Privacy policy

Effective date: November 4, 2026

1. Who we are

Neverlose is a personal finance app. You use it to record your money accounts, income, expenses and planned payments, and to sync them between your devices. The app does not connect to your bank and does not move money.

The developer of the app is responsible for your personal data (the data controller). The app on App Store is distributed by:

Aaron Dov Malkin, Individual developer, Israel.

The developer works under the brand Malkin Dev. In this policy, "we" and "us" mean the developer. For all questions about your data, write to [email protected].

2. Data we collect

Account data

You sign in with Google or with Apple. We get from the provider:

  • your email address and the provider's user ID;
  • your name, if the provider gives it;
  • the link to your profile picture (Google only).

With Sign in with Apple, you can hide your email. Then we get a private relay address from Apple. Apple gives your name to the app only at the first sign-in. For Apple accounts, we also keep a token from Apple. We use it only to tell Apple to stop the sign-in for the app when you delete your account.

Profile

Your base currency, which you select at the first start, and the app language.

Your financial records

The data that you enter in the app: money accounts and their balances, transactions (amount, currency, date, category, payee, project, tags and notes), categories, payees, projects, tags, planned payments and app settings. The server keeps these records and the history of their changes, so that all your devices show the same data and you can restore an earlier version.

Sign-in sessions

For each signed-in device: a random device ID that the app makes at installation, the app version, the device model, the operating system version, the IP address and the sign-in and refresh times.

Diagnostics

To find and fix errors, the app sends to our server: app events (for example, app start, sign-in, sync, import and export results), error reports with technical details, the app version, the device model, the operating system version and your user ID.

What we do not collect

We do not collect your location, contacts, photos or advertising IDs. The app has no ads and no third-party analytics or tracking tools. Files that you import (for example, a ZenMoney export) or export are processed on your device; the app does not send the files to us.

3. Why we use your data

  • To give you the service: your account, the storage of your records and the sync between your devices. The legal basis is the performance of our agreement with you.
  • To keep your account safe: sessions, sign-out on other devices and the detection of misuse. The legal basis is our legitimate interest in a secure service.
  • To find and fix errors: diagnostics. The legal basis is our legitimate interest in a working app.
  • To answer you: when you write to support. The legal basis is your request.

We do not sell your data, we do not use it for advertising and we do not make automated decisions about you.

4. Who processes your data for us

We share data only with these service providers, and only for the work that they do for us:

  • Oracle Cloud Infrastructure hosts our server and database. The server is in the Jerusalem region, Israel.
  • Cloudflare carries the traffic between the app and our server, and forwards emails to our support address. Cloudflare R2 also keeps a copy of each database backup, in Europe, so that your data is not lost if the server fails.
  • Google and Apple sign you in. Their own privacy policies apply to your Google or Apple account. Google also hosts our support mailbox (Gmail).

We can also give data to authorities when the law requires it.

5. International transfers

We store your data in Israel. The European Commission has decided that Israel gives an adequate level of protection for personal data. The copies of the database backups are in Europe (Cloudflare R2). Cloudflare, Google and Apple can process data in other countries under their own data protection terms.

6. How long we keep your data

  • Account data, profile, financial records, their history and sessions: until you delete your account.
  • Diagnostics: 90 days, then the server deletes them automatically.
  • Server system logs (they can contain IP addresses): 30 days.
  • Backups of the database: the server and Cloudflare R2 delete each backup after 30 days at the latest. Thus data that you delete stays in backups for 30 days at the longest.
  • Emails to support: as long as we need them to answer you, or until you ask us to delete them.

When you delete your account, we delete all the data above from the server at once, except backups and server logs, which expire as written above. See how to delete your account.

7. Your rights

You have the right to:

  • get a copy of your data. The app can also export your records to a file;
  • correct your data. You can change your records in the app at any time;
  • delete your account and your data (how to do it);
  • object to the processing of your data, or ask us to limit it;
  • complain to a data protection authority, for example in the country where you live.

To use a right, write to [email protected] from the email of your account. We answer within 30 days.

8. Security

The app sends data to our server only over an encrypted connection (HTTPS). The server keeps only hashes of sign-in tokens, and only we have access to the server and the database.

9. Children

The app is not for children under 16. We do not knowingly collect data of children. If you think that a child gave us data, write to us and we will delete it.

10. Changes to this policy

We publish each new version of this policy on this page and change the date at the top. If a change is important, the app or the store listing tells you about it.