Privacy
Two separate things, kept separate here: what the app does with your finances, and what this website knows about your visit.
The app
My Financial Life stores your data in a single file on your own computer. There is no account, no cloud, and no server belonging to us — the app cannot send your finances anywhere because there is nowhere for them to go. It makes network requests only for two optional features you switch on yourself, using your own API keys: exchange rates and investment prices. Neither sends any information about your accounts or transactions. The app is fully functional with no network connection at all.
The file is plain SQLite, kept in ~/Documents/My Financial Life/. Installing,
upgrading or removing the app never touches it, and backing it up is your business, not ours.
This isn’t a policy position we could quietly change: it is how the software is built, and
the source is public if you want to
check.
The two optional services
- Exchange rates — for multi-currency accounts and reports. You supply your own API key. The request asks about currencies, not about you.
- Tiingo — security prices and price history, again with your own key. It receives the ticker symbols you ask about; it does not receive your holdings, quantities, balances or transactions.
Leave both switched off and the app never makes a network request at all.
This website
The site is static and deliberately minimal. There is no analytics, no tracking pixel, no advertising network, and no cookie banner because there are no tracking cookies to consent to.
- Hosting. The site is served by Cloudflare, which processes standard request data (IP address, user agent, the page requested) to deliver pages and protect against abuse.
- Local storage. Your light/dark choice is remembered in your own browser
under the key
mfl-theme. It never leaves your device and isn’t sent to us. - Web font. Pages request the Inter font from
rsms.me, so your browser contacts that host. If it’s unavailable, the site falls back to a system font and works normally. - Downloads. The download buttons point at GitHub Releases, so GitHub serves the file and sees that request under its own privacy statement.
There is nothing to sign up for, no newsletter, and no forms — the site collects nothing from you directly.
If you email us
Emailing hello@garelochsoft.com means we hold your message and address for as long as it takes to help you and to keep a sensible record of support history. We don’t add you to anything, and we don’t pass it on. Bug reports are often better as a public GitHub issue — bear in mind that those are public, so don’t paste real figures into one.
My Financial Life and My Retirement Life
My Retirement Life is the sister app. A future, user-initiated export will let you move data from one into the other: a file you choose to create and move, on your own machine. There is no server-to-server transfer, because there are no servers.
Your rights
Where Garelochsoft Ltd is the data controller — this website, and any email you send us — UK GDPR gives you the right to ask what we hold, to have it corrected, and to have it deleted. Given the above, in practice that means your emails. Write to hello@garelochsoft.com and we’ll deal with it.
This page describes how the software and site actually behave today, in plain language, rather than defensive boilerplate. If that behaviour changes, this page changes with it. Owner to add: the registered company address, once the entity is formed.
See also the Licence & terms.