Overview
Throof (“we”, “our”, or “the app”) is an envelope budgeting app for iOS, operated by AllAfkar. We are committed to protecting your privacy. This policy explains how your information is handled when you use Throof.
Throof is designed with a privacy-first architecture. Your core budgeting data stays on your device. Optional AI features may send only the text you choose to process through Throof’s parsing service and Anthropic, as described below.
Data Storage
All budgeting data — including envelopes, transactions, accounts, goals, and settings — is stored locally on your device using Apple’s SwiftData framework. This core budgeting data is not transmitted to Throof servers.
If you delete the app, all locally stored data is permanently removed from your device.
SMS Text Import
Throof offers an optional SMS import feature that lets you paste (or type) the text of a bank transaction message so the app can log the transaction for you. Throof does not read your SMS inbox and does not access your messages automatically — you choose and paste in only the specific message you want to import. This feature:
- Only processes the message text you paste in, and only when you explicitly initiate an import
- Processes that text on your device by default
- Does not store, upload, or share the pasted text unless you choose to use the optional AI parsing described below
- Only extracts transaction details (amount, merchant, date) and discards the message text after parsing
AI-Powered Parsing (Optional)
Throof offers optional AI-enhanced SMS parsing and statement reconciliation features that use Throof’s Cloudflare Worker proxy and the Anthropic Claude API to improve extraction accuracy. These features:
- Are entirely optional and only run when you explicitly use an AI feature
- Use only the SMS or statement text/image that you explicitly choose to process
- Send that selected content through Throof’s parsing service to Anthropic’s API — no account login or full budget database is transmitted
- Use an app authentication secret stored securely on your device
When these features are used, selected content is sent to Anthropic’s servers for processing. Anthropic’s use of this data is governed by Anthropic’s Privacy Policy. Throof’s proxy authenticates the request and returns the parsed result; it is not designed to store your SMS messages, statement text, or parsed financial data.
Notifications
Throof may request permission to send local notifications (e.g., budget reminders). These notifications are generated and scheduled entirely on your device. No notification data is sent to external servers.
Data Collection
Throof does not collect:
- Personal information (name, email, phone number)
- Usage analytics or telemetry
- Device identifiers or advertising IDs
- Location data
- Crash reports (unless you opt in via Apple’s standard crash reporting)
We do not use any third-party analytics, tracking, or advertising SDKs.
No Account Required
Throof does not require you to create an account, sign in, or provide any personal information to use the app. There is no registration, no email collection, and no user profiles.
Third-Party Services
Throof does not integrate with any third-party services except:
- Anthropic Claude API (optional, user-initiated) — Used only for AI-enhanced parsing of SMS text and bank statements that you explicitly choose to process. The selected content is sent through Throof’s own secure proxy to Anthropic; you do not need to provide an API key.
Data Security
Your data is protected by:
- iOS device-level encryption and passcode/biometric protection
- iOS Keychain for secure storage of sensitive values
- Apple’s App Sandbox, which isolates your data from other apps
- Optional encrypted backups (AES-GCM) protected by a passphrase you choose
Children’s Privacy
Throof is not directed at children under 13. We do not knowingly collect any information from children. Since no data is collected from any users, this applies universally.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Last updated” date. We encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy, you can contact AllAfkar at: [email protected]