Your data.
The details.

Developer and contact

Boryn is an iPhone personal finance app by Xefiro. For privacy questions, contact boryn_support@xefiro.io.

This policy describes Boryn’s current data handling, including its beta distribution through TestFlight.

Records stored on your device

Boryn stores financial records locally using Apple’s SwiftData framework. Records can include transactions, amounts, currencies, dates, merchant or source-party information, notes, account names and balances, categories, account mappings, and your app settings.

Transactions received through supported workflows can also retain extracted source facts as source evidence. This evidence is separate from the editable ledger presentation. The Email workflow does not retain the raw email body in Boryn, but extracted financial facts can be retained.

Boryn does not require an account and does not operate a financial-data upload server or cloud-sync service. This does not mean information can never leave the device: exports, system services, and workflows you choose can process information elsewhere.

Shortcuts and external workflows

Wallet capture uses a personal automation you configure in Apple’s Shortcuts app, which passes selected transaction fields to Boryn’s Add Transaction action. Boryn does not read Wallet directly.

For an Email extraction workflow, Boryn can generate instructions through Get Prompt and receive extracted transaction data through Add Transaction. You supply the source content to the model or service you choose. Boryn does not read Mail or notifications and does not run an extraction model itself.

A Shortcut may send financial or other personal information to Apple Intelligence, a third-party model, or another service. Processing depends on the workflow, service, and settings you select. Consult that service’s privacy information before sharing sensitive content, including Apple’s ChatGPT extension disclosure when relevant.

Backups and exported files

You can create portable backups containing financial records and app settings, restore from a backup, and share backup files using the system share sheet. Boryn saves portable .borynbak backups in its Backups folder under On My iPhone.

Backup files are not encrypted by Boryn. Anyone who obtains a copy may be able to read its contents. Exports of transaction activity and diagnostic logs may also contain financial or technical details.

When you move or share a file through Files, iCloud, email, or another destination, that provider’s handling and privacy practices apply. Deleting or changing a record inside Boryn does not change a previously exported copy. Device-level backup handling also depends on your Apple settings.

Local activity and diagnostics

Boryn keeps local transaction activity and technical diagnostic logs to help explain processing outcomes and troubleshoot issues. These can include captured transaction fields, added or skipped outcomes, validation errors, and technical events.

Diagnostic-log retention is configurable as Daily, Weekly, or Monthly (1, 7, or 30 days), with cleanup performed by the app. This setting is not a retention period for your financial ledger or exported copies.

The current beta has no Boryn-owned analytics, behavioural tracking, advertising tracking, or third-party analytics SDK. Local logs are not the same as Apple’s separately handled diagnostics.

Apple services and TestFlight

Apple processes information in connection with its platforms and distribution services. When you test Boryn through TestFlight, Apple automatically collects crash logs and usage information and shares relevant testing information with Xefiro. Apple also collects and shares feedback you submit, which can include comments, screenshots, and device details. If you join through a public link, your name and email address are not displayed to Xefiro as part of your tester invitation. You may choose to provide an email address when submitting feedback, and information you include in feedback may identify you. Direct email invitations can make your name and email address visible to Xefiro. Xefiro uses testing information to investigate issues and improve Boryn and does not share TestFlight testing information with third parties.

App Store diagnostics may also be made available through Apple’s services under the applicable platform settings and terms. See TestFlight & Privacy and Apple’s privacy information. These services have their own handling and retention practices. Testing information held by Xefiro is kept only as needed to investigate issues, improve Boryn, and meet applicable obligations. You may request access or deletion through the privacy contact below; Xefiro does not control copies retained by Apple.

Support and sharing

If you email support, the developer receives your email address, message, and attachments through the support mailbox and uses them to respond and investigate the issue. Only send information needed for your request; redact financial details from screenshots and logs.

Boryn has no in-app advertising or financial-data upload service. Information can still be shared when you export a file, run an external workflow, submit feedback, or contact support. The receiving service’s terms apply.

Contact boryn_support@xefiro.io about information you have sent directly to support. Support correspondence and attachments are kept only as needed to respond to your request, investigate issues, and meet applicable obligations. You can request deletion by emailing this address. Any information that must be retained to meet an applicable obligation is kept only for that purpose. Xefiro does not sell your personal information or use support messages for advertising.

Retention and deletion

Your ledger and settings remain in local storage until you change or remove them. The Reset Transaction Data action deletes transactions and balance reconciliation history after confirmation; it does not reset all app data. Accounts, account mappings, categories, source evidence, replay history, card statements, preferences, pending imports, backups, and diagnostic logs remain. Retained source evidence loses its links to deleted transactions.

Manage accounts, categories, and account mappings through their respective app controls; deletion may be restricted where records are still in use. To remove retained source details, open Settings → Source Evidence, select an entry, and choose Delete Source Evidence. This does not delete its transaction or Email replay protection. Diagnostic logs are cleaned up according to the configured retention setting when the app performs cleanup.

To remove Boryn and its app-local data from your iPhone, use Delete App in iOS Settings → General → iPhone Storage → Boryn. Offload App keeps documents and data and is not a data-deletion operation. Separately check Files and any device or iCloud backups for copies you want to remove. Deleting app-local data does not delete exported files, external workflow records, or information already submitted to support or Apple.

Delete backup files separately using the backup controls or Files. Remove copies from every destination where you saved or shared them. Restoring an older backup can reintroduce records that were deleted after that backup was created.

Policy updates

This policy will be updated when Boryn’s data handling changes, with an updated effective date. Contact boryn_support@xefiro.io with privacy questions or requests to access or delete information held by Xefiro, including support correspondence and testing information. Xefiro cannot access your on-device ledger or erase copies held by Apple or another service; use that service’s controls or contact the provider for those copies.