Privacy Policy

Last updated October 12, 2026

Who we are

Vanta is published by Shashank Sahay, an individual developer, who is the data controller for the little personal data Vanta handles (see What we collect). This policy covers Vanta in India, the United Arab Emirates and the United Kingdom.

What Vanta is

Vanta is a personal finance tracker for iPhone. It runs on your device. Your transactions, accounts, budgets, EMIs, subscriptions, and notes are stored locally in an encrypted SwiftData store inside Vanta's App Group container. Vanta does not sell, rent, or share this data with advertisers.

What we collect

Account identity: when you sign in with Google or Apple, Firebase Authentication receives your email, display name, and a unique user ID. This is the minimum needed to recognise you across devices.

Your finance data: every transaction, account, budget, EMI, subscription, vehicle, fuel log, bill proof, and setting you create lives in Vanta's local SwiftData store on your device. When your device is signed into iCloud, iOS mirrors that store to your private iCloud database (CloudKit) so your other devices see the same records. That copy is encrypted by Apple, tied to your Apple Account, and readable only by you — Vanta has no server of its own and cannot read it.

Notifications: when you enable bill reminders or spend alerts, Vanta schedules them locally through iOS UserNotifications. Apple delivers them; Vanta never sees them again.

Crash diagnostics: anonymous crash stacks go to Firebase Crashlytics so we can fix bugs. They carry no financial data.

Purchases: when you buy Vanta Plus, Apple processes the payment. RevenueCat receives the purchase record (product, dates, renewal state) and your Vanta user ID so your plan follows your account across devices. It never sees your finance data.

Anonymous usage: Vanta records which features get used — for example that a transaction was added from the share sheet, or that a module was switched on — through Firebase Analytics. Events never include amounts, balances, merchant names, notes, or the names of categories you created; amounts are reduced to a coarse range such as "500–2k". No advertising identifier is used and nothing is shared with ad networks. Turn it off any time in Settings → Privacy & Data → Share Anonymous Usage.

What we don't collect

We don't track your location. We don't read your contacts. We don't scan your camera roll. We don't auto-read SMS — bank-SMS parsing happens only when you explicitly share a message to Vanta via the Share Sheet. We don't sell data to brokers, banks, or ad networks.

Third-party services

Firebase Authentication (Google) — handles sign-in. Stores your email, name, and user ID. See Google's privacy policy at policies.google.com/privacy.

RevenueCat — verifies App Store purchases and tracks whether your plan is active. Receives your Vanta user ID and purchase history only. See revenuecat.com/privacy.

iCloud (CloudKit) — Apple keeps a copy of your finance data in your private iCloud database so it syncs between your devices. Governed by your iCloud account and Apple's privacy policy; we have no access to it.

Local network (Squad Sync) — when you share a bill split with a nearby device, Vanta uses Apple's MultipeerConnectivity over your local Wi-Fi. The transfer is peer-to-peer and ephemeral.

Siri, Spotlight and Apple Intelligence

On iOS 27, Vanta can add your transactions, bills and categories to your iPhone's on-device Spotlight index so Siri and Spotlight can find them. That index stays on your iPhone; Apple does not receive it and neither do we. Turn it off in Settings → Data → Show my money in Siri and Spotlight, which removes everything Vanta added. Erase all data, Delete account and signing out remove it too.

On iPhones with Apple Intelligence, some features use Apple's on-device language model to read text you give it, such as a sentence you type or a receipt you scan. That processing happens on your iPhone. The model never decides an amount on its own: you review every result before it is saved.

Our website

vantamoney.app is separate from the app and never sees your finance data. If you join the waitlist, your email address is stored by our website host (Netlify) so we can tell you when Vanta launches; email us to be removed. If you accept cookies in the website's banner, Google Analytics and the Meta Pixel measure visits and ads. Decline, and neither loads. You can change your choice any time from "Cookie settings" at the bottom of the page.

Your controls

Back up your data: Settings → Data → Backups & transfer. Vanta produces a passphrase-encrypted backup file (.vntb) you can save anywhere.

Erase All Data: Settings → your name → Erase all data. Wipes every record on this device and, when iCloud is on, from your private iCloud database and every other device signed into it. Signs you out, but your authentication account stays alive so you can sign back in.

Delete Account: Settings → your name → Delete account. Permanently deletes your Firebase authentication account, your Firestore profile (display name, email, Vanta code), any solo Splitwise groups you own, and every record on this device and in your iCloud. Multi-member groups you participate in have your membership removed but stay alive for other members. This cannot be undone.

Notifications: Settings → Preferences → Notifications, or change permission in iOS Settings → Vanta.

Biometric lock: Settings → Preferences → Face ID.

Anonymous usage: Settings → Data → Share anonymous usage. Off means no usage events leave the device.

Siri and Spotlight: Settings → Data → Show my money in Siri and Spotlight (iOS 27).

Your rights

Depending on where you live — the UK (UK GDPR and the Data Protection Act 2018), the UAE (Federal Decree-Law No. 45 of 2021) or India (Digital Personal Data Protection Act, 2023) — you can ask to access, correct, export or erase your personal data, and object to or withdraw consent for its use. Most of this you can do yourself in the app (see Your controls); for anything else, email us and we'll reply within 30 days.

Legal basis: we process your sign-in details to provide the service you asked for, and anonymous usage data only with your consent, which you can withdraw at any time.

Where data goes: sign-in and shared-group data is held by Google Firebase, which may store it outside your country. Google protects it under its standard data-processing terms. Your finance data never leaves your device or your own iCloud.

If you're unhappy with how we handle your data, you can complain to your regulator: the Information Commissioner's Office in the UK, the UAE Data Office, or the Data Protection Board of India.

Data retention

Vanta keeps your data on your device for as long as you keep the app installed. Uninstalling Vanta removes the App Group container along with it; the iCloud copy stays in your Apple Account and comes back on reinstall until you use Erase All Data, Delete Account, or remove Vanta's data under iOS Settings → Apple Account → iCloud. Authentication accounts (Firebase) are kept until you trigger Delete Account.

Children

Vanta is not intended for users under 13. We do not knowingly collect data from children.

Changes

If we change this policy, the updated version will replace this one in the next app build. The date below tells you when it was last updated.

Contact

Questions about privacy, or a request about your data? Email support@vantamoney.app. This policy is also at vantamoney.app/privacy. Vanta is published by Shashank Sahay.