Privacy Policy

Last updated: February 28, 2026

1. Information We Collect

We distinguish between data stored on your device and data transmitted to us.

Data stored locally on your device (never transmitted to us):

• Financial data (income, expenses, transactions)
• Asset information (bank accounts, investments, property, vehicles)
• Trading activity and risk profiles
• Journals, goals, budgets, and all app content

Data we actually receive:

• Name and email address (only if you contact support)
• Subscription receipt tokens — verified with Apple or Google via RevenueCat (we never receive your payment details)
• Device ID for subscription and trial validation

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Validate your subscription status
• Respond to your support requests
• Comply with legal obligations

3. Data Storage and Security

All financial data (transactions, wallets, trades, goals, budgets, risk profiles) is stored locally on your device and is never transmitted to our servers.

When you use the manual export feature in Settings, you can create a backup file that you control and store wherever you choose (iCloud Drive, Google Drive, email, etc.). This is a file on your device — we do not have access to it.

When exporting data manually, you can choose:

• Encrypted backups (recommended for same-device restoration)
• Unencrypted backups (for cross-device transfers)

The only data transmitted to our servers is:

• Email address (for support requests only)
• Subscription verification data (payment receipts, device ID)
• Support inquiry content (when you contact us)

Security measures include:

• Encrypted export files (when you choose encrypted backup)
• Encrypted local storage using device-level encryption
• Optional biometric authentication
• No storage of private keys or passwords

4. Data Sharing

We do not sell, rent, or share your personal information with third parties. We do not share your personal data with any third-party AI systems. Exceptions are limited to:

• With your explicit consent
• To comply with legal requirements
• To Apple App Store or Google Play Store for payment processing, and RevenueCat for subscription status management

5. Your Rights & Data Deletion

You have the right to:

• Access your personal data
• Export your data in a portable format
• Delete your account and all associated data
• Disable local backup at any time

To request deletion of your data: Email support@mcjohnson.website with the subject line "Data Deletion Request". We will delete all server-side data (subscription records, device ID, trial usage data) within 30 days. Your local device data can be deleted by uninstalling the app.

6. GDPR Compliance (EU Users)

As we are based in the European Union, all users are protected under GDPR. You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

The only personal data we process is your email address (if you contact support) and subscription verification data (device ID, payment receipts). All other data remains on your device and is never accessible to us.

7. Children's Privacy

Pefi is not intended for users under 18 years of age. We do not knowingly collect information from users under 18.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy in the app and updating the "Last updated" date.

9. Contact Us

If you have questions about this privacy policy or to submit a GDPR data request, please contact us at:

support@mcjohnson.website