Legal Changelog

This page documents changes to our Privacy Policy and Terms of Service. We update this page whenever we make changes so you can see exactly what changed and when. Each prior version is preserved in our git history and linked here, so you can review what you agreed to at any point in time.

Material changes trigger 30-day advance notice and in-app acceptance. Non-material changes are clarifications or disclosures that do not alter how we process your data; we update the document, bump the version, and log the change here.

Privacy Policy

Version 1.2 — 2026-05-02 (non-material)

Section 8.2 (Cookies and Tracking — On Our Website) updated to reflect that the cookie consent banner is now powered by a small first-party consent script instead of the third-party Klaro library. The generic Klaro localStorage key consent is replaced by the first-party key accloiq-consent.

  • Same gating mechanism (analytics scripts ship as <script type="text/plain"> and only execute after explicit consent), same processors (Google Analytics, PostHog, Cloudflare Web Analytics), same retention.
  • No new subprocessor, no new processing purpose, no new data collected. The change is implementation-only — the third-party Klaro library was removed, eliminating ~83 KB of external JavaScript and one third-party network request per page.
  • Existing Klaro consent records are not reused by the new first-party runtime. Visitors without the new accloiq-consent preference are prompted once, and analytics scripts remain blocked until they click Accept All or enable analytics in Privacy Settings.
  • Do Not Track (DNT) and Global Privacy Control (GPC) handling is unchanged — both signals continue to be honored as automatic decline.

Version 1.1 — 2026-05-01 (non-material)

Section 4.5 (Customer Support) clarified to disclose the new in-app Send Feedback form (Settings → About). The form transmits user-typed content and opt-in metadata through Cloudflare Workers and Resend.com to our support inbox.

  • Same data category (Customer Support) and same processors (Cloudflare, Resend) that were already disclosed for license-key email delivery.
  • No new subprocessor, no new processing purpose, no expansion of retention — only a clarification that an additional entry point exists for an already-disclosed flow.
  • Form is opt-in: the user explicitly clicks Send Feedback, types content, and chooses whether to include app version, platform, or their email. Nothing is collected automatically.

View Privacy Policy v1.0 (previous version)

Version 1.0 — 2026-04-22 (baseline)

Initial beta/public baseline. This version consolidates prior draft clarifications, removes unused speculative subprocessors, and reflects the data flows currently implemented in Acclo IQ.

  • Establishes the current local-first privacy model, telemetry disclosures, service-provider list, Cloud Sync behavior, and user rights language.
  • Clarifies that local sync/device-bookkeeping identifiers are separate from telemetry identifiers and license fingerprints.
  • Removes speculative subprocessors that are not deployed or planned for the MVP launch.

Terms of Service

Version 1.1 — 2026-05-25 (non-material)

Sections 3.1, 3.2, 3.3, and the third-party services list were updated to reflect the SimpleFIN tier restructure: Bank Sync is available on Free within the two-account limit, while Pro supports unlimited synced accounts.

  • No new data category, processing purpose, subprocessor, or retention change. SimpleFIN was already disclosed as an optional user-initiated third-party service.
  • No user loses access to data or features. Free users gain access to SimpleFIN within existing account limits; Pro users retain unlimited account scale.
  • The pre-update version is archived at the terms-of-service-v1.0 git tag.
  • This non-material update does not require re-acceptance. Versioned in-app legal acknowledgments are not yet implemented and will be added before any future material policy change requires acceptance.

View Terms of Service v1.0 (previous version)

Version 1.0 — 2026-04-22 (baseline)

Initial beta/public baseline. This version establishes the current service description, license grant, subscription terms, refund policy, user responsibilities, privacy references, limitation of liability, governing law, and material-change notice framework.

  • Clarifies that local sync/device-bookkeeping identifiers are separate from telemetry identifiers and license fingerprints.
  • Explains when local device identity may appear in encrypted sync metadata written to the user's own cloud storage.