Privacy Policy

Effective 29 October 2026. This policy explains what information the Skien app handles and your rights. In short: without an account, Skien keeps your information on your phone. If you create an account, it is also stored on servers in the EU so you can use it on other devices. Skien never asks for your bank login, does not track you across apps or websites, and never sells your data.

Skien is published by SIA "NordF", registration number 50203736551, VAT number LV50203736551, Vesetas iela 24-45, Rīga, LV-1013, Latvia ("we", "us"). We are the controller of personal data processed through the app.

You can contact us by email at support@nordfunded.com or by post to SIA "NordF", Vesetas iela 24-45, Rīga, LV-1013, Latvia.

Expenses, income, accounts and budgets, subscriptions, savings goals, spending limits, categories, shared spaces, your household answers (country, how many people share the costs or depend on you, and whether you pay rent or a mortgage) and your settings: you type these in, and they are saved on your device. If you do not create an account, we do not receive them.

If you create an account: your name, email address and invite code, your password (stored only in scrambled, hashed form that nobody can read), and, if you use Sign in with Apple, the identifier Apple gives us. The information above is then also saved in your account on our servers in the European Union (Paris, France), so you can sign in on another phone or on skiien.nordfunded.com and find it there. In the app, each account can only be read by the person who owns it, except what you share with friends (see Sharing and friends). With Sign in with Apple you choose whether to share your real email or a private relay address.

Encryption: everything travels over encrypted connections (TLS) and is stored on encrypted disks. If you turn on Settings → Encryption, your transactions, income, accounts, budgets, goals, categories and settings are encrypted on your device before they are saved to your account, with a key that stays on your devices and a recovery key only you have; we cannot read that data and cannot recover it if you lose the recovery key. Without Encryption turned on, the data in your account is protected by access rules, and our administrators and our hosting provider could technically access it on the servers; we only do so to keep the service running or when the law requires it. Not covered by Encryption: shared spaces, what friends see, challenges, friend requests and notifications (they have to be readable by the other people involved), messages you send us, and daily backups made before you turned it on, which are deleted after 14 days.

Apple Pay auto-log: if you set it up, an automation on your iPhone passes the amount, shop name and card name of each Apple Pay payment to Skien. Skien does not receive anything else from Apple Wallet.

Face ID: if you turn on Face ID lock, iOS checks your face or passcode. Skien only learns whether the check succeeded. We never receive biometric data.

Notifications: charge reminders are scheduled on your device by iOS and never pass through our servers. When someone sends you a friend request, accepts yours, invites you to a challenge or adds you to a shared space, our server stores a notification for you (who it is from and what kind, never amounts) and, if you allow notifications, sends a short message with their name to your iPhone through Expo's push service and Apple Push Notification service. For this your device registers a push token with your account; it is removed when you sign out.

We do not ask for, store or use your bank login or card details. Skien does not connect to your bank and never moves money.

We do not use advertising tools, do not track you across other apps or websites, and do not sell or share your personal data.

To fix crashes and see which parts of the app are hard to use, the app can send anonymous technical events: which screen was opened, steps such as finishing the introduction or adding a transaction (without the amount, name or any text you typed), the app version and the type of device (iPhone, Android or web), and, when something crashes, the error message and where in the code it happened.

These events carry no name, email, account id or device id. Each time the app starts it makes up a random session number that is kept only in memory and never saved on your device, and the service is told not to look up your location. We cannot link these events to you.

When something goes wrong in the app or on the website, a short error report is also saved in our own database (Supabase, EU): the error message and where in the code it happened, the type of device and the app version. It contains no name, email or account id, and email addresses or long numbers that might appear in an error message are removed first. Reports are deleted after 30 days. If the app closes because of a crash, the report is kept on your device and sent the next time you open Skien.

If you use Settings → Contact us, we receive your message, the topic you chose, the email address you give us for a reply (optional), the app version and type of device, your account id if you are signed in, and the internet address the message came from (to stop spam). We use this only to answer you and to improve Skien.

Supabase, Inc. hosts our database and logins on servers in the European Union and sends account emails (confirming your email address, resetting your password). Vercel, Inc. hosts the Skien website. PostHog, Inc. receives the anonymous usage counts and error reports described above, on servers in the European Union (Frankfurt, Germany). 650 Industries, Inc. (Expo) passes friend notifications on to Apple Push Notification service: it receives your push token and the notification text (a name and what happened), not your financial data. All act on our instructions under data processing agreements; where data could be accessed from outside the EU, they use the European Commission's Standard Contractual Clauses.

When you share an invite link or code, Skien opens the share sheet on your device and the message is sent through the app you choose (for example Messages or WhatsApp). That app handles the message under its own privacy policy.

Members of a shared space see the expenses you split with them and their share, never the rest of your month. Shared spaces are stored on our servers so every member sees the same space; leaving a friend does not remove the spaces you share.

If you choose a username, people can add you as a friend by typing it exactly; there is no public list or search. People you have a friend request with, and people in your shared spaces, see your username and name. Accepted friends also see your progress: your level, streak, score, whether you are within your budget this month (yes or no) and your savings goals in percent. They see amounts (what you spent this month, your budget and what your savings goals hold) only if you switch on "Share amounts with friends", and never your transactions. In a challenge you start or join, the players see each other's scores, which are percentages or numbers of days. You can remove a friend or leave a challenge at any time.

We process your account and the data saved in it to provide the service you ask for, including keeping it in sync between your devices (Article 6(1)(b) GDPR, performance of a contract). Without an account, everything stays on your device under your control.

We process messages you send us, anonymous usage counts and error reports, and nightly safety copies of account data on the basis of our legitimate interest in answering you, keeping Skien working and protecting your data against loss (Article 6(1)(f) GDPR).

Information on your device stays there until you delete it: remove an expense or goal, sign out in Settings, use Reset to sample data, or delete the app.

Your account and everything saved in it are kept until you delete the account in Settings → Delete account. That removes your login and data from our database straight away, together with our own nightly safety copies of your data (which are otherwise kept for 14 days); copies in our service provider's backups are overwritten within 30 days.

Messages you send us are deleted after one year. Error reports in our database are deleted after 30 days; anonymous usage counts are kept for up to one year.

Under the EU General Data Protection Regulation you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can see, change and delete your information in the app at any time, and delete your whole account in Settings. For anything else, including a copy of your data, contact us using the details above.

You can also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or the data protection authority where you live.

Skien is not directed at children under 16, and we do not knowingly collect their personal data.

When we change this policy we update the effective date above.