Taschino app — Last updated: October 9, 2026
This policy describes what data the iOS app Taschino and its encrypted sync service collect, how that data is processed, and what rights you have, under Regulation (EU) 2016/679 (GDPR).
The data controller is Taschino's developer, who can be reached at infotaschino@gmail.com.
Your financial data (transactions, accounts, categories, budgets, cards, notes) is encrypted directly on your device before being sent to the server, using an encryption key (Data Key) generated on the device and never transmitted in the clear. The server only ever receives and stores encrypted blobs it cannot decrypt: it has no access to the key, your password, or the actual content of your financial data.
To create an account and sync data across devices we collect your email address. Your password never leaves your device: the app derives from it a separate sign-in credential, which is the only thing sent to our infrastructure provider, Supabase (which stores it securely hashed). That credential cannot be used to work out your password or to decrypt your data. We also store a few technical items required for end-to-end encryption (your public key, a "salt", the key-derivation settings, and your Data Key already encrypted with a key derived from your password): these are needed for the encryption system to work and do not let anyone read your financial data without your password.
If you enable cloud sync, transactions, accounts, categories, budgets and settings are uploaded to the server exclusively in end-to-end encrypted form, as described in section 2. If you don't enable sync, this data stays on your device only. The server can still see technical metadata, such as when you save data and how much space it occupies.
When you take or upload a receipt photo for quick expense entry, the image is analyzed entirely on your device using Vision, Apple's text-recognition framework: we never send the photo to any external OCR service, and processing requires no network connection at all.
If you choose to attach the photo to the transaction and have cloud backup/sync enabled, the photo (in compressed form) is included in the app's full encrypted backup snapshot and uploaded to the server along with the rest of your data — but, as with everything else, always and only as an encrypted blob the server cannot view. If you don't attach the photo, or don't have cloud sync enabled, the photo stays on your device only.
The "voice" expense entry feature uses Apple's system Speech framework. Speech recognition may happen on-device or, when needed, on Apple's servers (the app does not force on-device-only recognition): in that case the audio is handled according to Apple's own privacy policy, not ours. The recorded audio is never sent to or stored by our server in any case: only the resulting transcribed text, if you confirm it, may be saved into a transaction and, if so, follows the same end-to-end encrypted handling described above.
The app keeps a minimal diagnostic log (handled errors, crashes, anomalies) saved in a local-only text file on your device, viewable from Account > Diagnostics. This log is never sent automatically to us or to third parties: you may choose to share it yourself, manually, for example to request support. The app includes no third-party analytics, crash-reporting, or tracking SDK (no Firebase, no Sentry, no Mixpanel, no advertising tools): this is a deliberate design choice, verifiable in the source code.
If you use the optional "Business" feature to share an account with other people, we process the email address of the person you invite solely to identify them and link them to the shared group (together with the role you assign). Even in this case, shared financial data and the name of the shared Business remain end-to-end encrypted: only the people you invite can read them.
To protect your account from unauthorized access attempts (e.g. brute-force attacks on your password), we temporarily record the IP address login attempts come from, together with the time and outcome. These rows are automatically deleted within 24 hours, except for those from an IP you have already logged in successfully from, which are kept for up to 30 days to recognize your usual devices and reduce unnecessary checks. This data is never cross-referenced with your financial data or used for any other purpose.
If "Sync with iCloud" is on (it is by default and can be turned off in Account > Backup and Cloud Sync), the app keeps your data in your own private iCloud database, managed by Apple under your Apple Account and Apple's privacy policy. It does not go through our server and we cannot read it. Amounts, notes, loyalty card codes and the other sensitive fields are encrypted end-to-end by iCloud. If you share a Business with iCloud, the people you invite receive it through Apple's sharing system; we do not see who they are.
If you also use Cloud Sync, the app tells our server only whether iCloud sync is on (yes or no) and, when you move a shared Business to iCloud, the date of that move. We use these two pieces of information only to count how many people have moved to iCloud and decide when Cloud Sync can be retired.
We rely on the following technical providers (data processors), who process data on our behalf and within the limits described in this policy:
We do not sell your data to third parties and do not use it for advertising. We do not share your financial data with anyone else, and in any case, being end-to-end encrypted, none of these providers can read its content.
Data is kept for as long as your account remains active. If you delete your account (see section 7), server-side data is permanently deleted.
As a data subject under the GDPR, you have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your data. You can exercise these rights directly from the app:
In addition to end-to-end encryption of financial data, we use technical measures such as HTTPS/TLS in transit, rate limiting on authentication routes, and minimum password strength requirements.
The service is not directed at children under 16, and we do not knowingly collect data from users under that age.
We may update this policy from time to time, for example when the app gains new features. The last-updated date is shown at the top of this page.
For any question about this policy or how your data is processed, write to infotaschino@gmail.com.