Privacy Policy for Kerykeion

Last Updated: July 15, 2026
Effective Date: June 22, 2026

TL;DR: Kerykeion runs entirely on your device. There are no Talaria Labs servers, no analytics, and no tracking. Two features are optional and off by default: iCloud sync, which stores your data in your own private iCloud database so your Mac and iPhone stay in step (Talaria Labs cannot access it), and SimpleFIN bank sync, where your device connects directly to the SimpleFIN service you authorize, using credentials stored in your device's Keychain. In every case, nothing is ever sent to Talaria Labs.

Introduction

Kerykeion ("the App") is a personal finance app for macOS and iOS. It is committed to protecting your privacy. This Privacy Policy explains what information the App accesses, how it is used, and the control you have over it. The App is built to be local-first: by default, your data stays on your device.

Information the App Accesses

CSV Imports

The primary way data enters the App is by importing CSV files that you export from your bank or credit-card provider. When you select a file, the App reads it (using read-only, sandboxed file access) and parses it entirely on your device. The transaction data it reads includes:

• Transactions: dates, descriptions, payees/merchants, amounts, and any category provided by your bank
• Account information: balances and the account a transaction belongs to

Information You Provide

• Accounts: account names, colors, icons, and file patterns you set up for bulk import
• Category corrections: when you re-categorize a transaction, the App can learn a reusable rule to apply to similar transactions
• Bill decisions: your choices to include or exclude detected recurring charges
• Preferences: display and app settings

iCloud Sync (Optional)

The App offers an optional iCloud sync feature so that your data stays in step between your Mac and your iPhone or iPad. It is off by default; you enable it with a toggle in the App's settings.

If you turn on iCloud sync:

• What syncs: your transactions, accounts, balance history, categories, and categorization/bill rules are stored in your private iCloud database using Apple's CloudKit framework
• Who can access it: only you, through devices signed in to your Apple Account. The data lives in your personal iCloud storage and is protected by Apple's iCloud encryption — Talaria Labs has no server, no key, and no way to read it
• What never syncs: SimpleFIN credentials and per-device sync state never leave the device. Credentials stay in that device's Keychain

SimpleFIN Bank Sync (Optional)

The App offers an optional integration with SimpleFIN, a third-party service you sign up for separately that provides read-only access to your bank account data. If you do not set this up, the App makes no network connections and works only with the CSV files you select.

If you choose to connect SimpleFIN:

• Setup: You paste a one-time Setup Token. The App exchanges it for a permanent Access URL, which is stored securely in your device's Keychain.
• Syncing: When a sync runs, your device connects directly to the SimpleFIN service and downloads account balances and transactions (date, amount, description, payee, category, and memo). Syncs are rate-limited (up to 24 per day; automatic syncs up to 6 per day, roughly every 4 hours).

How the App Uses Your Information

On-Device Processing

All analysis happens locally on your device:

• Categorization: matching transactions to spending categories using your rules and built-in merchant mappings
• Bill detection: identifying recurring charges from your transaction history
• Transfer matching: linking movements between your own accounts so they aren't double-counted
• Runway & insights: calculating how long your balances last and surfacing spending trends

Data Storage

• Local Storage: Transactions, accounts, rules, and balance history are stored locally on your device using SwiftData
• Preferences: App settings are stored locally via UserDefaults
• SimpleFIN Credentials: If you enable bank sync, the SimpleFIN Access URL is stored in the device Keychain
• iCloud Sync (optional, off by default): If you enable it, your transactions, accounts, balance history, categories, and rules are also stored in your private iCloud database via CloudKit so they sync across your devices. Talaria Labs cannot access this data, and nothing is ever stored in any cloud operated by Talaria Labs

Data Sharing and Disclosure

The only data transmission the App can perform is:

• iCloud sync (opt-in): If you enable sync, your data moves between your devices through your private iCloud database, handled by Apple's CloudKit. Talaria Labs is never in the path.
• SimpleFIN (opt-in): If you connect SimpleFIN, your device communicates directly with the SimpleFIN service you authorized to download your account data.

With both features off (the default), the App makes no outbound connections at all.

