What Piggy knows about you

Almost nothing. Your budget never leaves your phone. There is no account on a server, no bank connection and no advertising. The only thing Piggy sends anywhere is a list of anonymous event names, and you can switch that off.

Who this is

Piggy is made by Artur Beginyan, an individual developer in Armenia. Contact for anything in this policy: beginyan.arthur@gmail.com.

What stays on your phone

All of it. Piggy stores the following in the app's own storage on your device, and sends none of it anywhere:

Your bags, their names, icons, colours and cover photos

Every amount you plan, allocate, spend or move, and any note you write

Your account name and email, which exist only to separate accounts on the same phone

Your password, stored as a hash, never in readable form

Your settings: theme, accent, hidden amounts, Face ID preference

Because there is no server, nobody can read this, including me. It also means that if you delete the app, the data goes with it. Settings has an export, and a backup file is yours to keep wherever you choose.

Before a backup leaves the app, you can lock it with a password. Without that password the file cannot be read, and because the password is never stored, not even I can open the file or recover the password for you.

What leaves your phone

One thing: anonymous usage counts. When you do something in Piggy, the app sends a bare event name, such as bag_made or expense_logged, to TelemetryDeck, an analytics service based in Germany.

What is sent: The event name, the app version, your phone's model and iOS version, and a random identifier created on your device
What is never sent: Amounts, bag names, notes, your name, your email, your password, your photos, your location, your contacts
The identifier: A random string made by the app. It is not your Apple ID, not an advertising id, and cannot be matched to you or to any other app
Why: To see which parts of Piggy people use, so the app can be improved
How to stop it: Settings › Privacy › Usage counts. Off means nothing is recorded or sent

TelemetryDeck receives the events, does not retain IP addresses and does not build profiles. Their own policy is at telemetrydeck.com/privacy.

What Apple sees

Piggy is distributed through Apple, which collects its own data about downloads, and during beta testing about sessions and crashes. That happens on Apple's side, under Apple's privacy policy, and nothing in it identifies what you do inside Piggy.

If Piggy later sells a paid plan, payment is handled entirely by Apple. Card details never reach the app or me.

No advertising, no tracking, no selling

There are no ads in Piggy, no advertising identifiers, no third party trackers and no sale or sharing of anything about you. Piggy does not track you across apps or websites, which is why it never asks for tracking permission.

Your control

Switch off the counts in Settings › Privacy at any time.

Delete your account in Settings › Your data. It removes that account and everything in it from the phone at once.

Delete the app to remove everything Piggy stored.

Export a backup in Settings › Your data before you do either, if you want to keep your history.

Since the events are anonymous and hold nothing about you, there is no personal record on my side to show you, correct or erase. If you believe otherwise, write to me and I will look into it.

This website

Everything above is about the app. These web pages are different: they use Microsoft Clarity to see how the pages are used, such as which pages people open, how far they scroll and what they click, so the site can be improved.

Clarity runs here without cookies, so it cannot recognise you on a later visit, and it does not record anything you type. Microsoft receives technical details of the visit, such as your browser, device and rough location, under its privacy statement.

Children

Piggy is not directed at children under 13 and collects nothing that would identify anyone, of any age.

Changes

If what Piggy collects ever changes, this page changes with it and the date at the top moves. Anything that would send more than the events above would be announced in the app before it started.