Privacy Policy

This Privacy Policy explains how Leftover ("Leftover," "the app," "we," "us," or "our"), listed on the App Store as What's Left Over?, handles information when you use the Leftover mobile application.

Short version

Leftover is designed to work locally on your device.

• No account registration is required.
• We do not collect or transmit your personal data to our servers. We don't operate any.
• We do not use the app to "phone home" with your financial data.
• We do not include advertising trackers or third-party analytics in the app.
• Data you enter into Leftover is stored on your own device, and in places you choose, such as your own iCloud Drive or your other devices.
• The app database, backups, and device-to-device sync are encrypted.

Information stored on your device

To provide the app's features, Leftover stores data locally on your device. This may include:

• income, bill, tag, schedule, and payment-tracking information you enter
• app preferences and reminder settings
• optional app lock settings, including a hashed PIN stored in the device's secure storage
• locally generated reminders and related notification settings
• if you use sync, the names and public keys of devices you have chosen to trust

Leftover encrypts its local database at rest. The data encryption key is kept in your device's secure storage.

Biometrics and app lock

If you enable Face ID, Touch ID, fingerprint unlock, or another biometric method supported by your device, Leftover uses the biometric features of your device's operating system to unlock the app locally. We do not receive, collect, or store your biometric data.

Notifications

If you grant notification permission, Leftover may schedule reminder notifications on your device for upcoming or overdue bills. These reminders are created and managed locally on your device. Reminder text is intentionally limited so that it does not show bill names or amounts on your lock screen.

Device sync (Bluetooth, local network, and camera)

Leftover can optionally sync your data between your own devices. To do this, it may use:

• Bluetooth to find trusted nearby devices and exchange data with them, including in the background if you turn on Nearby Sync
• Your local network to find and sync with devices on the same Wi-Fi network
• The camera, only when you choose to scan a pairing QR code. Camera images are not stored or sent anywhere.

Sync data goes directly between your devices and is encrypted in transit. It is never sent to us or to any server we operate.

Computer access

If you turn on Computer Access, Leftover runs a local web server on your device so you can view and edit your data from a computer on the same network. It is protected by an access code, it can only be reached on your local network, and it stops when you turn it off.

This connection does not pass through our servers, but it uses standard HTTP rather than encrypted HTTPS. Only use Computer Access on a network you trust.

Backups, export, and import

Leftover creates encrypted backups of your data. On iPhone, backups are stored in the app's storage, which is included in your device backups, and in your own iCloud Drive if iCloud Drive is on. On Android, they may be included in Android's Google backup. These backups are encrypted before they leave the app, and we have no access to them.

Backups use a dedicated backup key. So that a new phone can restore them, the key is stored in iCloud Keychain on iPhone or Google Block Store on Android, and we have no access to it. You can also save the key yourself as a recovery code. Keep that code private, because anyone who has it and a copy of your backup can read your data.

You can also export an encrypted backup file and share it through apps or destinations you choose. We do not receive a copy of any backup unless you deliberately send one to us. Imported backups are read locally on your device.

No registration and no remote data collection

Leftover does not require you to create an account, sign in, or provide registration information. We do not operate a backend service for storing your app data, and the app is not designed to send the personal or financial information you enter to us.

Third-party platforms

Leftover relies on operating system and platform features such as local storage, secure storage, biometric authentication, notifications, iCloud, Bluetooth, and system share sheets. Those platform providers, such as Apple and Google, may handle limited technical information under their own terms and privacy policies.

Children

Leftover is not directed at children and does not knowingly collect information from anyone, including children.

Changes to this policy

We may update this Privacy Policy from time to time. If we do, we will update the effective date at the top of this page.

Contact

Questions about this policy can be sent through a support request. See the support page for other ways to reach us.