Skip to content
All guides

Privacy · 3 min read

Where your data actually lives

No bank connection, offline by default, analytics off unless you turn them on. What that means in practice.

Completo is a manual tracker, and that is a privacy decision as much as a product one.

There is no bank connection

The app never asks for online banking credentials, because it never needs them. There is nothing to leak, nothing to revoke, and no third-party aggregator holding a read-only key to your account.

The phone is the primary copy

Everything is stored in a database on the device. With no account and no sync, your financial data never leaves the phone at all.

Sync is opt-in, and reversible

Signing in enables cloud sync so a second device or a replacement phone can pick things up. Signing out clears the data from that device. Deleting your account removes the server-side copy — from inside the app, not by emailing support.

Analytics default to off

Product analytics are opt-in, off unless you switch them on, and hosted in the EU. They record which steps of onboarding people finish — never transaction amounts, payees or balances.