Your Data Rights and Controls

You have complete control over your data:

• Edit or Delete Transactions: Modify or remove any transaction at any time
• Turn iCloud Sync On or Off: Sync is off by default and controlled by a toggle in the App's settings. You can also remove the App's iCloud data from your account in your device's iCloud storage settings
• Disconnect SimpleFIN: Disconnecting bank sync removes the stored Access URL from your Keychain
• Delete All Data: Account Settings → Delete All Data clears all transactions, accounts, rules, balance snapshots, and preferences
• Uninstall: Removing the App deletes all of its local data, including any stored SimpleFIN credentials. If you used iCloud sync, synced data may remain in your private iCloud storage until you delete it there
• Export: You can export your data to a file on your device whenever you choose

Data Security

The App protects your information through:

• App Sandbox: The App runs in Apple's app sandbox with read-only access limited to files you select
• Keychain: SimpleFIN credentials are stored in the device Keychain, not in plain files
• Device Security: Local data is protected by your device's security (login password or passcode, FileVault or iOS data protection, Touch ID / Face ID)
• iCloud Encryption: If you enable iCloud sync, your data is stored in your private iCloud database and protected by Apple's iCloud encryption in transit and at rest
• No External Servers: Because Talaria Labs operates no servers for the App, there is no server-side database of yours to breach
• Minimal Access: The App requests only what it needs — read-only access to files you choose, and network access only for the optional iCloud and SimpleFIN sync features

Children's Privacy

The App does not knowingly collect information from children under 13. The App is not directed at children, and we do not knowingly collect personal information from anyone under 13 years of age.

Third-Party Services

The App does not use analytics platforms or advertising networks. Third-party involvement is limited to:

• SimpleFIN (optional): Used only if you explicitly connect your account. Governed by SimpleFIN's privacy practices and terms
• Apple iCloud (optional): Used only if you enable iCloud sync. Your data is stored in your private iCloud database, governed by Apple's privacy policy

The App also relies on Apple's built-in frameworks:

• SwiftData: For local data storage
• CloudKit: For optional iCloud sync between your devices (if enabled)
• Keychain Services: For securely storing SimpleFIN credentials (if used)

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.

International Users

The App processes data locally on your device. Talaria Labs does not store your data in any cloud or transfer it across borders. If you enable iCloud sync, your data is stored in your private iCloud database and handled by Apple under its own policies. If you enable SimpleFIN sync, your data is handled by the SimpleFIN service you authorized, subject to its own policies.

California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request what personal information we collect (see "Information the App Accesses" above)
• Right to Delete: You can delete all your data within the App or by uninstalling it
• Right to Opt-Out of Sale: We do not sell personal information
• Right to Non-Discrimination: We do not discriminate based on privacy choices

Since all data is stored locally on your device, you have direct control without needing to contact us.

GDPR Compliance (European Users)

If you're in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Data Controller: You are the controller of your own data; we provide the tool
• Legal Basis: Processing is based on your consent and contract performance (app functionality)
• Data Portability: Export your data at any time using the App's export feature
• Right to Erasure: Delete data within the App or by uninstalling it

Contact Information

If you have questions about this Privacy Policy or our privacy practices:

Developer: Talaria Software LLC
Email: talarialabs@proton.me
Website: talarialabs.app

App Store Privacy Labels

For App Store compliance, here's how we answer Apple's privacy questions:

Data Not Collected

Kerykeion does not collect any data. All financial information you import or sync is stored and processed locally on your device and is never transmitted to Talaria Labs. We collect none of the following:

• Contact information
• Identifiers
• Usage data
• Diagnostics
• Advertising or marketing identifiers
• Location

Note: While the App works with your financial data on your device, that data is not "collected" by the developer in Apple's sense — it never leaves your device except, optionally, to your own private iCloud database (if you enable sync) or to the SimpleFIN service you connect directly. Talaria Labs can access neither.

Tracking

We do not track you across apps or websites.

Your Trust Matters

Kerykeion was built with privacy as a core principle. Your financial data is yours alone.

• Everything processes on your own devices
• No analytics, tracking, or advertising
• No Talaria Labs servers — ever
• No data sales or sharing
• iCloud sync is opt-in and uses your private iCloud database, which we cannot read
• SimpleFIN bank sync is opt-in and connects directly to the service you authorize
• Complete user control over all data

If you have concerns or questions, please reach out. We're here to help.