Separis

Privacy Policy

Separis keeps your financial records on your device. We do not run an account server, sell your data, show ads, or track you across apps.

Last updated 7 October 2026

Privacy details

Who this policy covers

This policy applies to the Separis mobile app and the Separis website. “We” means the Separis team at Basity. Questions or privacy requests can be sent to [email protected].

Data stored on your device

Separis stores the information you enter—such as wallets, transactions, categories, notes, preferences, and attached photos—in the app’s private storage on your device. PIN verification data is stored locally. The operating system’s app sandbox and device security protect local storage. We do not receive this content.

No Separis account or analytics

The app does not require an account with us or automatically collect your name, email address, contacts, location, advertising identifier, or usage analytics. Separis contains no advertising or third-party tracking SDK. If you contact support, we receive the sender address, message, and any attachment you choose to send.

Optional encrypted backup

If you enable backup, Separis encrypts your vault and supported attachments on your device before sending them to the provider you choose. Available providers may include iCloud, Google Drive, or Dropbox, depending on your device and app version. The encryption key is derived from your Recovery Code; we do not receive or keep that code and cannot decrypt your backup.

Recovery Code storage

Separis stores the Recovery Code in the operating system’s secure credential storage. On Apple devices it may sync to your other devices through iCloud Keychain when that feature is enabled. Keychain items may remain available after the app is removed so that a reinstall can restore access. We cannot see or retrieve the code.

Cloud provider access

Google Drive and Dropbox require you to authorize Separis with those services. Separis stores the resulting access token in secure device storage and uses it only to manage its own app folder. iCloud uses the Apple account already configured on your device. Your provider processes account and connection data under its own privacy policy. We do not receive your provider password.

Market-price requests

When Market prices is enabled, Separis requests public gold prices and exchange rates from gold-api.com, goldprice.dev, and open.er-api.com. These requests do not include your wallet names, balances, transactions, Recovery Code, or an app account identifier. A provider may receive technical connection data such as your IP address and the requested base currency. You can turn Market prices off in Settings.

Photos and camera

Separis asks for camera or photo-library access only when you choose to capture or select an image. Selected images are copied into the app’s private storage and are included in the encrypted backup when supported and backup is enabled. They are not sent to us.

Purchases

Premium purchases are handled by Apple’s App Store or Google Play. Separis asks the store for product information and whether the device’s store account has an entitlement so it can unlock features. Payment details and store-account information are handled by the store, not by us.

Network activity, sharing, and sale

We do not sell or rent personal data. Separis checks the device’s app store for products and entitlements when it starts. It also connects to a market-price service when that setting is enabled, to your selected cloud provider when you use backup, and to your mail app when you choose to contact support. We may disclose information you send us when required by law or when necessary to protect users and the service.

Retention and deletion

Local ledger data remains until you erase it in Separis or remove the app. Erasing a phone does not delete an existing cloud backup or a Recovery Code retained by the operating system’s credential storage. Before deleting a cloud backup, set every other synced device to This phone only; otherwise a later edit may recreate the backup. Then use Delete backup on one connected device and erase its local data if desired. A provider may retain recoverable versions or service records under its own retention policy. Support emails remain only as long as reasonably needed to answer the request and meet legal requirements.

Recovery and security

Keep your Recovery Code private. Anyone with the code and your encrypted backup may be able to open it. If you lose the Recovery Code and every device that still holds the key, we cannot recover your backup. No storage or transmission method is guaranteed to be completely secure.

Children

Separis is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has sent personal information to support, contact us so we can delete it.

Website

This website uses no analytics, advertising, or cookies set by Separis. Its hosting provider may process basic request and security logs, such as IP address, browser information, and request time, to deliver and protect the site.

Changes to this policy

We may update this policy when Separis changes. The date above shows the latest revision. Material changes will be presented in the app or on this page as appropriate.

Contact

Email [email protected] with the subject “Separis Privacy”.