Privacy Policy

Version 1.1 · Last updated: 7/26/2026

Fiscal is a local-first desktop application for personal spending analysis. It is built so that your financial data stays on your own computer. This policy explains what little information is involved when you use Fiscal and this website — and, just as importantly, what is not collected. It also covers our optional, web-based affiliate program (section 8), which is a separate service from the desktop app.

1. Who we are

Fiscal is provided by Fiscal (“we”, “us”, or “our”). This policy covers the Fiscal desktop application, the getfiscal.app marketing website, and our optional web-based affiliate program. The desktop app and these web services handle data very differently, and this policy keeps them clearly separated. You can reach us any time at [email protected].

2. Your financial data stays on your device

When you use Fiscal, you import statement files you already have (for example QFX/OFX or CSV files) from your own bank or card provider. All of that data — the imported files, individual transactions, categories, categorization rules, and any analysis derived from them — is processed and stored locally on your device in an encrypted database (SQLCipher).

We do not receive, transmit, or store this financial data on any server. There is no cloud backup and no synchronization. Because it never leaves your device, we have no ability to see it, access it, or recover it. Apart from the license activity described in section 4, Fiscal does not automatically communicate over the network.

3. Local encryption & your master password

Your data is encrypted at rest on your device. If you choose to set a master password, it is used to derive the encryption key and is zero-knowledge: it is never sent to us and never leaves your device. This means Fiscal has no access to your data or your password and cannot recover your data or reset a forgotten password.

You are solely responsible for remembering your master password and for keeping your own backups of your data. If you lose your password or your backups, your data cannot be recovered by anyone, and the loss is permanent. Please see our Terms & Conditions for the corresponding data-loss terms.

4. License activation & validation

Fiscal works offline. The one disclosed exception is license verification for the Pro tier. When you activate a Pro license, the app makes a one-time online request to our licensing provider, Keygen. That request contains only:

• the license key you entered, and
• a randomly generated installation identifier created on your device.

It contains no financial data, no account data, and no personal profile. Optional actions you initiate — such as re-checking or deactivating a license — also contact Keygen for the same purpose. Outside of these license actions, Fiscal does not send data over the internet.

5. Information collected through this website

Downloads

Downloading Fiscal from getfiscal.app is anonymous. You do not need an account, and the installer files are served from a content-delivery network without asking you for anything. Requesting a free trial key is separate and does require an email address, because the key has to be sent somewhere — see immediately below.

Trial licence keys

Fiscal requires a licence. You can request a free 14-day trial key from the download page by giving us your email address. When you do, we create a trial licence and email you the key. To make that work — and to keep one trial per person — we store a record containing:

• Your email address, so we can send you the key and re-send it if delivery fails or you lose the message.
• A one-way, salted hash of your email address. This, rather than the address itself, is what we check against to prevent the same address claiming repeat trials.
• The trial licence’s identifier at our licensing provider, and whether the email was delivered (including the error if it wasn’t), so a failed delivery can be retried rather than silently lost.
• The date the trial was issued, and your marketing choice as described in the next subsection.

We do not store the licence key itself. If you ask us to re-send it, we retrieve it from our licensing provider at that moment. Our licensing provider is sent only the hashed identifier described above — not your email address.

Requesting a trial is also rate-limited to stop the form being used to send unwanted email to other people. Those limits are counted against one-way hashes of your IP address and email address, not the values themselves.

Product update emails (optional)

The trial request form includes an optional, unticked checkbox asking whether you’d like occasional emails about Fiscal. It is genuinely optional: declining it does not affect your trial, and your trial key is sent either way, because that email is a response to your request rather than marketing.

If you do tick it, we record that you consented, when you consented, and which version of this policy was in effect at that moment, so the consent has a verifiable context rather than being a bare yes. Every marketing email carries a one-click unsubscribe link, and you can also unsubscribe by emailing [email protected]. Unsubscribing stops the marketing emails; it does not delete your trial record, because that record is also what stops a second trial being issued to the same address. If you want the record itself removed, see section 11.

