This policy explains what data the Scudo app ("Scudo", "the app", "we") processes and how. Scudo is developed by PediCode.
Scudo works with no sign-up or user account. Your financial data (assets, expenses, net worth, etc.) is stored by default only on your own device. We do not sell or share your data with third parties for commercial purposes, beyond the advertising described in section 2.e. The free version of Scudo shows ads via Google AdMob; Scudo Pro (a one-time purchase) removes them.
a) The data you enter (assets, liabilities, expenses, income, investments, and any other financial data you record) is stored locally in your browser's or app's storage on your own device ("localStorage"). By default, this information never leaves your device.
b) Anonymous per-device backup (on automatically). So you don't lose your data if you reinstall the app on the same device, Scudo generates a unique random identifier (not linked to your name, email, or any other personal information) and stores a copy of your data associated with that identifier in Firebase, a Google service. No one can access that copy without the identifier, and the identifier itself doesn't reveal who you are.
c) Device-to-device sync by code (a Scudo Pro feature). If you own Scudo Pro and choose to generate a sync code to share your data between, say, your computer and your phone, your data is stored under that code in our own service built on Cloudflare Workers. Only whoever has the exact code can read or write that data. A code that goes unused for more than 400 days is automatically deleted.
d) Live market data. Scudo fetches public rates (EUR/USD exchange rate, gold and silver spot prices) from third-party providers to show you up-to-date values. These requests don't send any of your data — they only ask for the current public price.
e) Advertising in the free version (Google AdMob). Scudo is free and is partly funded by showing ads through Google AdMob. For this, AdMob accesses your device's advertising identifier (Advertising ID) and may log interactions with ads (impressions, clicks) in order to serve ads and measure their performance. Google acts here as a third-party advertising provider, under its own Privacy Policy. You can manage or reset your advertising identifier, or turn off ad personalization, from your Android device's own privacy settings. If you purchase Scudo Pro (see item f), ads and everything related to AdMob stop being shown.
f) Scudo Pro and purchases (Google Play Billing, or RevenueCat and Stripe if you buy on the web). Scudo Pro is an optional, one-time purchase that removes ads and unlocks device-to-device sync (2.c). If you buy Scudo Pro from the Android app, the purchase is processed entirely through Google Play Billing. If you buy Scudo Pro from the web (scudo-legal.pedicode-app.workers.dev), the purchase is processed through RevenueCat and Stripe, who act as data processors on our behalf: Stripe handles the charge and, if you provide your email at checkout, uses it to send you the purchase receipt and, where applicable, the link to activate Scudo Pro in your Android app (a "Redemption Link"). Scudo never receives or stores your payment details (card, etc.) in either case — it only receives confirmation from Google, or from RevenueCat, of whether your account has purchased Scudo Pro, so it can enable those features on the device. You can review RevenueCat's and Stripe's own privacy policies for more detail on how they handle that data.
Data stored locally on your device stays there until you delete it (for example, by uninstalling the app or using the "Reset everything" option inside the app). The anonymous backup (2.b) is kept unless you request its deletion. Sync-by-code data (2.c) is automatically deleted after 400 days of inactivity, or sooner upon request.
Since we don't manage user accounts or identifying data, you already have direct control over almost all your information: you can export, edit, or delete it at any time from within the app itself (Settings → Backup → Export / Reset everything).
To request deletion of the anonymous backup (2.b) or of data stored under a sync code (2.c), email us at Pedicode.app@gmail.com including the device identifier or the relevant code (found inside the app, under Settings). If you're in the European Union or the European Economic Area, these rights are exercised under the General Data Protection Regulation (GDPR).
Scudo is not directed at children under 16, and we do not knowingly collect data from children. If you believe a minor has provided data through the backup or sync features, contact us to have it removed.
We may update this policy if the app's features change (for example, if an additional integration such as Google Drive is activated in the future). Any changes will be posted on this same page, with the last-updated date shown above.
For any questions about this policy or your data, email us at Pedicode.app@gmail.com.