Miskal
GOLD-BASED LEDGER

Privacy Policy

Last updated: 28 September 2026 · App version: 1.0.0

In short

This app collects nothing about you. There is no account to create. Every record you enter stays on your own device and is sent to no server. We, as the developer, cannot see your data.

What is stored, and where

Accounts, entries, instalment plans, loans, assets, your settings and deleted records (kept 30 days) live only in your device's own storage. Removing the app removes all of it. Settings → Reset data does the same thing.

What the internet connection is used for

The app goes online for one thing: exchange rates and the gold price. The sources are:

It also checks, about once a month, a small public file of published tax and inflation figures used by the calculators. That file is fetched, never written to.

These requests carry a date and nothing else. None of your records, amounts, account names or device details are sent. As with any request over the internet, the server on the other end sees your IP address; that is outside the app's control and subject to that organisation's own policies.

The app works offline; the last rates fetched are kept on the device.

Backups

You create a backup file and you decide where it goes (Files, iCloud Drive, Google Drive, e-mail, anywhere). The file is not sent to us or to any third party.

You may put a password on a backup. An encrypted backup is encrypted on your device with AES-256-GCM, with the key derived from your password using PBKDF2. We do not know your password and cannot recover it; a backup whose password is lost cannot be restored. The app warns you of this before you turn the feature on.

Passcode and biometric lock

The numeric passcode you choose is not stored as text: what is kept is a salted SHA-256 hash, held in the device's secure storage (iOS Keychain / Android Keystore). Face ID, Touch ID and fingerprint checks are performed entirely by the operating system; the app never sees or stores biometric data.

Contacts

If you tap "Choose from contacts" while adding an account, the phone's own contact picker opens. The app does not read your address book; it fills the form with the name, phone number, e-mail and address of the single contact you picked. That information is kept inside that account, on your device, and is sent nowhere.

On iPhone no permission is asked for at all: the system hands the chosen contact straight to the app. On Android the system returns only an identifier for the contact, so contacts permission is asked for once in order to read the details. It is asked at the moment you tap the button, not at startup, and if you decline you can fill the fields by hand. The app never asks for permission to write to your contacts.

What is not collected

Reports and sharing

PDF and spreadsheet reports are produced on your device. They leave it only when you send them yourself from the share menu.

Calculators

Figures you type into the loan and property calculators are not recorded. They are kept on the device only so the next visit starts where you left off, and they are not included in backups.

Purchases

Miskal Pro is sold through the App Store and Google Play. Those stores handle the payment and tell the app only whether a subscription is active; no payment details reach the app or us. The purchase is tied to your store account, not to an account with us — there is none.

Children

The app is not directed at children and does not knowingly collect data from them.

Changes

If this policy changes, the updated text is published on the app's store page and at this address, and the "last updated" date above changes.

Contact

Questions: support@miskal.app