Privacy Policy

Everything Allo keeps lives in a database on your device, using Apple's SwiftData framework:

• Your budget settings — monthly income, the share of it you allow yourself to spend, alert preferences, and appearance.
• Your transactions — amount, merchant name, category, and the date and time of each purchase you log.
• Your categories — the twelve Allo ships with, plus any keyword rules you add to them.

This database sits in a private app group shared only between Allo and its own widgets, so the widgets on your Home and Lock Screens can show your figures without any of it leaving your device. It is not synced to iCloud, and it is not sent to us or to anyone else. If you delete the app, this data is deleted with it — we have no way to access, recover, or view it.

There is no sign-in, no profile, and no Allo server of any kind. Allo never asks for your banking credentials and never links to a bank, a card, or a financial data aggregator. It cannot see your balance, your statements, or any transaction you don't tell it about.

Allo can log a purchase from the text of an alert your bank already sent to your phone. This only happens through a Shortcut or automation you set up, which hands Allo that notification's text. Allo reads the amount and the merchant out of it, ignores refunds, declines, and deposits, and saves the purchase locally.

Allo cannot read your notifications on its own. It never sees anything the Shortcut doesn't pass it, and the text it is given is used to create the transaction and then discarded — only the amount, merchant, and category are kept.

To sort a purchase into a category, Allo asks Apple's Foundation Models to look at the merchant name. This model runs on your iPhone, as part of Apple Intelligence — the merchant name is not sent to Apple, to us, or to any other service, and no request leaves the device.

It requires iOS 26 on a device with Apple Intelligence available and turned on. Where that isn't the case, Allo simply leaves purchases unfiled unless one of your own keyword rules matches, and you categorise them yourself.

Budget alerts and the weekly summary are local notifications scheduled by the app on your own device. They are not push notifications, so nothing about your spending is sent anywhere to produce them. If notifications are off, or alerts are switched off in Settings, nothing is scheduled at all.

Allo contains no analytics, no advertising, no crash reporting, and no third-party SDKs of any kind. It ships with no outside dependencies. Nothing about you or your spending is shared, sold, or disclosed to anyone, because nothing about you ever reaches us in the first place.

Because everything is on your device, you control all of it directly. Settings ▸ Data will clear your logged transactions while keeping your budget and categories — this cannot be undone. Deleting Allo from your iPhone removes everything the app holds, including the budget and its widgets' data.

There is nothing for us to delete on your behalf, and no request for us to fulfil, because we hold nothing.

Allo is not directed at children under 13, and we do not knowingly collect personal information from children. As described above, we do not collect personal information from anyone.

If this policy changes, we'll update the date at the top of this page. Continued use of Allo after a change means you accept the updated policy.