Privacy Policy

Overview

Throof ("we", "our", or "the app") is an envelope budgeting app for iOS. We are committed to protecting your privacy. This policy explains how your information is handled when you use Throof.

Data Storage

All budgeting data — including envelopes, transactions, accounts, goals, and settings — is stored locally on your device using Apple's SwiftData framework. This core budgeting data is not transmitted to Throof servers.

If you delete the app, all locally stored data is permanently removed from your device.

SMS Text Import

Throof offers an optional SMS import feature that lets you paste (or type) the text of a bank transaction message so the app can log the transaction for you. Throof does not read your SMS inbox and does not access your messages automatically — you choose and paste in only the specific message you want to import. This feature:

• Only processes the message text you paste in, and only when you explicitly initiate an import
• Processes that text on your device by default
• Does not store, upload, or share the pasted text unless you choose to use the optional AI parsing described below
• Only extracts transaction details (amount, merchant, date) and discards the message text after parsing

AI-Powered SMS Parsing (Optional)

Throof offers optional AI-enhanced SMS parsing and statement reconciliation features that use Throof's Cloudflare Worker proxy and the Anthropic Claude API to improve extraction accuracy. These features:

• Are entirely optional and disabled by default
• Use only the SMS or statement text that you explicitly choose to process
• Send that selected text through Throof's parsing service to Anthropic's API — no account login or full budget database is transmitted
• Use an app authentication secret stored securely on your device

When these features are used, selected text is sent to Anthropic's servers for processing. Anthropic's use of this data is governed by Anthropic's Privacy Policy. Throof's proxy authenticates the request and returns the parsed result; it is not designed to store your SMS messages, statement text, or parsed financial data.

Notifications

Throof may request permission to send local notifications (e.g., budget reminders). These notifications are generated and scheduled entirely on your device. No notification data is sent to external servers.

Data Collection

Throof does not collect:

• Personal information (name, email, phone number)
• Usage analytics or telemetry
• Device identifiers or advertising IDs
• Location data
• Crash reports (unless you opt in via Apple's standard crash reporting)

We do not use any third-party analytics, tracking, or advertising SDKs.

No Account Required

Throof does not require you to create an account, sign in, or provide any personal information to use the app. There is no registration, no email collection, and no user profiles.

Third-Party Services

Throof does not integrate with any third-party services except:

• Anthropic Claude API (optional, user-initiated) — Used only for AI-enhanced parsing of SMS text and bank statements that you explicitly choose to process. The selected text is sent through Throof's own secure proxy to Anthropic; you do not need to provide an API key.

Data Security

Your data is protected by:

• iOS device-level encryption and passcode/biometric protection
• iOS Keychain for secure storage of sensitive values
• Apple's App Sandbox, which isolates your data from other apps

Children's Privacy

Throof is not directed at children under 13. We do not knowingly collect any information from children. Since no data is collected from any users, this applies universally.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

[email protected]