EFFECTIVE 2026-08-27  ·  ALVENERA FOR ANDROID, IOS, WINDOWS AND MACOS

What the app collects

Nothing. Alvenera has no user account, no server and no analytics service. It sends no transactions, balances, categories, device identifiers or crash reports to anyone. The app opens no network connection as part of its normal operation.

Where your data lives

Your accounts, transactions, categories, budgets and commitments are kept in a single database file inside the app's private storage on your device. The Settings screen shows you exactly where that file is, so you do not have to take our word for it.

When you uninstall Alvenera, your operating system removes that file along with the app. No copy of it exists anywhere else unless you made one.

Backups

You choose whether and when a backup is made, and where it is written. Alvenera produces the file and stops there; it does not upload it anywhere.

• If an app password is set, the whole backup is encrypted with AES-256-GCM, keyed from your password by PBKDF2-SHA256 over 600,000 rounds. GCM authenticates the file, so an altered backup is rejected rather than silently restored.
• If no password is set, the backup is written in the clear, and the app tells you so at the time. That is your decision, made knowingly.
• A lost password cannot be recovered. We do not hold your key, and there is no mechanism to bypass the encryption. This is the direct counterpart of having no server.

Statement imports

When you import an OFX, QFX or CSV file, it is read and parsed on the device. Its contents are not sent to any service to be categorised, enriched or verified.

Advertising and tracking

There is none. No ad network, no pixel, no advertising identifier, no third-party measurement tool, no attribution library.

This website

This site is served as static pages. It sets no tracking cookies and runs no analytics scripts. Your language choice is kept in your browser's local storage, on your device only, and is never transmitted.

Web fonts are loaded from Google Fonts, which means your browser makes a request to that service and Google sees the corresponding IP address. If that concerns you, write to us — we can self-host the fonts.

If you write to us

If you contact us for support we have your message and your email address, because that is how email works. We keep them for as long as it takes to answer, and no longer than is useful. We use them for nothing else.

Changes

If this policy changes, the effective date above changes with it. It cannot begin to describe data collection without the app itself changing first — and that change would be visible, because the only place your data exists is your device.

Contact

[email protected]  ·  Technor, Montréal, Québec, Canada