Legal
Privacy policy
Last updated 4 November 2026
The short version. FinvestLens has no account to sign up for, no analytics, and no server of ours for your data to reach. Your book is a file you keep — on your device, or in your own iCloud Drive or Box account. We never see it.
Who we are
FinvestLens is published by Hello Tham Pty Ltd(“we”, “us”). For anything in this policy, write tofinvestlens@hellotham.com.
What we collect
Nothing. We operate no servers for FinvestLens, run no analytics or crash reporting, use no advertising or tracking SDKs, and have no way to identify you. The app’s privacy manifest declares no collected data types and no tracking domains.
Where your financial data lives
Your book is a single file you choose the location of — local disk, iCloud Drive, a network share, or your own Box account. It is read and written by the app on your device, and goes only where you chose to keep it. Attachments you link are likewise files on your storage.
If you keep your book in iCloud Drive, it syncs between your owndevices through your Apple Account, under Apple’s terms and encryption. That is a transfer between you and Apple; it does not involve us.
If you keep your book in your own Box account, the app keeps a copy on your device while you work on it and sends it back to Box when you save with ⌘S, close the book, switch books or quit (on iPhone and iPad, also when you leave the app). A version saved by another of your devices is never replaced: you are asked what to keep. That is a transfer between you and Box, under Box’s terms; it does not involve us.
Apple Intelligence and document reading
Smart Import, categorisation suggestions, budget proposals and report commentary are produced by Apple Intelligence — on your device, or, where Apple offers it and you allow it, on Apple’s Private Cloud Compute (below). You can use a model of your own instead, which runs on your device; we provide no model and download none. The contents of the documents you point the app at are never sent to us.
Network requests the app can make
FinvestLens contacts a network service in four situations, all of them your choice.
Prices and company data. When you update prices, look up a security or fetch a company’s details, the app asks the provider you chose: Yahoo Finance, Stooq, EODHD (eodhd.com), Alpha Vantage (alphavantage.co), Finnhub (finnhub.io), Twelve Data (twelvedata.com), FIIG (bond prices) or Wilson Asset Management (its own funds’ unit prices). The request carries the ticker, ISIN or fund name — never an amount, a balance or anything else from your book — and goes from your device straight to that provider, under its own privacy policy. If you turn on Auto-refresh for a book, which is off until you do, the app also updates its prices when you open it and every six hours while it stays open.
The consumer price index. When you choose Fetch from the RBA in the tax estimator, the app downloads the Reserve Bank of Australia’s public table of the consumer price index (rba.gov.au), which the capital gains reports use for indexation. The request carries nothing from your book.
Your own Box account. If you connect a Box account, the app signs you in on Box’s own page and then reads and writes the book files you choose there — with Open from Box…, and when you save as described above — directly between your device and Box. We never see your Box credentials or your files.
Apple’s Private Cloud Compute. Where it is available, FinvestLens can use Apple’s Private Cloud Compute. Match Attachments, Categorise from Attachment and Split from Invoice send the documents they read; Smart Import sends the invoices and dividend statements it finds; and commentary on reports and reviews, budget suggestions and the forecast outlook send the figures they are written from. Apple states that data processed by Private Cloud Compute is not stored or made accessible to Apple. The first time a command would use it, the app asks you; you can keep everything on your device instead, and change your answer at any time in Settings ▸ Apple Intelligence. A PDF imported as a bank statement is always read on your device, and Auto-Categorise and an import’s category suggestions always run on it. The disk image for Mac from this site does not use Private Cloud Compute at all: Apple offers it only to the App Store version.
If you do none of these, the app makes no network requests at all. It works entirely offline.
API keys and credentials
Keys for the keyed price providers, and the client secret and sign-in tokens of your Box app, are stored in the Keychain on the device you enter them on. They are never written into your book file and are never transmitted anywhere except to the service they belong to.
Local authentication
Where the app asks for Touch ID, Face ID or your password — to open a protected book, or to reach Emergency Records — that check is performed by the operating system. FinvestLens receives only a yes or no. It never sees your password or biometric data.
Children
FinvestLens is a general-purpose accounting application, not directed at children, and collects no data from anyone.
Your rights
Rights of access, correction, deletion and portability apply to data a publisher holds about you. We hold none. Your own data is in your own file: you can read it, change it, export it to GnuCash XML or a Ledger journal, or delete the file, all without asking us.
Changes to this policy
If this policy changes, the revised version will be published on this page with a new date. Material changes will also be noted in the release notes.