1. What we do not collect
- Your income database. Confirmed entries, income sources and your target monthly income are stored locally on your device. If you enable iCloud sync, the database lives in your own iCloud private database, protected by your Apple Account. We do not host or retain a copy. The limited text you actively submit for automated parsing is described below.
- Screenshots. Screenshots are processed entirely on your device and are never uploaded.
- Identity information. The app has no sign-up or sign-in. We collect no name, email address, phone number or account identifier.
- Tracking data. We integrate no third-party advertising or analytics SDKs, perform no cross-app tracking, and do not use the IDFA.
2. What automated parsing sends
Only when you actively submit content through Quick Capture does the following leave your device:
- The natural-language text you submit in Quick Capture, including text entered with your system keyboard or dictation
- When you choose screenshot capture, the text and text-block positions produced by on-device text recognition; the image itself is never sent
- The names of your existing income sources, so the parser can decide which source the income belongs to
- Your display currency and the current time
Submitted or recognised text may contain order numbers, buyer nicknames, product titles or other details you include. If you would rather FIREBar did not transmit that content for parsing, use the Complete Form/manual-entry path instead. FIREBar does not send manually entered form fields to its parsing service.
Where the data goes
- The text is sent to our relay service running on Cloudflare Workers. That service writes to no database, persists nothing to disk, and logs no request content; it releases the data as soon as the request completes. Runtime logs contain only operational metadata such as parsing mode, provider, result count, status/error code and duration. Your IP address is used transiently for abuse rate-limiting and is not written into our application logs.
- The relay forwards the text to our current language-model provider, MiniMax, for parsing.
- The result is returned to your device and written to your local database.
About retention by third-party providers
MiniMax states that API personal data may be processed in the United States and retained for as long as necessary or permitted for the purposes described in its policy. We do not claim that this processing is Zero Data Retention. Please review the MiniMax API Privacy Policy. If we change providers or obtain a different retention configuration, we will update this page.
3. Permissions
| Permission | Purpose | Required? |
|---|
| Photo Library | Reads the single image you pick when entering income manually | No — declining does not affect manual entry |
| Camera | Used only if you choose to capture a photo | No |
| Notifications | Reminds you of draft entries awaiting confirmation | No |
We request no location, contacts, microphone, health or other unrelated permissions.
4. Your rights (GDPR — for users in the EEA)
Because your income data resides solely on your own device and iCloud, you retain full and direct control over it:
- Access and portability — the app provides data export (free forever) in a standard file format.
- Erasure — delete entries in the app, or uninstall the app and remove its data from your iCloud settings. We hold no copy to delete.
- Rectification — any entry can be edited directly in the app.
- Objection and restriction — use the Complete Form/manual-entry path instead of Quick Capture; FIREBar will not send those form fields to its parsing service.
For the brief processing involved in AI parsing, the lawful basis is necessity for the performance of a contract (GDPR Art. 6(1)(b)) — namely, providing the parsing feature you actively requested.
If you believe our processing infringes data protection law, you have the right to lodge a complaint with the supervisory authority in your Member State.
5. Children
The app is intended for adults. It is not directed at children under 13 (or the equivalent age under local law), and we do not knowingly collect information from them.
6. Security
All transmission uses TLS encryption. Data on your device is protected by iOS system-level encryption. The security of iCloud sync is provided by Apple.
7. Changes to this policy
We will update the effective date at the top of this page. Material changes to how data is processed will be surfaced prominently inside the app.
8. Contact
Lina Jiang
Email: legal@rico9527x4.eu.org
Trader information is displayed publicly on the App Store product page in accordance with the EU Digital Services Act (DSA).