Sandouq — Privacy Policy
Last updated: 2 May 2026
Short version: Sandouq is a local-first cash book. Your data lives on your device. If you turn on iCloud sync, it syncs through your own iCloud account — we never see it. There is no third-party analytics, no tracking, no ads.
Who we are
Sandouq (صندوق) is an iOS app for keeping a personal or family cash book. This privacy policy describes how the app handles your data.
Data we collect
None on our servers. Sandouq does not have a backend. Specifically:
- We do not run analytics SDKs.
- We do not run advertising SDKs.
- We do not collect crash logs to our own servers.
- We do not have user accounts, passwords, or sign-in.
Data stored on your device
The app stores everything you enter — cash books, transactions, categories, tags, people, attached receipt images, audit log entries — in a local database on your device using Apple's SwiftData framework.
iCloud sync (optional)
If you enable iCloud sync in Settings, your data syncs through Apple's CloudKit service into your own iCloud account. This means:
- The data is end-to-end visible only to you and to anyone you explicitly share a cash book with.
- It travels through Apple's infrastructure, governed by Apple's Privacy Policy.
- The Sandouq team has no access to your iCloud container.
Sharing a cash book
You can invite other Apple ID users to collaborate on a single cash book using Apple's CloudKit Sharing. The invited person needs an Apple ID and the Sandouq app to open the share. The "Allow public link sharing" Setting controls whether the invitation can be delivered through any channel (WhatsApp, Telegram, …) or only through Apple's first-party clients (iMessage, Mail). Read access is always gated by Apple ID acceptance — a public link only widens the delivery path, not the access control.
Camera, Photo Library, Face ID
The app asks for these permissions only when you actively use the related feature:
- Camera — to scan a receipt with the camera.
- Photo Library — to attach an existing photo as a receipt.
- Face ID / Touch ID — to unlock the app if you enabled the App Lock.
None of this data leaves your device, except as part of your own iCloud sync described above.
Data retention
Your data stays on your device until you delete it (single transaction, whole cash book, or by deleting the app entirely). If iCloud sync is on, deletions propagate through your iCloud container. We can not retrieve data after you delete it because we never had access to it.
Children's privacy
Sandouq is not directed at children under 13. We do not knowingly collect data from children — and as described above, we do not collect personal data from anyone.
Changes to this policy
If this policy changes in any material way, the "Last updated" date at the top will change and the new version will be linked from inside the app on the next release.
Contact
If you have any question about how Sandouq handles your data, write to ba6ylon@pm.me.