OfftabIn short
Offtab collects nothing, and there is no Offtab server to collect it on. No account, no analytics, no advertising, no bank login. What you enter stays in Offtab's own storage on this iPhone — unless you switch on iCloud backup, which puts a copy in your own iCloud, encrypted on this device before it goes, and unreadable to us.
What Offtab stores
The entries you log, the accounts and balances you enter, your commitments and budgets, your display preferences, and the optional name and birthday you can add in Settings. All of it is written to Offtab's own storage on this device.
What Offtab sends
Nothing to us. There is no Offtab server, no account to create and no email address to hand over, and no bank connection — you tell Offtab what you spent instead of giving it your bank login. Two of Apple's services are the only things this app can reach, and only when you ask it to: iCloud, if you switch on backup, and the App Store, if you buy Plus. Neither of them sends anything to us.
iCloud backup
Off unless you turn it on in Settings. When it is on, Offtab keeps one copy of your ledger — entries, accounts, commitments, budgets, your display preferences, and the name and birthday you can add in Settings — in a private area of your own iCloud that only Offtab on your Apple Account can open. It is encrypted on this iPhone before it is sent and stays encrypted in iCloud. There is no Offtab server in the path and no way for us to read it. Under standard iCloud protection Apple holds the keys; if you turn on Advanced Data Protection in your Apple Account settings the keys never leave your own devices, which is what makes it end-to-end encrypted. Turning backup off stops further copies but leaves the one already there — the backup screen has a button that deletes it.
Receipts and photos
Receipt scanning uses Apple's Vision framework, which recognises text entirely on this device. The photo is not uploaded, is not kept by Offtab after the scan, and is not shared with anyone.
Face ID and Touch ID
If you turn on Lock Offtab in Settings, Face ID, Touch ID or your iPhone passcode is checked by iOS itself, and Offtab never receives your face, fingerprint or passcode — only whether the check passed.
The assistant
When your iPhone supports it, Offtab asks the language model built into iOS to read what you type. That model runs on this device, and this app asks for nothing else: your words are not sent to Apple, to us, or to anyone. When it is unavailable Offtab falls back to its own built-in parser, which is also on this device. Nothing you type is ever uploaded to be understood — the entry it becomes is a ledger row like any other, and travels only if you turn on backup.
Analytics and tracking
There are none. Offtab contains no analytics framework, no crash reporter, no advertising identifier, and no third-party tracking of any kind. Nobody, including us, can see how you use it.
Deleting your data
Settings can erase every entry on this iPhone, and deleting the app removes the rest with it. A backup in iCloud is a separate copy, and neither of those deletes it: removing the app leaves it in place, and erasing the ledger only replaces it the next time backup runs, and only while backup is still switched on. The iCloud backup screen has its own “Delete backup from iCloud”, and using it is what makes the deletion complete. Once the copy on this device and the copy in iCloud are both gone, nothing is recoverable — so if you want to keep a record, export your ledger from Settings or keep a device backup first.
If this ever changes
If a future version of Offtab does something different with your data, this policy will say so plainly before that version ships, and the app will tell you it changed rather than quietly updating the text.
Questions go to the support address on Offtab's App Store listing. You can also reach us directly at support@starvostech.com.
These documents also ship inside the app, word for word as written here. This site sets no cookies and includes no analytics, no trackers and no external scripts.