Contacting us

If you contact us — for example by emailing [email protected] — we receive the information you choose to send, typically your name, email address, and the contents of your message. We use this solely to respond to your inquiry. Where a message is submitted through a form on this website, it is delivered to us using Resend, an email delivery provider (see section 9).

Server logs & security

This website is hosted on Railway. Like most web hosting, our host may process transient technical information such as your IP address and basic request details in server logs for the purpose of serving the site, security, and rate-limiting. We do not use this information to build profiles or track you across the web.

Analytics

This website uses Google Analytics to measure general site traffic. It is described in full, including what it collects and how to opt out, in section 6.

6. Cookies & tracking

The desktop app contains no analytics, telemetry, or tracking of any kind. The rest of this section describes this website only. We use no third-party advertising networks and do not sell or share your data with advertisers.

Google Analytics

This website uses Google Analytics (GA4), a web analytics service provided by Google, to understand how visitors find and use the site — for example which pages are viewed, roughly where visitors are located, and which links bring people here. We use this only to measure and improve the site.

Google Analytics loads a script from Google on each page and typically sets first-party cookies (such as _ga) to distinguish one visitor from another across pages and visits. Through it, Google may process information including your IP address, device and browser type, referring page, and the pages you view on this site. This data is collected and processed by Google as a service provider, under its own privacy policy.

Google Analytics never receives your financial data. Your statements, transactions, and categories never leave your device, so there is nothing for it to see — and it runs only on this website, never inside the desktop app.

You can opt out at any time: install Google’s Google Analytics Opt-out Browser Add-on, block analytics cookies or scripts in your browser or an extension, or enable your browser’s “Do Not Track”/tracking-protection features. Blocking it does not affect your ability to download, buy, or use Fiscal. See also Google’s Privacy Policy and how Google uses data from sites that use its services.

Referral cookie

The one cookie this website may set is a first-party referral cookie used only for the affiliate program. If you arrive through an affiliate’s referral link, we store that affiliate’s referral code in a cookie named fiscal_ref for about 45 days, so that if you later purchase, the sale can be credited to the affiliate who referred you (see section 8). This cookie holds only the referral code — not a profile of you — and is not used for advertising or cross-site tracking. It is only set if you arrive via a referral link.

7. Payments & purchases

Purchases of a Fiscal license are sold and processed by Paddle (Paddle.com Market Limited), which acts as the Merchant of Record and is the seller for the transaction. When you buy, Paddle collects and processes your payment and billing information under its own privacy policy and terms — we do not receive or store your payment card details. Please review Paddle’s privacy policy and buyer terms.

8. Affiliate program

What we collect

If you sign up as an affiliate, we collect and store, on our servers:

• Your affiliate account: the name and email address you provide, your unique referral code, your commission rate, your account status, and a record of which version of the affiliate terms you accepted and when.
• Your payout details: your chosen payout method (PayPal or Wise) and the payout account information you enter (for example a PayPal email). This is stored so we can pay your commissions.
• Referral clicks: when someone clicks your referral link, we record the event with a salted, hashed form of the visitor’s IP address (never the raw IP address), the browser user-agent string, and the page path they landed on.
• Referred sales & commissions: for each attributed sale, we store the Paddle transaction identifier, the sale and commission amounts, the currency, the status (pending, approved, paid, or reversed), and the relevant dates.
• Fraud prevention (self-referral): to detect an affiliate buying through their own link, we store a salted hash of the buyer’s email address for a referred sale — never the buyer’s email address in the clear.
• Login: the affiliate portal uses passwordless magic-link login. We store only hashed forms of the short-lived login tokens and session tokens, not the tokens themselves.

We do not receive or store any of the financial data from the desktop app as part of the affiliate program.

Why we collect it

• Attribution — to credit the correct affiliate for a referred sale.
• Commission calculation and payouts — to calculate what you have earned and pay it to you.
• Fraud and self-referral prevention — to keep the program fair.
• Records of terms acceptance — to keep a record of which affiliate-terms version you agreed to.

