Privacy Architecture — How Your Data Stays Private

Overview

Acclo IQ is built as a local-first application. Your local database is the source of truth. There is no Acclo IQ financial-data backend, so your financial records stay on your device. Optional cloud sync writes end-to-end encrypted backups to a cloud storage account you already own, with a key that never leaves your device.

Telemetry

Acclo IQ sends one privacy-respecting telemetry ping per day to help measure product adoption. This includes:

• Platform and OS (e.g., "macOS", "Windows")
• App version and tier (Free or Pro)
• Bucketed usage counts (e.g., "10-50 transactions", not exact numbers)
• Feature adoption flags (e.g., "uses budgets: yes/no")
• Theme and locale

Telemetry does not include:

• Your name, email, or any personal information
• Transaction descriptions, amounts, merchant names, or any financial data
• IP addresses (PostHog is configured to discard them)
• Cookies, device fingerprints, or hardware identifiers

Telemetry uses a random local ID that is deleted when you disable telemetry. License activation and local sync bookkeeping use separate device identifiers that are independent of telemetry opt-out.

Opting Out

Telemetry is opt-out — enabled by default during onboarding. To disable it:

1. Go to Settings > License (scroll to the Privacy section)
2. Uncheck the telemetry toggle

When telemetry is disabled, the app works the same way without sending telemetry.

See the telemetry transparency page for the full list of attributes collected.

Your Data Rights

Because Acclo IQ is local-first, most data rights are self-service — your data is already on your device:

• Access & Portability — Export all your data via CSV export or the backup feature at any time
• Erasure — Settings > Danger Zone > "Reset Everything" performs a complete wipe (all tables, IndexedDB, localStorage)
• Rectification — Edit any transaction, category, or account directly in the app
• Telemetry opt-out — Settings > License (scroll to the Privacy section). Takes effect immediately, zero data sent afterward
• Data subject requests — For any data held by third-party services (Keygen, Polar, PostHog), submit a request via the Privacy Request page

For the full legal details, see the Privacy Policy (Sections 3 and 9).

Cloud Sync Privacy

If you enable Cloud Sync (Pro), your data is end-to-end encrypted before leaving your device. A local sync key encrypts your data, and your sync password protects that key. Acclo IQ cannot read your synced data; only devices with your sync password can decrypt it.

Cloud data is stored in a hidden app folder in your cloud account.

Acclo IQ may create a local per-device technical identifier for sync bookkeeping. By itself, it stays local. If you enable Cloud Sync, it may appear only inside encrypted sync metadata stored in your own cloud account.

License Validation

License checks use your license key and an anonymous device fingerprint. They do not include personal or financial data. See the Licensing guide for details.