses — entered manually, by voice (Siri), by photo/QR code of a receipt, or by bank statement import (OFX/CSV);
Goals, bill reminders and per-category budgets;
Receipt photos and codes — processed on the device using Apple technology (Vision); the images are never uploaded to any server;
Category classification and AI features — executed on the device (Core ML and Apple Intelligence, where available).
This data is never collected, transmitted, or accessed by us, under any circumstances.
3. Data that does leave the device (minimal and optional)
Account (optional): the app works fully without signing up (guest mode). If you choose to create an account, we store your email address and your subscription plan (free/premium) with our authentication provider (Supabase), for the sole purpose of identifying your account and your plan.
Purchases: subscriptions are processed by the App Store (Apple) and managed through RevenueCat, using an anonymous identifier and the purchase receipt. We never receive your payment details (card numbers and the like) — those stay with Apple.
No financial transaction data is included in either flow.
4. What we do NOT do
We do not show ads;
We do not use third-party trackers or analytics;
We do not sell, rent, or share your data with third parties for commercial purposes;
We do not connect to your bank or access your bank accounts.
5. System permissions
Camera: used to scan QR codes and receipts. Processing is 100% local;
Photos: used to read receipts saved in your library. Processing is 100% local;
Notifications: reminders and summaries are scheduled locally on the device — we do not operate push servers.
6. Data retention and deletion
Local data: you can erase it at any time in the app's Settings, or by uninstalling the app;
Account: you can delete your account directly in the app (Settings → Account → Delete account). Deletion permanently removes your email address and associated data from our servers;
Purchases: subscription history follows Apple's and RevenueCat's retention policies.
7. Your rights
You may request: confirmation that processing takes place, access, correction,
anonymization, portability, deletion of your data, and information about sharing.
Because nearly all data stays on your device only, most of these rights are
exercised directly by you, inside the app — you can view, correct, and delete any
information at any time, without depending on us.
Access and portability of your data are always free.
Regardless of which plan you are on, you may request a copy of your data in a
machine-readable format at any time, at no cost. Just write to
gbarra2511@icloud.com and we will
provide the means to extract it, responding within 15 days (as
required by Art. 19 of the LGPD). The export features inside the app are a
convenience: they are not the only way to obtain your data, and
exercising your rights never depends on a paid subscription.
8. Children
Tino is not directed at children under 13, and we do not knowingly collect
data from children.
9. Changes to this policy
We may update this policy from time to time. The date at the top indicates the
version in force. Material changes will be communicated in the app.