Who we share it with

We share only what each provider needs to perform its service, and we do not sell your personal data. In addition to the providers listed in section 9:

• Paddle — as Merchant of Record for the purchase; your referral code is passed to Paddle at checkout so a sale can be attributed to you. Privacy policy.
• PayPal — to pay your commissions if you choose PayPal, using the payout details you provide. Privacy policy.
• Wise — to pay your commissions if you choose Wise, using the payout details you provide. Privacy policy.

Retention

We keep affiliate-account, referral, and commission records for as long as needed to run the program and then for [PLACEHOLDER: RETENTION PERIOD for affiliate and referral records]. Certain commission and payout records may be retained longer where required to meet tax, accounting, or other legal obligations [PLACEHOLDER: CONFIRM applicable retention period for financial/tax records].

Your rights as an affiliate

You can request access to, correction of, or deletion of your affiliate-account information by contacting us at [email protected] [PLACEHOLDER: CONFIRM the contact address for data requests — [email protected] is used here for consistency; change if you want a dedicated privacy contact].

Cookies

The affiliate program relies on the first-party referral cookie described in section 6 (fiscal_ref, ~45 days), which stores only the referral code for last-click attribution.

9. Third-party service providers

We rely on a small number of service providers to operate Fiscal:

• Paddle — payment processing and sale of licenses, acting as Merchant of Record. Receives your payment and billing details; never receives your financial data from the app. Privacy policy.
• Keygen — licence issuance, activation and validation. Receives your licence key and a random installation identifier, and — when a trial is issued — a one-way hashed identifier derived from your email address. It never receives your email address itself and never receives your financial data. Privacy policy.
• Resend — email delivery for messages sent through the website contact channel, for affiliate-portal emails (magic-link logins and program notifications such as approval), for trial and purchased licence keys, and for optional product-update emails if you asked for them. Privacy policy.
• PayPal and Wise — payment providers used to pay affiliate commissions, using the payout details an affiliate provides. PayPal privacy · Wise privacy.
• Railway — hosting for the getfiscal.app website and the database that stores affiliate-program records and trial licence records. Privacy policy.
• Google (Google Analytics) — website traffic measurement on getfiscal.app only. Receives your IP address, device/browser details, and the pages you view on this site; never receives your financial data, and is not present in the desktop app. See section 6 to opt out. Privacy policy.

These providers process only the limited information described above and only to provide their service to us.

10. Data retention

Because your financial data lives only on your device, you control how long it is kept — it exists until you delete it or remove the app’s local database. For the limited information we do handle: email correspondence is retained only as long as needed to handle your inquiry and keep reasonable records of support, after which it is deleted. Payment and order records are retained by Paddle as Merchant of Record under its own policies and applicable law. Affiliate-program records are retained as described in section 8.

Trial licence records (section 5) are kept for [PLACEHOLDER: TRIAL RECORD RETENTION PERIOD]. These records serve two purposes at once — re-sending a key that failed to arrive, and preventing repeat trials on the same address — so deleting one also removes the record that stops a further trial being issued to that address. If you ask us to erase your trial record we will, and we will tell you that this is the consequence rather than doing it silently.

11. Your rights & choices

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you, or to object to or restrict certain processing. Note that most of your data never reaches us — it stays on your device under your control, where you can view, edit, export, or permanently delete it at any time within the app.

Withdrawing marketing consent is separate from, and simpler than, erasure: use the unsubscribe link in any marketing email, or email us. It takes effect immediately and needs no explanation. Withdrawing consent does not affect emails sent in response to something you asked for, such as a trial or licence key.

For the limited data we do hold (such as email correspondence, or affiliate-program data if you are an affiliate), you can exercise your rights by contacting us at [email protected]; affiliate-specific rights and the retention tension around commission and tax records are described in section 8. For payment and billing data, please also contact Paddle as the Merchant of Record. We will respond consistent with applicable law.

12. Children’s privacy

Fiscal is intended for adults and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at [email protected] and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and post the new version here. Material changes will be reflected on this page; your continued use after an update constitutes acceptance of the revised policy.

14. Contact us

Questions about this policy or your privacy? Email us at [email protected]. You can also review our Terms & Conditions and, for affiliates, the Affiliate Terms.