Effective October 9, 2026.
Summary
- Omnifolio has no account and no server. The developer neither receives nor sees your data.
- Your ledger is stored on your device and, if you turn it on, in your private iCloud.
- The app contacts public price and image sources, sending only what they need (for example the name of a skin or a stock ticker), and only the services you connect yourself (Gmail, Steam, Alpha Vantage).
- No ads, no analytics, no tracking, no sale of data.
Who is responsible
Omnifolio is published by Magomed Mazaev, an independent developer. For any question about this policy or your data, write through the support page.
What the app stores, and where
Everything you enter in Omnifolio makes up your ledger: your holdings, purchases, subscriptions, invoices, photos, monthly statements and settings. It is stored on your device. If iCloud is enabled for Omnifolio, it is also copied to the private database of your iCloud account (CloudKit), so that your iPhone, iPad and Mac share the same ledger. That private database is only accessible with your Apple account; the developer has no access to it. Keys and tokens you give the app (Gmail, Alpha Vantage) stay in the device keychain.
What leaves your device
To show prices, exchange rates and images, the app contacts the services below, and only them (the same list is shown in the app, behind the padlock). Like any connection, each also receives your device's IP address; its own privacy policy applies.
| Service | What it receives | When |
|---|---|---|
| Frankfurter | The currencies to convert (ECB rates) | For purchases in a foreign currency |
| CoinGecko | The identifiers of the cryptocurrencies you hold | At each update, and for their logos |
| CSFloat | The exact name of a skin | After an update, one skin at a time |
| Steam | Your Steam ID (to read your public inventory) or the name of a skin | If you sign in with Steam, and to search for a skin or its image |
| Alpha Vantage | A stock ticker and your Alpha Vantage key | At each update, if you provided a key |
| GOAT | The name or style code of a pair, its size and condition | When you search for a pair, update it, or pick its image |
| Financial Modeling Prep | A stock ticker | For its logo |
| TCGdex, Scryfall, YGOPRODeck | The name, set or number read on a card | When you sort or search for a card, and at each update |
| Bulbapedia | Nothing but the address of a reference image | Once, the first time you photograph the back of a card |
| Google (Gmail) | Your sign-in, then a search for receipts and parcels | If you connect Gmail, at each refresh (see below) |
| Apple (iCloud) | Your ledger, in your private database | If iCloud is enabled for the app |
Gmail
Connecting Gmail is optional. If you do, Omnifolio asks Google for read-only access to your mail (https://www.googleapis.com/auth/gmail.readonly), in a sign-in window run by Apple and Google: the app never sees your password. It uses this access for one purpose only: finding your purchase receipts and parcel notifications from the last 90 days. It reads the sender, subject and date of the messages found, then the text and attached PDF invoice of those that are receipts, on your device, to fill in the merchant, amount, date and items of a purchase. The receipt filled in this way, and its invoice, are added to your ledger.
No message is ever modified, sent or deleted. Nothing that is read is transferred to the developer or to any third party, used for advertising, or used to train artificial intelligence models, and no human reads it. The access token stays in your device keychain; “Délier Gmail” (disconnect) in the app revokes it with Google and deletes it. You can also remove access from your Google account.
Omnifolio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Steam
Signing in with Steam happens on Steam's own page: the app never sees your password and only receives your public Steam ID, which it uses to read your public inventory and find your skins.
Camera and photos
Photos you take to read a card, a shoe box label or an invoice are analyzed on your device and are not sent anywhere. Those you choose to keep (a photo of a pair, an invoice) are added to your ledger.
Face ID and Touch ID
The ledger lock goes through the system: the app only receives “success” or “failure”, never your biometric data.
Notifications
Reminders (an upcoming charge, the end of a return window) are local notifications scheduled on your device. When iCloud is enabled, Apple may wake the app with a silent notification to update your ledger; it does not contain your data.
Support and feedback
If you report a bug or an idea, your message opens on the support page and is sent when you tap “Envoyer” (Send). It contains your text, what the app attaches to help understand it (the screen shown, the device model, the app and system versions, its latest errors) and, if you provide it, your email address for a reply. The form forwards it by email to the developer through the Web3Forms service. It is used only to reply and to fix the app, kept as long as needed, and deleted on request.
What the app does not do
No advertising, no analytics, no cross-app or cross-site tracking, no sale or sharing of data, no third-party analytics tools. The app does not use any artificial intelligence service on your data.
Children
Omnifolio is not directed to children and does not knowingly collect any data about them.
Retention and deletion
- Deleting the app erases the ledger from your device.
- To also erase the iCloud copy: Settings › your name › iCloud › Storage › Omnifolio › Delete Data.
- Gmail and Steam can be disconnected from the app; Gmail also from your Google account.
Your rights
Your data stays with you: you can view, export and delete it from the app. For a message sent to support, you can ask to view, correct or delete it through the support page. You may also lodge a complaint with your data protection authority (in France, the CNIL).
Changes
If this policy changes, the new version will be published here with its date. A change that would widen what the app sends would also be announced in the app.