Fortuna
Fortuna — Privacy policy
Track money, budgets and goals in an encrypted local database.
Effective and last updated: .
Who provides this app
Fortuna is provided by Timastra LLC, 5830 E 2nd St, Ste 7000 #38687, Casper, WY 82609, US. Privacy questions can be sent to support@timastra.com.
This policy explains the app’s data use, including optional features and differences between supported platforms.
Financial records and protection
Accounts, records, budgets, goals, debts, investments, categories, notes, attachment metadata and search history are stored locally in Fortuna. The database uses SQLCipher encryption; attachment files reside in private app storage. Keys, PIN credentials and backup secrets use platform secure storage. Fortuna does not require its own account or upload your financial ledger to an application backend. Android automatic backup and device transfer exclude private app data.
Android home-screen widgets
Home-screen widgets use a separate display snapshot in private app preferences. This snapshot is not encrypted by Fortuna and can contain account, budget, goal and planned-payment labels, plus amounts when the app lock and hide-amounts setting are off and Pro permits them. Enabling the app lock or hiding amounts masks widget amounts. Widget displays can be seen by anyone with access to your home screen. The snapshot is excluded from Android automatic backup and device transfer.
Network services and purchases
Google Play and RevenueCat handle purchases and entitlement refreshes. RevenueCat processes an anonymous app-user ID, technical device information, purchase history and store tokens; Fortuna does not supply financial records, balances, notes or attachments. Optional Frankfurter exchange-rate requests send currency codes. CoinGecko price requests send public asset identifiers and quote currency, not quantities or portfolio values. Network providers receive IP addresses and connection information. The current app has no live usage or crash telemetry.
Backups and sharing
Manual backups are encrypted on your device with your passphrase. Scheduled backups use a device-keystore secret and stay on your device. Automatic Google Drive upload is not available. CSV, PDF, chart images, clipboard content and printing can contain the financial data you choose and are not encrypted backup archives. A destination you select controls its copy. Support diagnostics are previewed and copied only by your action and exclude ledger content and receipts.
Retention and deletion
Use the app's record controls to remove unwanted information. For a full Android reset, clear app storage; preserve an encrypted backup first only if you intend to keep a copy. Delete exported reports, shared files and backup archives separately. Store and RevenueCat records follow their retention requirements; local deletion does not cancel purchases or remove provider records. Contact support for privacy requests about provider-linked app records without sending your financial ledger or backup passphrase.
View deletion instructions and request help.
Support messages and your privacy choices
If you contact us, we receive your email address, message and any attachments you choose to send. We use them to respond, troubleshoot and handle privacy requests. Email and hosting providers process these communications and ordinary connection information. We retain correspondence as needed to resolve the request and meet applicable recordkeeping obligations; you may request deletion of correspondence.
You may request access, correction, export or deletion of personal information we hold, or raise an objection or withdraw consent where applicable. Local-only records must be managed on your device because we do not hold a remote copy. Optional device permissions can be revoked in system settings. Service providers may process data outside your country under their own policies; security also depends on your device and any destinations you choose for exports.
Contact and policy changes
Email support@timastra.com for Fortuna privacy questions. Include the app name and enough non-sensitive information to identify your request. Never send passwords, authentication codes, recovery keys or private health, financial or photo backups. We may need to verify ownership before releasing or deleting hosted records.
Material changes to the app's data practices will be reflected in this policy with an updated date and in the app where appropriate. Visiting this page is also covered by our website privacy policy.